May 17 00:38:00.027887 kernel: Linux version 5.15.182-flatcar (build@pony-truck.infra.kinvolk.io) (x86_64-cros-linux-gnu-gcc (Gentoo Hardened 11.3.1_p20221209 p3) 11.3.1 20221209, GNU ld (Gentoo 2.39 p5) 2.39.0) #1 SMP Fri May 16 23:09:52 -00 2025 May 17 00:38:00.027916 kernel: Command line: BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200n8 console=tty0 flatcar.first_boot=detected flatcar.oem.id=ec2 modprobe.blacklist=xen_fbfront net.ifnames=0 nvme_core.io_timeout=4294967295 verity.usrhash=4aad7caeadb0359f379975532748a0b4ae6bb9b229507353e0f5ae84cb9335a0 May 17 00:38:00.027933 kernel: BIOS-provided physical RAM map: May 17 00:38:00.027942 kernel: BIOS-e820: [mem 0x0000000000000000-0x000000000009ffff] usable May 17 00:38:00.027952 kernel: BIOS-e820: [mem 0x0000000000100000-0x00000000786cdfff] usable May 17 00:38:00.027961 kernel: BIOS-e820: [mem 0x00000000786ce000-0x000000007894dfff] reserved May 17 00:38:00.027974 kernel: BIOS-e820: [mem 0x000000007894e000-0x000000007895dfff] ACPI data May 17 00:38:00.027984 kernel: BIOS-e820: [mem 0x000000007895e000-0x00000000789ddfff] ACPI NVS May 17 00:38:00.027997 kernel: BIOS-e820: [mem 0x00000000789de000-0x000000007c97bfff] usable May 17 00:38:00.028008 kernel: BIOS-e820: [mem 0x000000007c97c000-0x000000007c9fffff] reserved May 17 00:38:00.028018 kernel: NX (Execute Disable) protection: active May 17 00:38:00.028030 kernel: e820: update [mem 0x76813018-0x7681be57] usable ==> usable May 17 00:38:00.028042 kernel: e820: update [mem 0x76813018-0x7681be57] usable ==> usable May 17 00:38:00.028055 kernel: extended physical RAM map: May 17 00:38:00.028073 kernel: reserve setup_data: [mem 0x0000000000000000-0x000000000009ffff] usable May 17 00:38:00.028085 kernel: reserve setup_data: [mem 0x0000000000100000-0x0000000076813017] usable May 17 00:38:00.028098 kernel: reserve setup_data: [mem 0x0000000076813018-0x000000007681be57] usable May 17 00:38:00.028112 kernel: reserve setup_data: [mem 0x000000007681be58-0x00000000786cdfff] usable May 17 00:38:00.028122 kernel: reserve setup_data: [mem 0x00000000786ce000-0x000000007894dfff] reserved May 17 00:38:00.028132 kernel: reserve setup_data: [mem 0x000000007894e000-0x000000007895dfff] ACPI data May 17 00:38:00.028143 kernel: reserve setup_data: [mem 0x000000007895e000-0x00000000789ddfff] ACPI NVS May 17 00:38:00.028153 kernel: reserve setup_data: [mem 0x00000000789de000-0x000000007c97bfff] usable May 17 00:38:00.028164 kernel: reserve setup_data: [mem 0x000000007c97c000-0x000000007c9fffff] reserved May 17 00:38:00.028175 kernel: efi: EFI v2.70 by EDK II May 17 00:38:00.028191 kernel: efi: SMBIOS=0x7886a000 ACPI=0x7895d000 ACPI 2.0=0x7895d014 MEMATTR=0x77004a98 May 17 00:38:00.028203 kernel: SMBIOS 2.7 present. May 17 00:38:00.028216 kernel: DMI: Amazon EC2 t3.small/, BIOS 1.0 10/16/2017 May 17 00:38:00.028227 kernel: Hypervisor detected: KVM May 17 00:38:00.028240 kernel: kvm-clock: Using msrs 4b564d01 and 4b564d00 May 17 00:38:00.028253 kernel: kvm-clock: cpu 0, msr 3019a001, primary cpu clock May 17 00:38:00.028265 kernel: kvm-clock: using sched offset of 4248885680 cycles May 17 00:38:00.028280 kernel: clocksource: kvm-clock: mask: 0xffffffffffffffff max_cycles: 0x1cd42e4dffb, max_idle_ns: 881590591483 ns May 17 00:38:00.028293 kernel: tsc: Detected 2499.996 MHz processor May 17 00:38:00.028307 kernel: e820: update [mem 0x00000000-0x00000fff] usable ==> reserved May 17 00:38:00.028321 kernel: e820: remove [mem 0x000a0000-0x000fffff] usable May 17 00:38:00.028352 kernel: last_pfn = 0x7c97c max_arch_pfn = 0x400000000 May 17 00:38:00.028366 kernel: x86/PAT: Configuration [0-7]: WB WC UC- UC WB WP UC- WT May 17 00:38:00.028379 kernel: Using GB pages for direct mapping May 17 00:38:00.028392 kernel: Secure boot disabled May 17 00:38:00.028406 kernel: ACPI: Early table checksum verification disabled May 17 00:38:00.028423 kernel: ACPI: RSDP 0x000000007895D014 000024 (v02 AMAZON) May 17 00:38:00.028437 kernel: ACPI: XSDT 0x000000007895C0E8 00006C (v01 AMAZON AMZNFACP 00000001 01000013) May 17 00:38:00.028454 kernel: ACPI: FACP 0x0000000078955000 000114 (v01 AMAZON AMZNFACP 00000001 AMZN 00000001) May 17 00:38:00.028467 kernel: ACPI: DSDT 0x0000000078956000 00115A (v01 AMAZON AMZNDSDT 00000001 AMZN 00000001) May 17 00:38:00.028480 kernel: ACPI: FACS 0x00000000789D0000 000040 May 17 00:38:00.028493 kernel: ACPI: WAET 0x000000007895B000 000028 (v01 AMAZON AMZNWAET 00000001 AMZN 00000001) May 17 00:38:00.028503 kernel: ACPI: SLIT 0x000000007895A000 00006C (v01 AMAZON AMZNSLIT 00000001 AMZN 00000001) May 17 00:38:00.028516 kernel: ACPI: APIC 0x0000000078959000 000076 (v01 AMAZON AMZNAPIC 00000001 AMZN 00000001) May 17 00:38:00.028529 kernel: ACPI: SRAT 0x0000000078958000 0000A0 (v01 AMAZON AMZNSRAT 00000001 AMZN 00000001) May 17 00:38:00.028545 kernel: ACPI: HPET 0x0000000078954000 000038 (v01 AMAZON AMZNHPET 00000001 AMZN 00000001) May 17 00:38:00.028557 kernel: ACPI: SSDT 0x0000000078953000 000759 (v01 AMAZON AMZNSSDT 00000001 AMZN 00000001) May 17 00:38:00.028570 kernel: ACPI: SSDT 0x0000000078952000 00007F (v01 AMAZON AMZNSSDT 00000001 AMZN 00000001) May 17 00:38:00.030388 kernel: ACPI: BGRT 0x0000000078951000 000038 (v01 AMAZON AMAZON 00000002 01000013) May 17 00:38:00.030406 kernel: ACPI: Reserving FACP table memory at [mem 0x78955000-0x78955113] May 17 00:38:00.030420 kernel: ACPI: Reserving DSDT table memory at [mem 0x78956000-0x78957159] May 17 00:38:00.030434 kernel: ACPI: Reserving FACS table memory at [mem 0x789d0000-0x789d003f] May 17 00:38:00.030448 kernel: ACPI: Reserving WAET table memory at [mem 0x7895b000-0x7895b027] May 17 00:38:00.030463 kernel: ACPI: Reserving SLIT table memory at [mem 0x7895a000-0x7895a06b] May 17 00:38:00.030478 kernel: ACPI: Reserving APIC table memory at [mem 0x78959000-0x78959075] May 17 00:38:00.030492 kernel: ACPI: Reserving SRAT table memory at [mem 0x78958000-0x7895809f] May 17 00:38:00.030505 kernel: ACPI: Reserving HPET table memory at [mem 0x78954000-0x78954037] May 17 00:38:00.030519 kernel: ACPI: Reserving SSDT table memory at [mem 0x78953000-0x78953758] May 17 00:38:00.030533 kernel: ACPI: Reserving SSDT table memory at [mem 0x78952000-0x7895207e] May 17 00:38:00.030547 kernel: ACPI: Reserving BGRT table memory at [mem 0x78951000-0x78951037] May 17 00:38:00.030561 kernel: SRAT: PXM 0 -> APIC 0x00 -> Node 0 May 17 00:38:00.030576 kernel: SRAT: PXM 0 -> APIC 0x01 -> Node 0 May 17 00:38:00.030590 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x00000000-0x7fffffff] May 17 00:38:00.030607 kernel: NUMA: Initialized distance table, cnt=1 May 17 00:38:00.030621 kernel: NODE_DATA(0) allocated [mem 0x7a8ef000-0x7a8f4fff] May 17 00:38:00.030635 kernel: Zone ranges: May 17 00:38:00.030648 kernel: DMA [mem 0x0000000000001000-0x0000000000ffffff] May 17 00:38:00.030662 kernel: DMA32 [mem 0x0000000001000000-0x000000007c97bfff] May 17 00:38:00.030676 kernel: Normal empty May 17 00:38:00.030690 kernel: Movable zone start for each node May 17 00:38:00.030704 kernel: Early memory node ranges May 17 00:38:00.030718 kernel: node 0: [mem 0x0000000000001000-0x000000000009ffff] May 17 00:38:00.030734 kernel: node 0: [mem 0x0000000000100000-0x00000000786cdfff] May 17 00:38:00.030749 kernel: node 0: [mem 0x00000000789de000-0x000000007c97bfff] May 17 00:38:00.030763 kernel: Initmem setup node 0 [mem 0x0000000000001000-0x000000007c97bfff] May 17 00:38:00.030777 kernel: On node 0, zone DMA: 1 pages in unavailable ranges May 17 00:38:00.030791 kernel: On node 0, zone DMA: 96 pages in unavailable ranges May 17 00:38:00.030805 kernel: On node 0, zone DMA32: 784 pages in unavailable ranges May 17 00:38:00.030819 kernel: On node 0, zone DMA32: 13956 pages in unavailable ranges May 17 00:38:00.030833 kernel: ACPI: PM-Timer IO Port: 0xb008 May 17 00:38:00.030847 kernel: ACPI: LAPIC_NMI (acpi_id[0xff] dfl dfl lint[0x1]) May 17 00:38:00.030864 kernel: IOAPIC[0]: apic_id 0, version 32, address 0xfec00000, GSI 0-23 May 17 00:38:00.030878 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 5 global_irq 5 high level) May 17 00:38:00.030892 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 9 global_irq 9 high level) May 17 00:38:00.030906 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 10 global_irq 10 high level) May 17 00:38:00.030920 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 11 global_irq 11 high level) May 17 00:38:00.030934 kernel: ACPI: Using ACPI (MADT) for SMP configuration information May 17 00:38:00.030948 kernel: ACPI: HPET id: 0x8086a201 base: 0xfed00000 May 17 00:38:00.030962 kernel: TSC deadline timer available May 17 00:38:00.030976 kernel: smpboot: Allowing 2 CPUs, 0 hotplug CPUs May 17 00:38:00.030993 kernel: [mem 0x7ca00000-0xffffffff] available for PCI devices May 17 00:38:00.031007 kernel: Booting paravirtualized kernel on KVM May 17 00:38:00.031021 kernel: clocksource: refined-jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1910969940391419 ns May 17 00:38:00.031035 kernel: setup_percpu: NR_CPUS:512 nr_cpumask_bits:512 nr_cpu_ids:2 nr_node_ids:1 May 17 00:38:00.031050 kernel: percpu: Embedded 56 pages/cpu s188696 r8192 d32488 u1048576 May 17 00:38:00.031063 kernel: pcpu-alloc: s188696 r8192 d32488 u1048576 alloc=1*2097152 May 17 00:38:00.031078 kernel: pcpu-alloc: [0] 0 1 May 17 00:38:00.031092 kernel: kvm-guest: stealtime: cpu 0, msr 7a41c0c0 May 17 00:38:00.031105 kernel: kvm-guest: PV spinlocks enabled May 17 00:38:00.031122 kernel: PV qspinlock hash table entries: 256 (order: 0, 4096 bytes, linear) May 17 00:38:00.031136 kernel: Built 1 zonelists, mobility grouping on. Total pages: 501318 May 17 00:38:00.031150 kernel: Policy zone: DMA32 May 17 00:38:00.031166 kernel: Kernel command line: rootflags=rw mount.usrflags=ro BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200n8 console=tty0 flatcar.first_boot=detected flatcar.oem.id=ec2 modprobe.blacklist=xen_fbfront net.ifnames=0 nvme_core.io_timeout=4294967295 verity.usrhash=4aad7caeadb0359f379975532748a0b4ae6bb9b229507353e0f5ae84cb9335a0 May 17 00:38:00.031181 kernel: Unknown kernel command line parameters "BOOT_IMAGE=/flatcar/vmlinuz-a", will be passed to user space. May 17 00:38:00.031195 kernel: Dentry cache hash table entries: 262144 (order: 9, 2097152 bytes, linear) May 17 00:38:00.031209 kernel: Inode-cache hash table entries: 131072 (order: 8, 1048576 bytes, linear) May 17 00:38:00.031223 kernel: mem auto-init: stack:off, heap alloc:off, heap free:off May 17 00:38:00.031241 kernel: Memory: 1876640K/2037804K available (12294K kernel code, 2276K rwdata, 13724K rodata, 47472K init, 4108K bss, 160904K reserved, 0K cma-reserved) May 17 00:38:00.031255 kernel: SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=2, Nodes=1 May 17 00:38:00.031269 kernel: Kernel/User page tables isolation: enabled May 17 00:38:00.031283 kernel: ftrace: allocating 34585 entries in 136 pages May 17 00:38:00.031297 kernel: ftrace: allocated 136 pages with 2 groups May 17 00:38:00.031311 kernel: rcu: Hierarchical RCU implementation. May 17 00:38:00.031326 kernel: rcu: RCU event tracing is enabled. May 17 00:38:00.031366 kernel: rcu: RCU restricting CPUs from NR_CPUS=512 to nr_cpu_ids=2. May 17 00:38:00.031381 kernel: Rude variant of Tasks RCU enabled. May 17 00:38:00.031396 kernel: Tracing variant of Tasks RCU enabled. May 17 00:38:00.031411 kernel: rcu: RCU calculated value of scheduler-enlistment delay is 100 jiffies. May 17 00:38:00.031425 kernel: rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=2 May 17 00:38:00.031443 kernel: NR_IRQS: 33024, nr_irqs: 440, preallocated irqs: 16 May 17 00:38:00.031458 kernel: random: crng init done May 17 00:38:00.031472 kernel: Console: colour dummy device 80x25 May 17 00:38:00.031486 kernel: printk: console [tty0] enabled May 17 00:38:00.031501 kernel: printk: console [ttyS0] enabled May 17 00:38:00.031515 kernel: ACPI: Core revision 20210730 May 17 00:38:00.031530 kernel: clocksource: hpet: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 30580167144 ns May 17 00:38:00.031549 kernel: APIC: Switch to symmetric I/O mode setup May 17 00:38:00.031564 kernel: x2apic enabled May 17 00:38:00.031578 kernel: Switched APIC routing to physical x2apic. May 17 00:38:00.031594 kernel: clocksource: tsc-early: mask: 0xffffffffffffffff max_cycles: 0x24093623c91, max_idle_ns: 440795291220 ns May 17 00:38:00.031608 kernel: Calibrating delay loop (skipped) preset value.. 4999.99 BogoMIPS (lpj=2499996) May 17 00:38:00.031622 kernel: Last level iTLB entries: 4KB 64, 2MB 8, 4MB 8 May 17 00:38:00.031637 kernel: Last level dTLB entries: 4KB 64, 2MB 32, 4MB 32, 1GB 4 May 17 00:38:00.031655 kernel: Spectre V1 : Mitigation: usercopy/swapgs barriers and __user pointer sanitization May 17 00:38:00.031669 kernel: Spectre V2 : Mitigation: Retpolines May 17 00:38:00.031683 kernel: Spectre V2 : Spectre v2 / SpectreRSB: Filling RSB on context switch and VMEXIT May 17 00:38:00.031697 kernel: RETBleed: WARNING: Spectre v2 mitigation leaves CPU vulnerable to RETBleed attacks, data leaks possible! May 17 00:38:00.031711 kernel: RETBleed: Vulnerable May 17 00:38:00.031725 kernel: Speculative Store Bypass: Vulnerable May 17 00:38:00.031739 kernel: MDS: Vulnerable: Clear CPU buffers attempted, no microcode May 17 00:38:00.031754 kernel: MMIO Stale Data: Vulnerable: Clear CPU buffers attempted, no microcode May 17 00:38:00.031768 kernel: GDS: Unknown: Dependent on hypervisor status May 17 00:38:00.031782 kernel: x86/fpu: Supporting XSAVE feature 0x001: 'x87 floating point registers' May 17 00:38:00.031796 kernel: x86/fpu: Supporting XSAVE feature 0x002: 'SSE registers' May 17 00:38:00.031813 kernel: x86/fpu: Supporting XSAVE feature 0x004: 'AVX registers' May 17 00:38:00.031827 kernel: x86/fpu: Supporting XSAVE feature 0x008: 'MPX bounds registers' May 17 00:38:00.031839 kernel: x86/fpu: Supporting XSAVE feature 0x010: 'MPX CSR' May 17 00:38:00.031852 kernel: x86/fpu: Supporting XSAVE feature 0x020: 'AVX-512 opmask' May 17 00:38:00.031864 kernel: x86/fpu: Supporting XSAVE feature 0x040: 'AVX-512 Hi256' May 17 00:38:00.031876 kernel: x86/fpu: Supporting XSAVE feature 0x080: 'AVX-512 ZMM_Hi256' May 17 00:38:00.031889 kernel: x86/fpu: Supporting XSAVE feature 0x200: 'Protection Keys User registers' May 17 00:38:00.031906 kernel: x86/fpu: xstate_offset[2]: 576, xstate_sizes[2]: 256 May 17 00:38:00.031925 kernel: x86/fpu: xstate_offset[3]: 832, xstate_sizes[3]: 64 May 17 00:38:00.031941 kernel: x86/fpu: xstate_offset[4]: 896, xstate_sizes[4]: 64 May 17 00:38:00.031957 kernel: x86/fpu: xstate_offset[5]: 960, xstate_sizes[5]: 64 May 17 00:38:00.031972 kernel: x86/fpu: xstate_offset[6]: 1024, xstate_sizes[6]: 512 May 17 00:38:00.031986 kernel: x86/fpu: xstate_offset[7]: 1536, xstate_sizes[7]: 1024 May 17 00:38:00.032000 kernel: x86/fpu: xstate_offset[9]: 2560, xstate_sizes[9]: 8 May 17 00:38:00.032014 kernel: x86/fpu: Enabled xstate features 0x2ff, context size is 2568 bytes, using 'compacted' format. May 17 00:38:00.032028 kernel: Freeing SMP alternatives memory: 32K May 17 00:38:00.032042 kernel: pid_max: default: 32768 minimum: 301 May 17 00:38:00.032057 kernel: LSM: Security Framework initializing May 17 00:38:00.032071 kernel: SELinux: Initializing. May 17 00:38:00.032085 kernel: Mount-cache hash table entries: 4096 (order: 3, 32768 bytes, linear) May 17 00:38:00.032099 kernel: Mountpoint-cache hash table entries: 4096 (order: 3, 32768 bytes, linear) May 17 00:38:00.032114 kernel: smpboot: CPU0: Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz (family: 0x6, model: 0x55, stepping: 0x7) May 17 00:38:00.032131 kernel: Performance Events: unsupported p6 CPU model 85 no PMU driver, software events only. May 17 00:38:00.032145 kernel: signal: max sigframe size: 3632 May 17 00:38:00.032160 kernel: rcu: Hierarchical SRCU implementation. May 17 00:38:00.032174 kernel: NMI watchdog: Perf NMI watchdog permanently disabled May 17 00:38:00.032189 kernel: smp: Bringing up secondary CPUs ... May 17 00:38:00.032203 kernel: x86: Booting SMP configuration: May 17 00:38:00.032217 kernel: .... node #0, CPUs: #1 May 17 00:38:00.032232 kernel: kvm-clock: cpu 1, msr 3019a041, secondary cpu clock May 17 00:38:00.032246 kernel: kvm-guest: stealtime: cpu 1, msr 7a51c0c0 May 17 00:38:00.032264 kernel: MDS CPU bug present and SMT on, data leak possible. See https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/mds.html for more details. May 17 00:38:00.032279 kernel: MMIO Stale Data CPU bug present and SMT on, data leak possible. See https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/processor_mmio_stale_data.html for more details. May 17 00:38:00.032294 kernel: smp: Brought up 1 node, 2 CPUs May 17 00:38:00.032308 kernel: smpboot: Max logical packages: 1 May 17 00:38:00.032322 kernel: smpboot: Total of 2 processors activated (9999.98 BogoMIPS) May 17 00:38:00.032353 kernel: devtmpfs: initialized May 17 00:38:00.032368 kernel: x86/mm: Memory block size: 128MB May 17 00:38:00.032383 kernel: ACPI: PM: Registering ACPI NVS region [mem 0x7895e000-0x789ddfff] (524288 bytes) May 17 00:38:00.032397 kernel: clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1911260446275000 ns May 17 00:38:00.032415 kernel: futex hash table entries: 512 (order: 3, 32768 bytes, linear) May 17 00:38:00.032429 kernel: pinctrl core: initialized pinctrl subsystem May 17 00:38:00.032443 kernel: NET: Registered PF_NETLINK/PF_ROUTE protocol family May 17 00:38:00.032458 kernel: audit: initializing netlink subsys (disabled) May 17 00:38:00.032473 kernel: audit: type=2000 audit(1747442279.655:1): state=initialized audit_enabled=0 res=1 May 17 00:38:00.032487 kernel: thermal_sys: Registered thermal governor 'step_wise' May 17 00:38:00.032501 kernel: thermal_sys: Registered thermal governor 'user_space' May 17 00:38:00.032515 kernel: cpuidle: using governor menu May 17 00:38:00.032530 kernel: ACPI: bus type PCI registered May 17 00:38:00.032547 kernel: acpiphp: ACPI Hot Plug PCI Controller Driver version: 0.5 May 17 00:38:00.032561 kernel: dca service started, version 1.12.1 May 17 00:38:00.032576 kernel: PCI: Using configuration type 1 for base access May 17 00:38:00.032590 kernel: kprobes: kprobe jump-optimization is enabled. All kprobes are optimized if possible. May 17 00:38:00.032605 kernel: HugeTLB registered 1.00 GiB page size, pre-allocated 0 pages May 17 00:38:00.032619 kernel: HugeTLB registered 2.00 MiB page size, pre-allocated 0 pages May 17 00:38:00.032634 kernel: ACPI: Added _OSI(Module Device) May 17 00:38:00.032648 kernel: ACPI: Added _OSI(Processor Device) May 17 00:38:00.032662 kernel: ACPI: Added _OSI(3.0 _SCP Extensions) May 17 00:38:00.032679 kernel: ACPI: Added _OSI(Processor Aggregator Device) May 17 00:38:00.032693 kernel: ACPI: Added _OSI(Linux-Dell-Video) May 17 00:38:00.032707 kernel: ACPI: Added _OSI(Linux-Lenovo-NV-HDMI-Audio) May 17 00:38:00.032722 kernel: ACPI: Added _OSI(Linux-HPI-Hybrid-Graphics) May 17 00:38:00.032736 kernel: ACPI: 3 ACPI AML tables successfully acquired and loaded May 17 00:38:00.032751 kernel: ACPI: Interpreter enabled May 17 00:38:00.032765 kernel: ACPI: PM: (supports S0 S5) May 17 00:38:00.032779 kernel: ACPI: Using IOAPIC for interrupt routing May 17 00:38:00.032793 kernel: PCI: Using host bridge windows from ACPI; if necessary, use "pci=nocrs" and report a bug May 17 00:38:00.032811 kernel: ACPI: Enabled 2 GPEs in block 00 to 0F May 17 00:38:00.032825 kernel: ACPI: PCI Root Bridge [PCI0] (domain 0000 [bus 00-ff]) May 17 00:38:00.033046 kernel: acpi PNP0A03:00: _OSC: OS supports [ASPM ClockPM Segments MSI HPX-Type3] May 17 00:38:00.033173 kernel: acpi PNP0A03:00: fail to add MMCONFIG information, can't access extended PCI configuration space under this bridge. May 17 00:38:00.033190 kernel: acpiphp: Slot [3] registered May 17 00:38:00.033205 kernel: acpiphp: Slot [4] registered May 17 00:38:00.033219 kernel: acpiphp: Slot [5] registered May 17 00:38:00.033236 kernel: acpiphp: Slot [6] registered May 17 00:38:00.033250 kernel: acpiphp: Slot [7] registered May 17 00:38:00.033264 kernel: acpiphp: Slot [8] registered May 17 00:38:00.033278 kernel: acpiphp: Slot [9] registered May 17 00:38:00.033292 kernel: acpiphp: Slot [10] registered May 17 00:38:00.033307 kernel: acpiphp: Slot [11] registered May 17 00:38:00.033321 kernel: acpiphp: Slot [12] registered May 17 00:38:00.033346 kernel: acpiphp: Slot [13] registered May 17 00:38:00.033360 kernel: acpiphp: Slot [14] registered May 17 00:38:00.033374 kernel: acpiphp: Slot [15] registered May 17 00:38:00.033392 kernel: acpiphp: Slot [16] registered May 17 00:38:00.033406 kernel: acpiphp: Slot [17] registered May 17 00:38:00.033420 kernel: acpiphp: Slot [18] registered May 17 00:38:00.033434 kernel: acpiphp: Slot [19] registered May 17 00:38:00.033448 kernel: acpiphp: Slot [20] registered May 17 00:38:00.033463 kernel: acpiphp: Slot [21] registered May 17 00:38:00.033477 kernel: acpiphp: Slot [22] registered May 17 00:38:00.033491 kernel: acpiphp: Slot [23] registered May 17 00:38:00.033504 kernel: acpiphp: Slot [24] registered May 17 00:38:00.033521 kernel: acpiphp: Slot [25] registered May 17 00:38:00.033535 kernel: acpiphp: Slot [26] registered May 17 00:38:00.033549 kernel: acpiphp: Slot [27] registered May 17 00:38:00.033564 kernel: acpiphp: Slot [28] registered May 17 00:38:00.033578 kernel: acpiphp: Slot [29] registered May 17 00:38:00.033592 kernel: acpiphp: Slot [30] registered May 17 00:38:00.033606 kernel: acpiphp: Slot [31] registered May 17 00:38:00.033620 kernel: PCI host bridge to bus 0000:00 May 17 00:38:00.033746 kernel: pci_bus 0000:00: root bus resource [io 0x0000-0x0cf7 window] May 17 00:38:00.033860 kernel: pci_bus 0000:00: root bus resource [io 0x0d00-0xffff window] May 17 00:38:00.033968 kernel: pci_bus 0000:00: root bus resource [mem 0x000a0000-0x000bffff window] May 17 00:38:00.034075 kernel: pci_bus 0000:00: root bus resource [mem 0x80000000-0xfebfffff window] May 17 00:38:00.034182 kernel: pci_bus 0000:00: root bus resource [mem 0x100000000-0x2000ffffffff window] May 17 00:38:00.034302 kernel: pci_bus 0000:00: root bus resource [bus 00-ff] May 17 00:38:00.034451 kernel: pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 May 17 00:38:00.034584 kernel: pci 0000:00:01.0: [8086:7000] type 00 class 0x060100 May 17 00:38:00.034719 kernel: pci 0000:00:01.3: [8086:7113] type 00 class 0x000000 May 17 00:38:00.034839 kernel: pci 0000:00:01.3: quirk: [io 0xb000-0xb03f] claimed by PIIX4 ACPI May 17 00:38:00.034957 kernel: pci 0000:00:01.3: PIIX4 devres E PIO at fff0-ffff May 17 00:38:00.035079 kernel: pci 0000:00:01.3: PIIX4 devres F MMIO at ffc00000-ffffffff May 17 00:38:00.035201 kernel: pci 0000:00:01.3: PIIX4 devres G PIO at fff0-ffff May 17 00:38:00.035321 kernel: pci 0000:00:01.3: PIIX4 devres H MMIO at ffc00000-ffffffff May 17 00:38:00.050610 kernel: pci 0000:00:01.3: PIIX4 devres I PIO at fff0-ffff May 17 00:38:00.050747 kernel: pci 0000:00:01.3: PIIX4 devres J PIO at fff0-ffff May 17 00:38:00.050881 kernel: pci 0000:00:03.0: [1d0f:1111] type 00 class 0x030000 May 17 00:38:00.051006 kernel: pci 0000:00:03.0: reg 0x10: [mem 0x80000000-0x803fffff pref] May 17 00:38:00.051126 kernel: pci 0000:00:03.0: reg 0x30: [mem 0xffff0000-0xffffffff pref] May 17 00:38:00.051246 kernel: pci 0000:00:03.0: BAR 0: assigned to efifb May 17 00:38:00.051384 kernel: pci 0000:00:03.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] May 17 00:38:00.051524 kernel: pci 0000:00:04.0: [1d0f:8061] type 00 class 0x010802 May 17 00:38:00.051651 kernel: pci 0000:00:04.0: reg 0x10: [mem 0x80404000-0x80407fff] May 17 00:38:00.051784 kernel: pci 0000:00:05.0: [1d0f:ec20] type 00 class 0x020000 May 17 00:38:00.051911 kernel: pci 0000:00:05.0: reg 0x10: [mem 0x80400000-0x80403fff] May 17 00:38:00.051931 kernel: ACPI: PCI: Interrupt link LNKA configured for IRQ 10 May 17 00:38:00.051946 kernel: ACPI: PCI: Interrupt link LNKB configured for IRQ 10 May 17 00:38:00.051961 kernel: ACPI: PCI: Interrupt link LNKC configured for IRQ 11 May 17 00:38:00.051980 kernel: ACPI: PCI: Interrupt link LNKD configured for IRQ 11 May 17 00:38:00.051995 kernel: ACPI: PCI: Interrupt link LNKS configured for IRQ 9 May 17 00:38:00.052010 kernel: iommu: Default domain type: Translated May 17 00:38:00.052025 kernel: iommu: DMA domain TLB invalidation policy: lazy mode May 17 00:38:00.052148 kernel: pci 0000:00:03.0: vgaarb: setting as boot VGA device May 17 00:38:00.052275 kernel: pci 0000:00:03.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none May 17 00:38:00.052413 kernel: pci 0000:00:03.0: vgaarb: bridge control possible May 17 00:38:00.052433 kernel: vgaarb: loaded May 17 00:38:00.052448 kernel: pps_core: LinuxPPS API ver. 1 registered May 17 00:38:00.052467 kernel: pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti May 17 00:38:00.052483 kernel: PTP clock support registered May 17 00:38:00.052498 kernel: Registered efivars operations May 17 00:38:00.052513 kernel: PCI: Using ACPI for IRQ routing May 17 00:38:00.052528 kernel: PCI: pci_cache_line_size set to 64 bytes May 17 00:38:00.052542 kernel: e820: reserve RAM buffer [mem 0x76813018-0x77ffffff] May 17 00:38:00.052557 kernel: e820: reserve RAM buffer [mem 0x786ce000-0x7bffffff] May 17 00:38:00.052572 kernel: e820: reserve RAM buffer [mem 0x7c97c000-0x7fffffff] May 17 00:38:00.052586 kernel: hpet0: at MMIO 0xfed00000, IRQs 2, 8, 0, 0, 0, 0, 0, 0 May 17 00:38:00.052603 kernel: hpet0: 8 comparators, 32-bit 62.500000 MHz counter May 17 00:38:00.052618 kernel: clocksource: Switched to clocksource kvm-clock May 17 00:38:00.052633 kernel: VFS: Disk quotas dquot_6.6.0 May 17 00:38:00.052649 kernel: VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes) May 17 00:38:00.052664 kernel: pnp: PnP ACPI init May 17 00:38:00.052679 kernel: pnp: PnP ACPI: found 5 devices May 17 00:38:00.052694 kernel: clocksource: acpi_pm: mask: 0xffffff max_cycles: 0xffffff, max_idle_ns: 2085701024 ns May 17 00:38:00.052709 kernel: NET: Registered PF_INET protocol family May 17 00:38:00.052723 kernel: IP idents hash table entries: 32768 (order: 6, 262144 bytes, linear) May 17 00:38:00.052741 kernel: tcp_listen_portaddr_hash hash table entries: 1024 (order: 2, 16384 bytes, linear) May 17 00:38:00.052756 kernel: Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear) May 17 00:38:00.052771 kernel: TCP established hash table entries: 16384 (order: 5, 131072 bytes, linear) May 17 00:38:00.052785 kernel: TCP bind hash table entries: 16384 (order: 6, 262144 bytes, linear) May 17 00:38:00.052800 kernel: TCP: Hash tables configured (established 16384 bind 16384) May 17 00:38:00.052815 kernel: UDP hash table entries: 1024 (order: 3, 32768 bytes, linear) May 17 00:38:00.052829 kernel: UDP-Lite hash table entries: 1024 (order: 3, 32768 bytes, linear) May 17 00:38:00.052844 kernel: NET: Registered PF_UNIX/PF_LOCAL protocol family May 17 00:38:00.052859 kernel: NET: Registered PF_XDP protocol family May 17 00:38:00.052980 kernel: pci_bus 0000:00: resource 4 [io 0x0000-0x0cf7 window] May 17 00:38:00.053095 kernel: pci_bus 0000:00: resource 5 [io 0x0d00-0xffff window] May 17 00:38:00.053206 kernel: pci_bus 0000:00: resource 6 [mem 0x000a0000-0x000bffff window] May 17 00:38:00.053314 kernel: pci_bus 0000:00: resource 7 [mem 0x80000000-0xfebfffff window] May 17 00:38:00.053442 kernel: pci_bus 0000:00: resource 8 [mem 0x100000000-0x2000ffffffff window] May 17 00:38:00.053571 kernel: pci 0000:00:00.0: Limiting direct PCI/PCI transfers May 17 00:38:00.059078 kernel: pci 0000:00:01.0: Activating ISA DMA hang workarounds May 17 00:38:00.059129 kernel: PCI: CLS 0 bytes, default 64 May 17 00:38:00.059146 kernel: RAPL PMU: API unit is 2^-32 Joules, 0 fixed counters, 10737418240 ms ovfl timer May 17 00:38:00.059162 kernel: clocksource: tsc: mask: 0xffffffffffffffff max_cycles: 0x24093623c91, max_idle_ns: 440795291220 ns May 17 00:38:00.059177 kernel: clocksource: Switched to clocksource tsc May 17 00:38:00.059192 kernel: Initialise system trusted keyrings May 17 00:38:00.059207 kernel: workingset: timestamp_bits=39 max_order=19 bucket_order=0 May 17 00:38:00.059223 kernel: Key type asymmetric registered May 17 00:38:00.059237 kernel: Asymmetric key parser 'x509' registered May 17 00:38:00.059252 kernel: Block layer SCSI generic (bsg) driver version 0.4 loaded (major 249) May 17 00:38:00.059269 kernel: io scheduler mq-deadline registered May 17 00:38:00.059284 kernel: io scheduler kyber registered May 17 00:38:00.059299 kernel: io scheduler bfq registered May 17 00:38:00.059314 kernel: ioatdma: Intel(R) QuickData Technology Driver 5.00 May 17 00:38:00.059345 kernel: Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled May 17 00:38:00.059360 kernel: 00:04: ttyS0 at I/O 0x3f8 (irq = 4, base_baud = 115200) is a 16550A May 17 00:38:00.059375 kernel: i8042: PNP: PS/2 Controller [PNP0303:KBD,PNP0f13:MOU] at 0x60,0x64 irq 1,12 May 17 00:38:00.059391 kernel: i8042: Warning: Keylock active May 17 00:38:00.059405 kernel: serio: i8042 KBD port at 0x60,0x64 irq 1 May 17 00:38:00.059423 kernel: serio: i8042 AUX port at 0x60,0x64 irq 12 May 17 00:38:00.059588 kernel: rtc_cmos 00:00: RTC can wake from S4 May 17 00:38:00.059705 kernel: rtc_cmos 00:00: registered as rtc0 May 17 00:38:00.059816 kernel: rtc_cmos 00:00: setting system clock to 2025-05-17T00:37:59 UTC (1747442279) May 17 00:38:00.059922 kernel: rtc_cmos 00:00: alarms up to one day, 114 bytes nvram May 17 00:38:00.059938 kernel: intel_pstate: CPU model not supported May 17 00:38:00.059952 kernel: efifb: probing for efifb May 17 00:38:00.059965 kernel: efifb: framebuffer at 0x80000000, using 1876k, total 1875k May 17 00:38:00.059982 kernel: efifb: mode is 800x600x32, linelength=3200, pages=1 May 17 00:38:00.059994 kernel: efifb: scrolling: redraw May 17 00:38:00.060007 kernel: efifb: Truecolor: size=8:8:8:8, shift=24:16:8:0 May 17 00:38:00.060020 kernel: Console: switching to colour frame buffer device 100x37 May 17 00:38:00.060032 kernel: fb0: EFI VGA frame buffer device May 17 00:38:00.060045 kernel: pstore: Registered efi as persistent store backend May 17 00:38:00.060081 kernel: NET: Registered PF_INET6 protocol family May 17 00:38:00.060096 kernel: Segment Routing with IPv6 May 17 00:38:00.060110 kernel: In-situ OAM (IOAM) with IPv6 May 17 00:38:00.060126 kernel: NET: Registered PF_PACKET protocol family May 17 00:38:00.060139 kernel: Key type dns_resolver registered May 17 00:38:00.060152 kernel: IPI shorthand broadcast: enabled May 17 00:38:00.060165 kernel: sched_clock: Marking stable (384279299, 131235776)->(583996793, -68481718) May 17 00:38:00.060178 kernel: registered taskstats version 1 May 17 00:38:00.060192 kernel: Loading compiled-in X.509 certificates May 17 00:38:00.060206 kernel: Loaded X.509 cert 'Kinvolk GmbH: Module signing key for 5.15.182-flatcar: 01ca23caa8e5879327538f9287e5164b3e97ac0c' May 17 00:38:00.060219 kernel: Key type .fscrypt registered May 17 00:38:00.060232 kernel: Key type fscrypt-provisioning registered May 17 00:38:00.060247 kernel: pstore: Using crash dump compression: deflate May 17 00:38:00.060261 kernel: ima: No TPM chip found, activating TPM-bypass! May 17 00:38:00.060274 kernel: ima: Allocated hash algorithm: sha1 May 17 00:38:00.060290 kernel: ima: No architecture policies found May 17 00:38:00.060304 kernel: clk: Disabling unused clocks May 17 00:38:00.060318 kernel: Freeing unused kernel image (initmem) memory: 47472K May 17 00:38:00.060344 kernel: Write protecting the kernel read-only data: 28672k May 17 00:38:00.060357 kernel: Freeing unused kernel image (text/rodata gap) memory: 2040K May 17 00:38:00.060370 kernel: Freeing unused kernel image (rodata/data gap) memory: 612K May 17 00:38:00.060387 kernel: Run /init as init process May 17 00:38:00.060401 kernel: with arguments: May 17 00:38:00.060414 kernel: /init May 17 00:38:00.060427 kernel: with environment: May 17 00:38:00.060441 kernel: HOME=/ May 17 00:38:00.060454 kernel: TERM=linux May 17 00:38:00.060467 kernel: BOOT_IMAGE=/flatcar/vmlinuz-a May 17 00:38:00.060484 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) May 17 00:38:00.060503 systemd[1]: Detected virtualization amazon. May 17 00:38:00.060517 systemd[1]: Detected architecture x86-64. May 17 00:38:00.060530 systemd[1]: Running in initrd. May 17 00:38:00.060543 systemd[1]: No hostname configured, using default hostname. May 17 00:38:00.060557 systemd[1]: Hostname set to . May 17 00:38:00.060571 systemd[1]: Initializing machine ID from VM UUID. May 17 00:38:00.060584 systemd[1]: Queued start job for default target initrd.target. May 17 00:38:00.060599 systemd[1]: Started systemd-ask-password-console.path. May 17 00:38:00.060615 systemd[1]: Reached target cryptsetup.target. May 17 00:38:00.060628 systemd[1]: Reached target paths.target. May 17 00:38:00.060642 systemd[1]: Reached target slices.target. May 17 00:38:00.060656 systemd[1]: Reached target swap.target. May 17 00:38:00.060672 systemd[1]: Reached target timers.target. May 17 00:38:00.060690 systemd[1]: Listening on iscsid.socket. May 17 00:38:00.060703 systemd[1]: Listening on iscsiuio.socket. May 17 00:38:00.060717 systemd[1]: Listening on systemd-journald-audit.socket. May 17 00:38:00.060731 systemd[1]: Listening on systemd-journald-dev-log.socket. May 17 00:38:00.060746 systemd[1]: Listening on systemd-journald.socket. May 17 00:38:00.060760 systemd[1]: Listening on systemd-networkd.socket. May 17 00:38:00.060773 systemd[1]: Listening on systemd-udevd-control.socket. May 17 00:38:00.060785 systemd[1]: Listening on systemd-udevd-kernel.socket. May 17 00:38:00.060802 systemd[1]: Reached target sockets.target. May 17 00:38:00.060815 systemd[1]: Starting kmod-static-nodes.service... May 17 00:38:00.060828 systemd[1]: Finished network-cleanup.service. May 17 00:38:00.060841 systemd[1]: Starting systemd-fsck-usr.service... May 17 00:38:00.060855 systemd[1]: Starting systemd-journald.service... May 17 00:38:00.060868 systemd[1]: Starting systemd-modules-load.service... May 17 00:38:00.060884 systemd[1]: Starting systemd-resolved.service... May 17 00:38:00.060899 kernel: input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input0 May 17 00:38:00.060914 systemd[1]: Starting systemd-vconsole-setup.service... May 17 00:38:00.060932 systemd[1]: Finished kmod-static-nodes.service. May 17 00:38:00.060948 kernel: audit: type=1130 audit(1747442280.034:2): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:38:00.060964 systemd[1]: Finished systemd-fsck-usr.service. May 17 00:38:00.060979 kernel: audit: type=1130 audit(1747442280.052:3): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:38:00.060993 systemd[1]: Finished systemd-vconsole-setup.service. May 17 00:38:00.061016 systemd-journald[185]: Journal started May 17 00:38:00.061094 systemd-journald[185]: Runtime Journal (/run/log/journal/ec2236bb8aa2d8d59aa49924919d1751) is 4.8M, max 38.3M, 33.5M free. May 17 00:38:00.034000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:38:00.052000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:38:00.045856 systemd-modules-load[186]: Inserted module 'overlay' May 17 00:38:00.069000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:38:00.076359 kernel: audit: type=1130 audit(1747442280.069:4): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:38:00.076409 systemd[1]: Started systemd-journald.service. May 17 00:38:00.081223 systemd-resolved[187]: Positive Trust Anchors: May 17 00:38:00.082652 systemd-resolved[187]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d May 17 00:38:00.084868 systemd-resolved[187]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test May 17 00:38:00.092000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:38:00.099431 kernel: audit: type=1130 audit(1747442280.092:5): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:38:00.100433 systemd-resolved[187]: Defaulting to hostname 'linux'. May 17 00:38:00.102999 systemd[1]: Starting dracut-cmdline-ask.service... May 17 00:38:00.119209 kernel: audit: type=1130 audit(1747442280.107:6): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:38:00.107000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:38:00.105101 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... May 17 00:38:00.106369 systemd[1]: Started systemd-resolved.service. May 17 00:38:00.121949 systemd[1]: Reached target nss-lookup.target. May 17 00:38:00.129289 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. May 17 00:38:00.139214 kernel: bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this. May 17 00:38:00.139248 kernel: audit: type=1130 audit(1747442280.131:7): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:38:00.131000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:38:00.139676 systemd[1]: Finished dracut-cmdline-ask.service. May 17 00:38:00.143305 systemd[1]: Starting dracut-cmdline.service... May 17 00:38:00.139000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:38:00.151510 kernel: audit: type=1130 audit(1747442280.139:8): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:38:00.156665 systemd-modules-load[186]: Inserted module 'br_netfilter' May 17 00:38:00.157869 kernel: Bridge firewalling registered May 17 00:38:00.161782 dracut-cmdline[203]: dracut-dracut-053 May 17 00:38:00.166145 dracut-cmdline[203]: Using kernel command line parameters: rd.driver.pre=btrfs rootflags=rw mount.usrflags=ro BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200n8 console=tty0 flatcar.first_boot=detected flatcar.oem.id=ec2 modprobe.blacklist=xen_fbfront net.ifnames=0 nvme_core.io_timeout=4294967295 verity.usrhash=4aad7caeadb0359f379975532748a0b4ae6bb9b229507353e0f5ae84cb9335a0 May 17 00:38:00.187349 kernel: SCSI subsystem initialized May 17 00:38:00.208422 kernel: device-mapper: core: CONFIG_IMA_DISABLE_HTABLE is disabled. Duplicate IMA measurements will not be recorded in the IMA log. May 17 00:38:00.208493 kernel: device-mapper: uevent: version 1.0.3 May 17 00:38:00.210999 kernel: device-mapper: ioctl: 4.45.0-ioctl (2021-03-22) initialised: dm-devel@redhat.com May 17 00:38:00.215611 systemd-modules-load[186]: Inserted module 'dm_multipath' May 17 00:38:00.216475 systemd[1]: Finished systemd-modules-load.service. May 17 00:38:00.217000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:38:00.225353 kernel: audit: type=1130 audit(1747442280.217:9): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:38:00.226564 systemd[1]: Starting systemd-sysctl.service... May 17 00:38:00.236561 systemd[1]: Finished systemd-sysctl.service. May 17 00:38:00.244616 kernel: audit: type=1130 audit(1747442280.236:10): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:38:00.236000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:38:00.259355 kernel: Loading iSCSI transport class v2.0-870. May 17 00:38:00.278363 kernel: iscsi: registered transport (tcp) May 17 00:38:00.303579 kernel: iscsi: registered transport (qla4xxx) May 17 00:38:00.303664 kernel: QLogic iSCSI HBA Driver May 17 00:38:00.335398 systemd[1]: Finished dracut-cmdline.service. May 17 00:38:00.334000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:38:00.337446 systemd[1]: Starting dracut-pre-udev.service... May 17 00:38:00.392368 kernel: raid6: avx512x4 gen() 17102 MB/s May 17 00:38:00.410386 kernel: raid6: avx512x4 xor() 7954 MB/s May 17 00:38:00.428398 kernel: raid6: avx512x2 gen() 10277 MB/s May 17 00:38:00.446404 kernel: raid6: avx512x2 xor() 16405 MB/s May 17 00:38:00.468385 kernel: raid6: avx512x1 gen() 15871 MB/s May 17 00:38:00.486374 kernel: raid6: avx512x1 xor() 11192 MB/s May 17 00:38:00.504408 kernel: raid6: avx2x4 gen() 14178 MB/s May 17 00:38:00.522374 kernel: raid6: avx2x4 xor() 3892 MB/s May 17 00:38:00.540381 kernel: raid6: avx2x2 gen() 7299 MB/s May 17 00:38:00.558391 kernel: raid6: avx2x2 xor() 10238 MB/s May 17 00:38:00.576395 kernel: raid6: avx2x1 gen() 10064 MB/s May 17 00:38:00.594383 kernel: raid6: avx2x1 xor() 11029 MB/s May 17 00:38:00.614376 kernel: raid6: sse2x4 gen() 6767 MB/s May 17 00:38:00.633444 kernel: raid6: sse2x4 xor() 4774 MB/s May 17 00:38:00.652397 kernel: raid6: sse2x2 gen() 7130 MB/s May 17 00:38:00.670774 kernel: raid6: sse2x2 xor() 2623 MB/s May 17 00:38:00.688384 kernel: raid6: sse2x1 gen() 5913 MB/s May 17 00:38:00.708728 kernel: raid6: sse2x1 xor() 3310 MB/s May 17 00:38:00.708808 kernel: raid6: using algorithm avx512x4 gen() 17102 MB/s May 17 00:38:00.708840 kernel: raid6: .... xor() 7954 MB/s, rmw enabled May 17 00:38:00.710146 kernel: raid6: using avx512x2 recovery algorithm May 17 00:38:00.737372 kernel: xor: automatically using best checksumming function avx May 17 00:38:00.900668 kernel: Btrfs loaded, crc32c=crc32c-intel, zoned=no, fsverity=no May 17 00:38:00.925368 systemd[1]: Finished dracut-pre-udev.service. May 17 00:38:00.924000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:38:00.925000 audit: BPF prog-id=7 op=LOAD May 17 00:38:00.925000 audit: BPF prog-id=8 op=LOAD May 17 00:38:00.928873 systemd[1]: Starting systemd-udevd.service... May 17 00:38:00.962772 systemd-udevd[385]: Using default interface naming scheme 'v252'. May 17 00:38:00.968155 systemd[1]: Started systemd-udevd.service. May 17 00:38:00.969000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:38:00.972628 systemd[1]: Starting dracut-pre-trigger.service... May 17 00:38:01.011082 dracut-pre-trigger[398]: rd.md=0: removing MD RAID activation May 17 00:38:01.054730 systemd[1]: Finished dracut-pre-trigger.service. May 17 00:38:01.053000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:38:01.056231 systemd[1]: Starting systemd-udev-trigger.service... May 17 00:38:01.112891 systemd[1]: Finished systemd-udev-trigger.service. May 17 00:38:01.112000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:38:01.240359 kernel: cryptd: max_cpu_qlen set to 1000 May 17 00:38:01.277787 kernel: ena 0000:00:05.0: ENA device version: 0.10 May 17 00:38:01.318263 kernel: ena 0000:00:05.0: ENA controller version: 0.0.1 implementation version 1 May 17 00:38:01.318494 kernel: ena 0000:00:05.0: LLQ is not supported Fallback to host mode policy. May 17 00:38:01.318637 kernel: AVX2 version of gcm_enc/dec engaged. May 17 00:38:01.318657 kernel: AES CTR mode by8 optimization enabled May 17 00:38:01.318676 kernel: ena 0000:00:05.0: Elastic Network Adapter (ENA) found at mem 80400000, mac addr 06:31:61:d5:d5:e9 May 17 00:38:01.326253 (udev-worker)[433]: Network interface NamePolicy= disabled on kernel command line. May 17 00:38:01.338367 kernel: nvme nvme0: pci function 0000:00:04.0 May 17 00:38:01.338646 kernel: ACPI: \_SB_.LNKD: Enabled at IRQ 11 May 17 00:38:01.373436 kernel: nvme nvme0: 2/0/0 default/read/poll queues May 17 00:38:01.388759 kernel: GPT:Primary header thinks Alt. header is not at the end of the disk. May 17 00:38:01.388851 kernel: GPT:9289727 != 16777215 May 17 00:38:01.388872 kernel: GPT:Alternate GPT header not at the end of the disk. May 17 00:38:01.390986 kernel: GPT:9289727 != 16777215 May 17 00:38:01.397365 kernel: GPT: Use GNU Parted to correct GPT errors. May 17 00:38:01.401713 kernel: nvme0n1: p1 p2 p3 p4 p6 p7 p9 May 17 00:38:01.652830 kernel: BTRFS: device label OEM devid 1 transid 12 /dev/nvme0n1p6 scanned by (udev-worker) (435) May 17 00:38:01.715844 systemd[1]: Found device dev-disk-by\x2dpartuuid-7130c94a\x2d213a\x2d4e5a\x2d8e26\x2d6cce9662f132.device. May 17 00:38:01.720103 systemd[1]: Found device dev-disk-by\x2dpartlabel-USR\x2dA.device. May 17 00:38:01.725532 systemd[1]: Starting disk-uuid.service... May 17 00:38:01.732011 disk-uuid[593]: Primary Header is updated. May 17 00:38:01.732011 disk-uuid[593]: Secondary Entries is updated. May 17 00:38:01.732011 disk-uuid[593]: Secondary Header is updated. May 17 00:38:01.742981 systemd[1]: Found device dev-disk-by\x2dlabel-EFI\x2dSYSTEM.device. May 17 00:38:01.757023 systemd[1]: Found device dev-disk-by\x2dlabel-ROOT.device. May 17 00:38:01.784357 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. May 17 00:38:02.750391 kernel: nvme0n1: p1 p2 p3 p4 p6 p7 p9 May 17 00:38:02.750823 disk-uuid[594]: The operation has completed successfully. May 17 00:38:02.895098 systemd[1]: disk-uuid.service: Deactivated successfully. May 17 00:38:02.895217 systemd[1]: Finished disk-uuid.service. May 17 00:38:02.894000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:38:02.894000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:38:02.897164 systemd[1]: Starting verity-setup.service... May 17 00:38:02.916356 kernel: device-mapper: verity: sha256 using implementation "sha256-avx2" May 17 00:38:03.015229 systemd[1]: Found device dev-mapper-usr.device. May 17 00:38:03.017985 systemd[1]: Mounting sysusr-usr.mount... May 17 00:38:03.022643 systemd[1]: Finished verity-setup.service. May 17 00:38:03.022000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:38:03.122749 kernel: EXT4-fs (dm-0): mounted filesystem without journal. Opts: norecovery. Quota mode: none. May 17 00:38:03.123103 systemd[1]: Mounted sysusr-usr.mount. May 17 00:38:03.128572 systemd[1]: afterburn-network-kargs.service was skipped because no trigger condition checks were met. May 17 00:38:03.129674 systemd[1]: Starting ignition-setup.service... May 17 00:38:03.132938 systemd[1]: Starting parse-ip-for-networkd.service... May 17 00:38:03.159583 kernel: BTRFS info (device nvme0n1p6): using crc32c (crc32c-intel) checksum algorithm May 17 00:38:03.159658 kernel: BTRFS info (device nvme0n1p6): using free space tree May 17 00:38:03.159679 kernel: BTRFS info (device nvme0n1p6): has skinny extents May 17 00:38:03.187360 kernel: BTRFS info (device nvme0n1p6): enabling ssd optimizations May 17 00:38:03.202060 systemd[1]: mnt-oem.mount: Deactivated successfully. May 17 00:38:03.217616 systemd[1]: Finished ignition-setup.service. May 17 00:38:03.217000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:38:03.219594 systemd[1]: Starting ignition-fetch-offline.service... May 17 00:38:03.223007 systemd[1]: Finished parse-ip-for-networkd.service. May 17 00:38:03.222000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:38:03.223000 audit: BPF prog-id=9 op=LOAD May 17 00:38:03.225657 systemd[1]: Starting systemd-networkd.service... May 17 00:38:03.249564 systemd-networkd[1024]: lo: Link UP May 17 00:38:03.249575 systemd-networkd[1024]: lo: Gained carrier May 17 00:38:03.250217 systemd-networkd[1024]: Enumeration completed May 17 00:38:03.250505 systemd[1]: Started systemd-networkd.service. May 17 00:38:03.250838 systemd-networkd[1024]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. May 17 00:38:03.254000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:38:03.255582 systemd[1]: Reached target network.target. May 17 00:38:03.256927 systemd-networkd[1024]: eth0: Link UP May 17 00:38:03.256933 systemd-networkd[1024]: eth0: Gained carrier May 17 00:38:03.257872 systemd[1]: Starting iscsiuio.service... May 17 00:38:03.265749 systemd[1]: Started iscsiuio.service. May 17 00:38:03.265000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:38:03.267780 systemd[1]: Starting iscsid.service... May 17 00:38:03.268482 systemd-networkd[1024]: eth0: DHCPv4 address 172.31.30.240/20, gateway 172.31.16.1 acquired from 172.31.16.1 May 17 00:38:03.273382 iscsid[1029]: iscsid: can't open InitiatorName configuration file /etc/iscsi/initiatorname.iscsi May 17 00:38:03.273382 iscsid[1029]: iscsid: Warning: InitiatorName file /etc/iscsi/initiatorname.iscsi does not exist or does not contain a properly formatted InitiatorName. If using software iscsi (iscsi_tcp or ib_iser) or partial offload (bnx2i or cxgbi iscsi), you may not be able to log May 17 00:38:03.273382 iscsid[1029]: into or discover targets. Please create a file /etc/iscsi/initiatorname.iscsi that contains a sting with the format: InitiatorName=iqn.yyyy-mm.[:identifier]. May 17 00:38:03.273382 iscsid[1029]: Example: InitiatorName=iqn.2001-04.com.redhat:fc6. May 17 00:38:03.273382 iscsid[1029]: If using hardware iscsi like qla4xxx this message can be ignored. May 17 00:38:03.273382 iscsid[1029]: iscsid: can't open InitiatorAlias configuration file /etc/iscsi/initiatorname.iscsi May 17 00:38:03.273382 iscsid[1029]: iscsid: can't open iscsid.safe_logout configuration file /etc/iscsi/iscsid.conf May 17 00:38:03.274000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:38:03.274483 systemd[1]: Started iscsid.service. May 17 00:38:03.276813 systemd[1]: Starting dracut-initqueue.service... May 17 00:38:03.295023 systemd[1]: Finished dracut-initqueue.service. May 17 00:38:03.294000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:38:03.296026 systemd[1]: Reached target remote-fs-pre.target. May 17 00:38:03.297164 systemd[1]: Reached target remote-cryptsetup.target. May 17 00:38:03.298567 systemd[1]: Reached target remote-fs.target. May 17 00:38:03.301587 systemd[1]: Starting dracut-pre-mount.service... May 17 00:38:03.311161 systemd[1]: Finished dracut-pre-mount.service. May 17 00:38:03.310000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:38:03.689886 ignition[1023]: Ignition 2.14.0 May 17 00:38:03.689898 ignition[1023]: Stage: fetch-offline May 17 00:38:03.690013 ignition[1023]: reading system config file "/usr/lib/ignition/base.d/base.ign" May 17 00:38:03.690044 ignition[1023]: parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b May 17 00:38:03.709946 ignition[1023]: no config dir at "/usr/lib/ignition/base.platform.d/aws" May 17 00:38:03.710491 ignition[1023]: Ignition finished successfully May 17 00:38:03.712395 systemd[1]: Finished ignition-fetch-offline.service. May 17 00:38:03.711000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:38:03.713927 systemd[1]: Starting ignition-fetch.service... May 17 00:38:03.722574 ignition[1048]: Ignition 2.14.0 May 17 00:38:03.722587 ignition[1048]: Stage: fetch May 17 00:38:03.722807 ignition[1048]: reading system config file "/usr/lib/ignition/base.d/base.ign" May 17 00:38:03.722843 ignition[1048]: parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b May 17 00:38:03.732227 ignition[1048]: no config dir at "/usr/lib/ignition/base.platform.d/aws" May 17 00:38:03.733388 ignition[1048]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 May 17 00:38:03.743427 ignition[1048]: INFO : PUT result: OK May 17 00:38:03.744864 ignition[1048]: DEBUG : parsed url from cmdline: "" May 17 00:38:03.744864 ignition[1048]: INFO : no config URL provided May 17 00:38:03.744864 ignition[1048]: INFO : reading system config file "/usr/lib/ignition/user.ign" May 17 00:38:03.744864 ignition[1048]: INFO : no config at "/usr/lib/ignition/user.ign" May 17 00:38:03.744864 ignition[1048]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 May 17 00:38:03.748417 ignition[1048]: INFO : PUT result: OK May 17 00:38:03.748417 ignition[1048]: INFO : GET http://169.254.169.254/2019-10-01/user-data: attempt #1 May 17 00:38:03.748417 ignition[1048]: INFO : GET result: OK May 17 00:38:03.748417 ignition[1048]: DEBUG : parsing config with SHA512: 17c78f10b4ed2df03f23d08727eb46052e27efddc2edc0a3dff930663f2f5b9959358f3f5e7c64b3e758eaaabc0beffde692cb24cacc987f19651d72a2390c1c May 17 00:38:03.753157 unknown[1048]: fetched base config from "system" May 17 00:38:03.753172 unknown[1048]: fetched base config from "system" May 17 00:38:03.753835 ignition[1048]: fetch: fetch complete May 17 00:38:03.753179 unknown[1048]: fetched user config from "aws" May 17 00:38:03.753840 ignition[1048]: fetch: fetch passed May 17 00:38:03.755345 systemd[1]: Finished ignition-fetch.service. May 17 00:38:03.754000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:38:03.753892 ignition[1048]: Ignition finished successfully May 17 00:38:03.756949 systemd[1]: Starting ignition-kargs.service... May 17 00:38:03.767130 ignition[1054]: Ignition 2.14.0 May 17 00:38:03.767142 ignition[1054]: Stage: kargs May 17 00:38:03.767298 ignition[1054]: reading system config file "/usr/lib/ignition/base.d/base.ign" May 17 00:38:03.767323 ignition[1054]: parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b May 17 00:38:03.773597 ignition[1054]: no config dir at "/usr/lib/ignition/base.platform.d/aws" May 17 00:38:03.774456 ignition[1054]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 May 17 00:38:03.775762 ignition[1054]: INFO : PUT result: OK May 17 00:38:03.778055 ignition[1054]: kargs: kargs passed May 17 00:38:03.778118 ignition[1054]: Ignition finished successfully May 17 00:38:03.780210 systemd[1]: Finished ignition-kargs.service. May 17 00:38:03.779000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:38:03.781628 systemd[1]: Starting ignition-disks.service... May 17 00:38:03.790246 ignition[1060]: Ignition 2.14.0 May 17 00:38:03.790258 ignition[1060]: Stage: disks May 17 00:38:03.790468 ignition[1060]: reading system config file "/usr/lib/ignition/base.d/base.ign" May 17 00:38:03.790491 ignition[1060]: parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b May 17 00:38:03.796564 ignition[1060]: no config dir at "/usr/lib/ignition/base.platform.d/aws" May 17 00:38:03.797219 ignition[1060]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 May 17 00:38:03.798504 ignition[1060]: INFO : PUT result: OK May 17 00:38:03.800845 ignition[1060]: disks: disks passed May 17 00:38:03.800900 ignition[1060]: Ignition finished successfully May 17 00:38:03.802177 systemd[1]: Finished ignition-disks.service. May 17 00:38:03.801000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:38:03.803307 systemd[1]: Reached target initrd-root-device.target. May 17 00:38:03.804080 systemd[1]: Reached target local-fs-pre.target. May 17 00:38:03.804976 systemd[1]: Reached target local-fs.target. May 17 00:38:03.805839 systemd[1]: Reached target sysinit.target. May 17 00:38:03.806935 systemd[1]: Reached target basic.target. May 17 00:38:03.808715 systemd[1]: Starting systemd-fsck-root.service... May 17 00:38:03.835234 systemd-fsck[1068]: ROOT: clean, 619/553520 files, 56023/553472 blocks May 17 00:38:03.838656 systemd[1]: Finished systemd-fsck-root.service. May 17 00:38:03.837000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:38:03.840084 systemd[1]: Mounting sysroot.mount... May 17 00:38:03.863211 kernel: EXT4-fs (nvme0n1p9): mounted filesystem with ordered data mode. Opts: (null). Quota mode: none. May 17 00:38:03.862878 systemd[1]: Mounted sysroot.mount. May 17 00:38:03.864561 systemd[1]: Reached target initrd-root-fs.target. May 17 00:38:03.867943 systemd[1]: Mounting sysroot-usr.mount... May 17 00:38:03.870996 systemd[1]: flatcar-metadata-hostname.service was skipped because no trigger condition checks were met. May 17 00:38:03.871040 systemd[1]: ignition-remount-sysroot.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/sysroot). May 17 00:38:03.871068 systemd[1]: Reached target ignition-diskful.target. May 17 00:38:03.873538 systemd[1]: Mounted sysroot-usr.mount. May 17 00:38:03.876975 systemd[1]: Starting initrd-setup-root.service... May 17 00:38:03.890483 initrd-setup-root[1089]: cut: /sysroot/etc/passwd: No such file or directory May 17 00:38:03.913870 initrd-setup-root[1097]: cut: /sysroot/etc/group: No such file or directory May 17 00:38:03.918810 initrd-setup-root[1105]: cut: /sysroot/etc/shadow: No such file or directory May 17 00:38:03.924368 initrd-setup-root[1113]: cut: /sysroot/etc/gshadow: No such file or directory May 17 00:38:04.050683 systemd[1]: Mounting sysroot-usr-share-oem.mount... May 17 00:38:04.054198 systemd[1]: Finished initrd-setup-root.service. May 17 00:38:04.054000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:38:04.056249 systemd[1]: Starting ignition-mount.service... May 17 00:38:04.057552 systemd[1]: Starting sysroot-boot.service... May 17 00:38:04.064775 bash[1131]: umount: /sysroot/usr/share/oem: not mounted. May 17 00:38:04.074597 ignition[1132]: INFO : Ignition 2.14.0 May 17 00:38:04.075415 ignition[1132]: INFO : Stage: mount May 17 00:38:04.076139 ignition[1132]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" May 17 00:38:04.078972 kernel: BTRFS: device label OEM devid 1 transid 14 /dev/nvme0n1p6 scanned by mount (1124) May 17 00:38:04.078996 ignition[1132]: DEBUG : parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b May 17 00:38:04.084359 kernel: BTRFS info (device nvme0n1p6): using crc32c (crc32c-intel) checksum algorithm May 17 00:38:04.084411 kernel: BTRFS info (device nvme0n1p6): using free space tree May 17 00:38:04.084423 kernel: BTRFS info (device nvme0n1p6): has skinny extents May 17 00:38:04.088393 ignition[1132]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/aws" May 17 00:38:04.089079 ignition[1132]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 May 17 00:38:04.091442 ignition[1132]: INFO : PUT result: OK May 17 00:38:04.096948 ignition[1132]: INFO : mount: mount passed May 17 00:38:04.096948 ignition[1132]: INFO : Ignition finished successfully May 17 00:38:04.099184 systemd[1]: Finished ignition-mount.service. May 17 00:38:04.098000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:38:04.106000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:38:04.107263 systemd[1]: Finished sysroot-boot.service. May 17 00:38:04.123358 kernel: BTRFS info (device nvme0n1p6): enabling ssd optimizations May 17 00:38:04.132959 systemd[1]: Mounted sysroot-usr-share-oem.mount. May 17 00:38:04.134576 systemd[1]: Starting ignition-files.service... May 17 00:38:04.153181 ignition[1160]: INFO : Ignition 2.14.0 May 17 00:38:04.154453 ignition[1160]: INFO : Stage: files May 17 00:38:04.154453 ignition[1160]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" May 17 00:38:04.154453 ignition[1160]: DEBUG : parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b May 17 00:38:04.163106 ignition[1160]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/aws" May 17 00:38:04.164026 ignition[1160]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 May 17 00:38:04.165513 ignition[1160]: INFO : PUT result: OK May 17 00:38:04.170111 ignition[1160]: DEBUG : files: compiled without relabeling support, skipping May 17 00:38:04.177822 ignition[1160]: INFO : files: ensureUsers: op(1): [started] creating or modifying user "core" May 17 00:38:04.179181 ignition[1160]: DEBUG : files: ensureUsers: op(1): executing: "usermod" "--root" "/sysroot" "core" May 17 00:38:04.193018 ignition[1160]: INFO : files: ensureUsers: op(1): [finished] creating or modifying user "core" May 17 00:38:04.194252 ignition[1160]: INFO : files: ensureUsers: op(2): [started] adding ssh keys to user "core" May 17 00:38:04.195502 ignition[1160]: INFO : files: ensureUsers: op(2): [finished] adding ssh keys to user "core" May 17 00:38:04.195502 ignition[1160]: INFO : files: createFilesystemsFiles: createFiles: op(3): [started] writing file "/sysroot/opt/helm-v3.17.3-linux-amd64.tar.gz" May 17 00:38:04.195502 ignition[1160]: INFO : GET https://get.helm.sh/helm-v3.17.3-linux-amd64.tar.gz: attempt #1 May 17 00:38:04.194627 unknown[1160]: wrote ssh authorized keys file for user: core May 17 00:38:04.282585 ignition[1160]: INFO : GET result: OK May 17 00:38:04.463147 ignition[1160]: INFO : files: createFilesystemsFiles: createFiles: op(3): [finished] writing file "/sysroot/opt/helm-v3.17.3-linux-amd64.tar.gz" May 17 00:38:04.463147 ignition[1160]: INFO : files: createFilesystemsFiles: createFiles: op(4): [started] writing file "/sysroot/etc/eks/bootstrap.sh" May 17 00:38:04.465848 ignition[1160]: INFO : oem config not found in "/usr/share/oem", looking on oem partition May 17 00:38:04.468040 ignition[1160]: INFO : op(1): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1801727368" May 17 00:38:04.469393 ignition[1160]: CRITICAL : op(1): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1801727368": device or resource busy May 17 00:38:04.469393 ignition[1160]: ERROR : failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem1801727368", trying btrfs: device or resource busy May 17 00:38:04.469393 ignition[1160]: INFO : op(2): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1801727368" May 17 00:38:04.475102 ignition[1160]: INFO : op(2): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1801727368" May 17 00:38:04.485185 ignition[1160]: INFO : op(3): [started] unmounting "/mnt/oem1801727368" May 17 00:38:04.486978 systemd[1]: mnt-oem1801727368.mount: Deactivated successfully. May 17 00:38:04.488314 ignition[1160]: INFO : op(3): [finished] unmounting "/mnt/oem1801727368" May 17 00:38:04.488314 ignition[1160]: INFO : files: createFilesystemsFiles: createFiles: op(4): [finished] writing file "/sysroot/etc/eks/bootstrap.sh" May 17 00:38:04.488314 ignition[1160]: INFO : files: createFilesystemsFiles: createFiles: op(5): [started] writing file "/sysroot/home/core/install.sh" May 17 00:38:04.488314 ignition[1160]: INFO : files: createFilesystemsFiles: createFiles: op(5): [finished] writing file "/sysroot/home/core/install.sh" May 17 00:38:04.488314 ignition[1160]: INFO : files: createFilesystemsFiles: createFiles: op(6): [started] writing file "/sysroot/home/core/nginx.yaml" May 17 00:38:04.488314 ignition[1160]: INFO : files: createFilesystemsFiles: createFiles: op(6): [finished] writing file "/sysroot/home/core/nginx.yaml" May 17 00:38:04.488314 ignition[1160]: INFO : files: createFilesystemsFiles: createFiles: op(7): [started] writing file "/sysroot/home/core/nfs-pod.yaml" May 17 00:38:04.504567 ignition[1160]: INFO : files: createFilesystemsFiles: createFiles: op(7): [finished] writing file "/sysroot/home/core/nfs-pod.yaml" May 17 00:38:04.504567 ignition[1160]: INFO : files: createFilesystemsFiles: createFiles: op(8): [started] writing file "/sysroot/home/core/nfs-pvc.yaml" May 17 00:38:04.504567 ignition[1160]: INFO : files: createFilesystemsFiles: createFiles: op(8): [finished] writing file "/sysroot/home/core/nfs-pvc.yaml" May 17 00:38:04.504567 ignition[1160]: INFO : files: createFilesystemsFiles: createFiles: op(9): [started] writing file "/sysroot/etc/flatcar/update.conf" May 17 00:38:04.504567 ignition[1160]: INFO : files: createFilesystemsFiles: createFiles: op(9): [finished] writing file "/sysroot/etc/flatcar/update.conf" May 17 00:38:04.504567 ignition[1160]: INFO : files: createFilesystemsFiles: createFiles: op(a): [started] writing link "/sysroot/etc/extensions/kubernetes.raw" -> "/opt/extensions/kubernetes/kubernetes-v1.33.0-x86-64.raw" May 17 00:38:04.504567 ignition[1160]: INFO : files: createFilesystemsFiles: createFiles: op(a): [finished] writing link "/sysroot/etc/extensions/kubernetes.raw" -> "/opt/extensions/kubernetes/kubernetes-v1.33.0-x86-64.raw" May 17 00:38:04.504567 ignition[1160]: INFO : files: createFilesystemsFiles: createFiles: op(b): [started] writing file "/sysroot/etc/amazon/ssm/amazon-ssm-agent.json" May 17 00:38:04.504567 ignition[1160]: INFO : oem config not found in "/usr/share/oem", looking on oem partition May 17 00:38:04.504567 ignition[1160]: INFO : op(4): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem655801178" May 17 00:38:04.504567 ignition[1160]: CRITICAL : op(4): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem655801178": device or resource busy May 17 00:38:04.504567 ignition[1160]: ERROR : failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem655801178", trying btrfs: device or resource busy May 17 00:38:04.504567 ignition[1160]: INFO : op(5): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem655801178" May 17 00:38:04.504567 ignition[1160]: INFO : op(5): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem655801178" May 17 00:38:04.504567 ignition[1160]: INFO : op(6): [started] unmounting "/mnt/oem655801178" May 17 00:38:04.504567 ignition[1160]: INFO : op(6): [finished] unmounting "/mnt/oem655801178" May 17 00:38:04.504567 ignition[1160]: INFO : files: createFilesystemsFiles: createFiles: op(b): [finished] writing file "/sysroot/etc/amazon/ssm/amazon-ssm-agent.json" May 17 00:38:04.539889 ignition[1160]: INFO : files: createFilesystemsFiles: createFiles: op(c): [started] writing file "/sysroot/etc/amazon/ssm/seelog.xml" May 17 00:38:04.539889 ignition[1160]: INFO : oem config not found in "/usr/share/oem", looking on oem partition May 17 00:38:04.539889 ignition[1160]: INFO : op(7): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem3530882886" May 17 00:38:04.539889 ignition[1160]: CRITICAL : op(7): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem3530882886": device or resource busy May 17 00:38:04.539889 ignition[1160]: ERROR : failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem3530882886", trying btrfs: device or resource busy May 17 00:38:04.539889 ignition[1160]: INFO : op(8): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem3530882886" May 17 00:38:04.539889 ignition[1160]: INFO : op(8): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem3530882886" May 17 00:38:04.539889 ignition[1160]: INFO : op(9): [started] unmounting "/mnt/oem3530882886" May 17 00:38:04.539889 ignition[1160]: INFO : op(9): [finished] unmounting "/mnt/oem3530882886" May 17 00:38:04.539889 ignition[1160]: INFO : files: createFilesystemsFiles: createFiles: op(c): [finished] writing file "/sysroot/etc/amazon/ssm/seelog.xml" May 17 00:38:04.539889 ignition[1160]: INFO : files: createFilesystemsFiles: createFiles: op(d): [started] writing file "/sysroot/etc/systemd/system/nvidia.service" May 17 00:38:04.539889 ignition[1160]: INFO : oem config not found in "/usr/share/oem", looking on oem partition May 17 00:38:04.539889 ignition[1160]: INFO : op(a): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem111986202" May 17 00:38:04.539889 ignition[1160]: CRITICAL : op(a): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem111986202": device or resource busy May 17 00:38:04.539889 ignition[1160]: ERROR : failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem111986202", trying btrfs: device or resource busy May 17 00:38:04.539889 ignition[1160]: INFO : op(b): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem111986202" May 17 00:38:04.539889 ignition[1160]: INFO : op(b): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem111986202" May 17 00:38:04.539889 ignition[1160]: INFO : op(c): [started] unmounting "/mnt/oem111986202" May 17 00:38:04.539889 ignition[1160]: INFO : op(c): [finished] unmounting "/mnt/oem111986202" May 17 00:38:04.539889 ignition[1160]: INFO : files: createFilesystemsFiles: createFiles: op(d): [finished] writing file "/sysroot/etc/systemd/system/nvidia.service" May 17 00:38:04.539889 ignition[1160]: INFO : files: createFilesystemsFiles: createFiles: op(e): [started] writing file "/sysroot/opt/extensions/kubernetes/kubernetes-v1.33.0-x86-64.raw" May 17 00:38:04.573391 ignition[1160]: INFO : GET https://extensions.flatcar.org/extensions/kubernetes-v1.33.0-x86-64.raw: attempt #1 May 17 00:38:05.029487 systemd-networkd[1024]: eth0: Gained IPv6LL May 17 00:38:05.285616 ignition[1160]: INFO : GET result: OK May 17 00:38:05.640885 ignition[1160]: INFO : files: createFilesystemsFiles: createFiles: op(e): [finished] writing file "/sysroot/opt/extensions/kubernetes/kubernetes-v1.33.0-x86-64.raw" May 17 00:38:05.640885 ignition[1160]: INFO : files: op(f): [started] processing unit "coreos-metadata-sshkeys@.service" May 17 00:38:05.640885 ignition[1160]: INFO : files: op(f): [finished] processing unit "coreos-metadata-sshkeys@.service" May 17 00:38:05.640885 ignition[1160]: INFO : files: op(10): [started] processing unit "amazon-ssm-agent.service" May 17 00:38:05.640885 ignition[1160]: INFO : files: op(10): op(11): [started] writing unit "amazon-ssm-agent.service" at "/sysroot/etc/systemd/system/amazon-ssm-agent.service" May 17 00:38:05.648845 ignition[1160]: INFO : files: op(10): op(11): [finished] writing unit "amazon-ssm-agent.service" at "/sysroot/etc/systemd/system/amazon-ssm-agent.service" May 17 00:38:05.648845 ignition[1160]: INFO : files: op(10): [finished] processing unit "amazon-ssm-agent.service" May 17 00:38:05.648845 ignition[1160]: INFO : files: op(12): [started] processing unit "nvidia.service" May 17 00:38:05.648845 ignition[1160]: INFO : files: op(12): [finished] processing unit "nvidia.service" May 17 00:38:05.648845 ignition[1160]: INFO : files: op(13): [started] processing unit "prepare-helm.service" May 17 00:38:05.648845 ignition[1160]: INFO : files: op(13): op(14): [started] writing unit "prepare-helm.service" at "/sysroot/etc/systemd/system/prepare-helm.service" May 17 00:38:05.648845 ignition[1160]: INFO : files: op(13): op(14): [finished] writing unit "prepare-helm.service" at "/sysroot/etc/systemd/system/prepare-helm.service" May 17 00:38:05.648845 ignition[1160]: INFO : files: op(13): [finished] processing unit "prepare-helm.service" May 17 00:38:05.648845 ignition[1160]: INFO : files: op(15): [started] setting preset to enabled for "nvidia.service" May 17 00:38:05.648845 ignition[1160]: INFO : files: op(15): [finished] setting preset to enabled for "nvidia.service" May 17 00:38:05.648845 ignition[1160]: INFO : files: op(16): [started] setting preset to enabled for "prepare-helm.service" May 17 00:38:05.648845 ignition[1160]: INFO : files: op(16): [finished] setting preset to enabled for "prepare-helm.service" May 17 00:38:05.648845 ignition[1160]: INFO : files: op(17): [started] setting preset to enabled for "coreos-metadata-sshkeys@.service " May 17 00:38:05.648845 ignition[1160]: INFO : files: op(17): [finished] setting preset to enabled for "coreos-metadata-sshkeys@.service " May 17 00:38:05.648845 ignition[1160]: INFO : files: op(18): [started] setting preset to enabled for "amazon-ssm-agent.service" May 17 00:38:05.648845 ignition[1160]: INFO : files: op(18): [finished] setting preset to enabled for "amazon-ssm-agent.service" May 17 00:38:05.648845 ignition[1160]: INFO : files: createResultFile: createFiles: op(19): [started] writing file "/sysroot/etc/.ignition-result.json" May 17 00:38:05.648845 ignition[1160]: INFO : files: createResultFile: createFiles: op(19): [finished] writing file "/sysroot/etc/.ignition-result.json" May 17 00:38:05.648845 ignition[1160]: INFO : files: files passed May 17 00:38:05.648845 ignition[1160]: INFO : Ignition finished successfully May 17 00:38:05.703710 kernel: kauditd_printk_skb: 26 callbacks suppressed May 17 00:38:05.703737 kernel: audit: type=1130 audit(1747442285.648:37): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:38:05.703751 kernel: audit: type=1130 audit(1747442285.665:38): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:38:05.703762 kernel: audit: type=1131 audit(1747442285.669:39): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:38:05.703778 kernel: audit: type=1130 audit(1747442285.677:40): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:38:05.648000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:38:05.665000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:38:05.669000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:38:05.677000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:38:05.648613 systemd[1]: Finished ignition-files.service. May 17 00:38:05.715245 kernel: audit: type=1130 audit(1747442285.703:41): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:38:05.715293 kernel: audit: type=1131 audit(1747442285.703:42): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:38:05.703000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:38:05.703000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:38:05.655901 systemd[1]: Starting initrd-setup-root-after-ignition.service... May 17 00:38:05.658933 systemd[1]: torcx-profile-populate.service was skipped because of an unmet condition check (ConditionPathExists=/sysroot/etc/torcx/next-profile). May 17 00:38:05.721241 initrd-setup-root-after-ignition[1185]: grep: /sysroot/etc/flatcar/enabled-sysext.conf: No such file or directory May 17 00:38:05.659752 systemd[1]: Starting ignition-quench.service... May 17 00:38:05.663973 systemd[1]: ignition-quench.service: Deactivated successfully. May 17 00:38:05.664066 systemd[1]: Finished ignition-quench.service. May 17 00:38:05.677576 systemd[1]: Finished initrd-setup-root-after-ignition.service. May 17 00:38:05.678981 systemd[1]: Reached target ignition-complete.target. May 17 00:38:05.687673 systemd[1]: Starting initrd-parse-etc.service... May 17 00:38:05.703782 systemd[1]: initrd-parse-etc.service: Deactivated successfully. May 17 00:38:05.703876 systemd[1]: Finished initrd-parse-etc.service. May 17 00:38:05.704890 systemd[1]: Reached target initrd-fs.target. May 17 00:38:05.735000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:38:05.716072 systemd[1]: Reached target initrd.target. May 17 00:38:05.745398 kernel: audit: type=1130 audit(1747442285.735:43): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:38:05.717728 systemd[1]: dracut-mount.service was skipped because no trigger condition checks were met. May 17 00:38:05.719051 systemd[1]: Starting dracut-pre-pivot.service... May 17 00:38:05.735582 systemd[1]: Finished dracut-pre-pivot.service. May 17 00:38:05.737559 systemd[1]: Starting initrd-cleanup.service... May 17 00:38:05.753991 systemd[1]: initrd-cleanup.service: Deactivated successfully. May 17 00:38:05.754120 systemd[1]: Finished initrd-cleanup.service. May 17 00:38:05.765615 kernel: audit: type=1130 audit(1747442285.754:44): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:38:05.765653 kernel: audit: type=1131 audit(1747442285.754:45): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:38:05.754000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:38:05.754000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:38:05.756682 systemd[1]: Stopped target nss-lookup.target. May 17 00:38:05.766362 systemd[1]: Stopped target remote-cryptsetup.target. May 17 00:38:05.767657 systemd[1]: Stopped target timers.target. May 17 00:38:05.768841 systemd[1]: dracut-pre-pivot.service: Deactivated successfully. May 17 00:38:05.775097 kernel: audit: type=1131 audit(1747442285.768:46): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:38:05.768000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:38:05.768927 systemd[1]: Stopped dracut-pre-pivot.service. May 17 00:38:05.770051 systemd[1]: Stopped target initrd.target. May 17 00:38:05.775797 systemd[1]: Stopped target basic.target. May 17 00:38:05.777029 systemd[1]: Stopped target ignition-complete.target. May 17 00:38:05.778216 systemd[1]: Stopped target ignition-diskful.target. May 17 00:38:05.779485 systemd[1]: Stopped target initrd-root-device.target. May 17 00:38:05.780617 systemd[1]: Stopped target remote-fs.target. May 17 00:38:05.781745 systemd[1]: Stopped target remote-fs-pre.target. May 17 00:38:05.782989 systemd[1]: Stopped target sysinit.target. May 17 00:38:05.784153 systemd[1]: Stopped target local-fs.target. May 17 00:38:05.785288 systemd[1]: Stopped target local-fs-pre.target. May 17 00:38:05.786525 systemd[1]: Stopped target swap.target. May 17 00:38:05.787000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:38:05.787656 systemd[1]: dracut-pre-mount.service: Deactivated successfully. May 17 00:38:05.787743 systemd[1]: Stopped dracut-pre-mount.service. May 17 00:38:05.789000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:38:05.788864 systemd[1]: Stopped target cryptsetup.target. May 17 00:38:05.790000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:38:05.789902 systemd[1]: dracut-initqueue.service: Deactivated successfully. May 17 00:38:05.792000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:38:05.789976 systemd[1]: Stopped dracut-initqueue.service. May 17 00:38:05.796000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:38:05.804000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:38:05.791215 systemd[1]: initrd-setup-root-after-ignition.service: Deactivated successfully. May 17 00:38:05.791278 systemd[1]: Stopped initrd-setup-root-after-ignition.service. May 17 00:38:05.792314 systemd[1]: ignition-files.service: Deactivated successfully. May 17 00:38:05.808000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:38:05.811520 ignition[1198]: INFO : Ignition 2.14.0 May 17 00:38:05.811520 ignition[1198]: INFO : Stage: umount May 17 00:38:05.812000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:38:05.792396 systemd[1]: Stopped ignition-files.service. May 17 00:38:05.815323 ignition[1198]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" May 17 00:38:05.815323 ignition[1198]: DEBUG : parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b May 17 00:38:05.794572 systemd[1]: Stopping ignition-mount.service... May 17 00:38:05.796292 systemd[1]: Stopping iscsiuio.service... May 17 00:38:05.797130 systemd[1]: kmod-static-nodes.service: Deactivated successfully. May 17 00:38:05.797204 systemd[1]: Stopped kmod-static-nodes.service. May 17 00:38:05.803719 systemd[1]: Stopping sysroot-boot.service... May 17 00:38:05.804635 systemd[1]: systemd-udev-trigger.service: Deactivated successfully. May 17 00:38:05.804716 systemd[1]: Stopped systemd-udev-trigger.service. May 17 00:38:05.808214 systemd[1]: dracut-pre-trigger.service: Deactivated successfully. May 17 00:38:05.808285 systemd[1]: Stopped dracut-pre-trigger.service. May 17 00:38:05.810936 systemd[1]: iscsiuio.service: Deactivated successfully. May 17 00:38:05.811068 systemd[1]: Stopped iscsiuio.service. May 17 00:38:05.831696 systemd[1]: sysroot-boot.mount: Deactivated successfully. May 17 00:38:05.839122 ignition[1198]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/aws" May 17 00:38:05.840055 ignition[1198]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 May 17 00:38:05.840873 ignition[1198]: INFO : PUT result: OK May 17 00:38:05.842819 ignition[1198]: INFO : umount: umount passed May 17 00:38:05.843932 ignition[1198]: INFO : Ignition finished successfully May 17 00:38:05.844207 systemd[1]: ignition-mount.service: Deactivated successfully. May 17 00:38:05.843000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:38:05.844347 systemd[1]: Stopped ignition-mount.service. May 17 00:38:05.845000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:38:05.845389 systemd[1]: ignition-disks.service: Deactivated successfully. May 17 00:38:05.846000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:38:05.845459 systemd[1]: Stopped ignition-disks.service. May 17 00:38:05.847000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:38:05.846659 systemd[1]: ignition-kargs.service: Deactivated successfully. May 17 00:38:05.849000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:38:05.846724 systemd[1]: Stopped ignition-kargs.service. May 17 00:38:05.847799 systemd[1]: ignition-fetch.service: Deactivated successfully. May 17 00:38:05.847858 systemd[1]: Stopped ignition-fetch.service. May 17 00:38:05.848980 systemd[1]: Stopped target network.target. May 17 00:38:05.849552 systemd[1]: ignition-fetch-offline.service: Deactivated successfully. May 17 00:38:05.849620 systemd[1]: Stopped ignition-fetch-offline.service. May 17 00:38:05.850839 systemd[1]: Stopped target paths.target. May 17 00:38:05.851850 systemd[1]: systemd-ask-password-console.path: Deactivated successfully. May 17 00:38:05.855396 systemd[1]: Stopped systemd-ask-password-console.path. May 17 00:38:05.856909 systemd[1]: Stopped target slices.target. May 17 00:38:05.857904 systemd[1]: Stopped target sockets.target. May 17 00:38:05.859824 systemd[1]: iscsid.socket: Deactivated successfully. May 17 00:38:05.859870 systemd[1]: Closed iscsid.socket. May 17 00:38:05.860949 systemd[1]: iscsiuio.socket: Deactivated successfully. May 17 00:38:05.861000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:38:05.860999 systemd[1]: Closed iscsiuio.socket. May 17 00:38:05.861979 systemd[1]: ignition-setup.service: Deactivated successfully. May 17 00:38:05.862045 systemd[1]: Stopped ignition-setup.service. May 17 00:38:05.863450 systemd[1]: Stopping systemd-networkd.service... May 17 00:38:05.864381 systemd[1]: Stopping systemd-resolved.service... May 17 00:38:05.866412 systemd-networkd[1024]: eth0: DHCPv6 lease lost May 17 00:38:05.867000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:38:05.867658 systemd[1]: systemd-networkd.service: Deactivated successfully. May 17 00:38:05.867789 systemd[1]: Stopped systemd-networkd.service. May 17 00:38:05.869038 systemd[1]: systemd-networkd.socket: Deactivated successfully. May 17 00:38:05.869080 systemd[1]: Closed systemd-networkd.socket. May 17 00:38:05.872000 audit: BPF prog-id=9 op=UNLOAD May 17 00:38:05.871076 systemd[1]: Stopping network-cleanup.service... May 17 00:38:05.873000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:38:05.873857 systemd[1]: parse-ip-for-networkd.service: Deactivated successfully. May 17 00:38:05.875000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:38:05.873913 systemd[1]: Stopped parse-ip-for-networkd.service. May 17 00:38:05.876000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:38:05.874603 systemd[1]: systemd-sysctl.service: Deactivated successfully. May 17 00:38:05.874660 systemd[1]: Stopped systemd-sysctl.service. May 17 00:38:05.876557 systemd[1]: systemd-modules-load.service: Deactivated successfully. May 17 00:38:05.876614 systemd[1]: Stopped systemd-modules-load.service. May 17 00:38:05.880992 systemd[1]: Stopping systemd-udevd.service... May 17 00:38:05.887000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:38:05.885970 systemd[1]: run-credentials-systemd\x2dsysctl.service.mount: Deactivated successfully. May 17 00:38:05.888000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:38:05.890000 audit: BPF prog-id=6 op=UNLOAD May 17 00:38:05.886809 systemd[1]: systemd-resolved.service: Deactivated successfully. May 17 00:38:05.886931 systemd[1]: Stopped systemd-resolved.service. May 17 00:38:05.889562 systemd[1]: systemd-udevd.service: Deactivated successfully. May 17 00:38:05.895000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:38:05.889723 systemd[1]: Stopped systemd-udevd.service. May 17 00:38:05.896000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:38:05.891774 systemd[1]: systemd-udevd-control.socket: Deactivated successfully. May 17 00:38:05.897000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:38:05.891840 systemd[1]: Closed systemd-udevd-control.socket. May 17 00:38:05.902000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:38:05.903000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=network-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:38:05.894239 systemd[1]: systemd-udevd-kernel.socket: Deactivated successfully. May 17 00:38:05.894342 systemd[1]: Closed systemd-udevd-kernel.socket. May 17 00:38:05.908000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:38:05.908000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:38:05.895491 systemd[1]: dracut-pre-udev.service: Deactivated successfully. May 17 00:38:05.895550 systemd[1]: Stopped dracut-pre-udev.service. May 17 00:38:05.896633 systemd[1]: dracut-cmdline.service: Deactivated successfully. May 17 00:38:05.896692 systemd[1]: Stopped dracut-cmdline.service. May 17 00:38:05.897802 systemd[1]: dracut-cmdline-ask.service: Deactivated successfully. May 17 00:38:05.897855 systemd[1]: Stopped dracut-cmdline-ask.service. May 17 00:38:05.900023 systemd[1]: Starting initrd-udevadm-cleanup-db.service... May 17 00:38:05.902385 systemd[1]: systemd-vconsole-setup.service: Deactivated successfully. May 17 00:38:05.902451 systemd[1]: Stopped systemd-vconsole-setup.service. May 17 00:38:05.903927 systemd[1]: network-cleanup.service: Deactivated successfully. May 17 00:38:05.904054 systemd[1]: Stopped network-cleanup.service. May 17 00:38:05.909195 systemd[1]: initrd-udevadm-cleanup-db.service: Deactivated successfully. May 17 00:38:05.909295 systemd[1]: Finished initrd-udevadm-cleanup-db.service. May 17 00:38:06.001558 systemd[1]: sysroot-boot.service: Deactivated successfully. May 17 00:38:06.001678 systemd[1]: Stopped sysroot-boot.service. May 17 00:38:06.002000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:38:06.003661 systemd[1]: Reached target initrd-switch-root.target. May 17 00:38:06.004269 systemd[1]: initrd-setup-root.service: Deactivated successfully. May 17 00:38:06.004000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:38:06.004359 systemd[1]: Stopped initrd-setup-root.service. May 17 00:38:06.006983 systemd[1]: Starting initrd-switch-root.service... May 17 00:38:06.020347 systemd[1]: Switching root. May 17 00:38:06.038838 iscsid[1029]: iscsid shutting down. May 17 00:38:06.039975 systemd-journald[185]: Received SIGTERM from PID 1 (n/a). May 17 00:38:06.040070 systemd-journald[185]: Journal stopped May 17 00:38:10.788847 kernel: SELinux: Class mctp_socket not defined in policy. May 17 00:38:10.788937 kernel: SELinux: Class anon_inode not defined in policy. May 17 00:38:10.788959 kernel: SELinux: the above unknown classes and permissions will be allowed May 17 00:38:10.788981 kernel: SELinux: policy capability network_peer_controls=1 May 17 00:38:10.788999 kernel: SELinux: policy capability open_perms=1 May 17 00:38:10.789018 kernel: SELinux: policy capability extended_socket_class=1 May 17 00:38:10.789038 kernel: SELinux: policy capability always_check_network=0 May 17 00:38:10.789062 kernel: SELinux: policy capability cgroup_seclabel=1 May 17 00:38:10.789079 kernel: SELinux: policy capability nnp_nosuid_transition=1 May 17 00:38:10.789096 kernel: SELinux: policy capability genfs_seclabel_symlinks=0 May 17 00:38:10.789118 kernel: SELinux: policy capability ioctl_skip_cloexec=0 May 17 00:38:10.789140 systemd[1]: Successfully loaded SELinux policy in 71.059ms. May 17 00:38:10.789173 systemd[1]: Relabelled /dev, /dev/shm, /run, /sys/fs/cgroup in 9.106ms. May 17 00:38:10.789192 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) May 17 00:38:10.789218 systemd[1]: Detected virtualization amazon. May 17 00:38:10.789238 systemd[1]: Detected architecture x86-64. May 17 00:38:10.789257 systemd[1]: Detected first boot. May 17 00:38:10.789281 systemd[1]: Initializing machine ID from VM UUID. May 17 00:38:10.789302 kernel: SELinux: Context system_u:object_r:container_file_t:s0:c1022,c1023 is not valid (left unmapped). May 17 00:38:10.789323 systemd[1]: Populated /etc with preset unit settings. May 17 00:38:10.789369 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. May 17 00:38:10.790531 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. May 17 00:38:10.790580 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. May 17 00:38:10.790606 systemd[1]: iscsid.service: Deactivated successfully. May 17 00:38:10.790629 systemd[1]: Stopped iscsid.service. May 17 00:38:10.790651 systemd[1]: initrd-switch-root.service: Deactivated successfully. May 17 00:38:10.790674 systemd[1]: Stopped initrd-switch-root.service. May 17 00:38:10.790702 systemd[1]: systemd-journald.service: Scheduled restart job, restart counter is at 1. May 17 00:38:10.790725 systemd[1]: Created slice system-addon\x2dconfig.slice. May 17 00:38:10.790747 systemd[1]: Created slice system-addon\x2drun.slice. May 17 00:38:10.790769 systemd[1]: Created slice system-coreos\x2dmetadata\x2dsshkeys.slice. May 17 00:38:10.790791 systemd[1]: Created slice system-getty.slice. May 17 00:38:10.790813 systemd[1]: Created slice system-modprobe.slice. May 17 00:38:10.790835 systemd[1]: Created slice system-serial\x2dgetty.slice. May 17 00:38:10.793399 systemd[1]: Created slice system-system\x2dcloudinit.slice. May 17 00:38:10.793431 systemd[1]: Created slice system-systemd\x2dfsck.slice. May 17 00:38:10.793458 systemd[1]: Created slice user.slice. May 17 00:38:10.793478 systemd[1]: Started systemd-ask-password-console.path. May 17 00:38:10.793499 systemd[1]: Started systemd-ask-password-wall.path. May 17 00:38:10.793526 systemd[1]: Set up automount boot.automount. May 17 00:38:10.793547 systemd[1]: Set up automount proc-sys-fs-binfmt_misc.automount. May 17 00:38:10.793567 systemd[1]: Stopped target initrd-switch-root.target. May 17 00:38:10.793588 systemd[1]: Stopped target initrd-fs.target. May 17 00:38:10.793610 systemd[1]: Stopped target initrd-root-fs.target. May 17 00:38:10.793630 systemd[1]: Reached target integritysetup.target. May 17 00:38:10.793651 systemd[1]: Reached target remote-cryptsetup.target. May 17 00:38:10.793671 systemd[1]: Reached target remote-fs.target. May 17 00:38:10.793691 systemd[1]: Reached target slices.target. May 17 00:38:10.793712 systemd[1]: Reached target swap.target. May 17 00:38:10.793732 systemd[1]: Reached target torcx.target. May 17 00:38:10.793752 systemd[1]: Reached target veritysetup.target. May 17 00:38:10.793772 systemd[1]: Listening on systemd-coredump.socket. May 17 00:38:10.793795 systemd[1]: Listening on systemd-initctl.socket. May 17 00:38:10.793816 systemd[1]: Listening on systemd-networkd.socket. May 17 00:38:10.793837 systemd[1]: Listening on systemd-udevd-control.socket. May 17 00:38:10.793858 systemd[1]: Listening on systemd-udevd-kernel.socket. May 17 00:38:10.793877 systemd[1]: Listening on systemd-userdbd.socket. May 17 00:38:10.793899 systemd[1]: Mounting dev-hugepages.mount... May 17 00:38:10.793919 systemd[1]: Mounting dev-mqueue.mount... May 17 00:38:10.793940 systemd[1]: Mounting media.mount... May 17 00:38:10.793962 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). May 17 00:38:10.793982 systemd[1]: Mounting sys-kernel-debug.mount... May 17 00:38:10.794006 systemd[1]: Mounting sys-kernel-tracing.mount... May 17 00:38:10.794025 systemd[1]: Mounting tmp.mount... May 17 00:38:10.794045 systemd[1]: Starting flatcar-tmpfiles.service... May 17 00:38:10.794065 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. May 17 00:38:10.794083 systemd[1]: Starting kmod-static-nodes.service... May 17 00:38:10.794104 systemd[1]: Starting modprobe@configfs.service... May 17 00:38:10.794128 systemd[1]: Starting modprobe@dm_mod.service... May 17 00:38:10.794149 systemd[1]: Starting modprobe@drm.service... May 17 00:38:10.794167 systemd[1]: Starting modprobe@efi_pstore.service... May 17 00:38:10.794188 systemd[1]: Starting modprobe@fuse.service... May 17 00:38:10.794206 systemd[1]: Starting modprobe@loop.service... May 17 00:38:10.794227 systemd[1]: setup-nsswitch.service was skipped because of an unmet condition check (ConditionPathExists=!/etc/nsswitch.conf). May 17 00:38:10.794246 systemd[1]: systemd-fsck-root.service: Deactivated successfully. May 17 00:38:10.794281 systemd[1]: Stopped systemd-fsck-root.service. May 17 00:38:10.794301 kernel: kauditd_printk_skb: 70 callbacks suppressed May 17 00:38:10.794322 kernel: audit: type=1131 audit(1747442290.684:110): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:38:10.798801 systemd[1]: systemd-fsck-usr.service: Deactivated successfully. May 17 00:38:10.798837 systemd[1]: Stopped systemd-fsck-usr.service. May 17 00:38:10.798861 kernel: audit: type=1131 audit(1747442290.700:111): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:38:10.798883 systemd[1]: Stopped systemd-journald.service. May 17 00:38:10.798909 kernel: audit: type=1130 audit(1747442290.710:112): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:38:10.798928 kernel: audit: type=1131 audit(1747442290.710:113): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:38:10.798949 kernel: loop: module loaded May 17 00:38:10.798968 systemd[1]: Starting systemd-journald.service... May 17 00:38:10.798989 kernel: audit: type=1334 audit(1747442290.716:114): prog-id=21 op=LOAD May 17 00:38:10.799008 kernel: audit: type=1334 audit(1747442290.716:115): prog-id=22 op=LOAD May 17 00:38:10.799027 kernel: audit: type=1334 audit(1747442290.716:116): prog-id=23 op=LOAD May 17 00:38:10.799052 kernel: audit: type=1334 audit(1747442290.716:117): prog-id=19 op=UNLOAD May 17 00:38:10.799075 kernel: audit: type=1334 audit(1747442290.716:118): prog-id=20 op=UNLOAD May 17 00:38:10.799095 systemd[1]: Starting systemd-modules-load.service... May 17 00:38:10.799116 kernel: fuse: init (API version 7.34) May 17 00:38:10.799135 systemd[1]: Starting systemd-network-generator.service... May 17 00:38:10.799154 systemd[1]: Starting systemd-remount-fs.service... May 17 00:38:10.799172 systemd[1]: Starting systemd-udev-trigger.service... May 17 00:38:10.801424 systemd[1]: verity-setup.service: Deactivated successfully. May 17 00:38:10.801458 systemd[1]: Stopped verity-setup.service. May 17 00:38:10.801481 kernel: audit: type=1131 audit(1747442290.774:119): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:38:10.801508 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). May 17 00:38:10.801529 systemd[1]: Mounted dev-hugepages.mount. May 17 00:38:10.801549 systemd[1]: Mounted dev-mqueue.mount. May 17 00:38:10.801570 systemd[1]: Mounted media.mount. May 17 00:38:10.801596 systemd-journald[1310]: Journal started May 17 00:38:10.801673 systemd-journald[1310]: Runtime Journal (/run/log/journal/ec2236bb8aa2d8d59aa49924919d1751) is 4.8M, max 38.3M, 33.5M free. May 17 00:38:06.552000 audit: MAC_POLICY_LOAD auid=4294967295 ses=4294967295 lsm=selinux res=1 May 17 00:38:06.713000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 May 17 00:38:06.713000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 May 17 00:38:06.713000 audit: BPF prog-id=10 op=LOAD May 17 00:38:06.713000 audit: BPF prog-id=10 op=UNLOAD May 17 00:38:06.713000 audit: BPF prog-id=11 op=LOAD May 17 00:38:06.713000 audit: BPF prog-id=11 op=UNLOAD May 17 00:38:06.922000 audit[1231]: AVC avc: denied { associate } for pid=1231 comm="torcx-generator" name="docker" dev="tmpfs" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:object_r:container_file_t:s0:c1022,c1023" May 17 00:38:06.922000 audit[1231]: SYSCALL arch=c000003e syscall=188 success=yes exit=0 a0=c00014d8a2 a1=c0000cede0 a2=c0000d70c0 a3=32 items=0 ppid=1214 pid=1231 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:38:06.922000 audit: PROCTITLE proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 May 17 00:38:06.925000 audit[1231]: AVC avc: denied { associate } for pid=1231 comm="torcx-generator" name="usr" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 May 17 00:38:06.925000 audit[1231]: SYSCALL arch=c000003e syscall=258 success=yes exit=0 a0=ffffffffffffff9c a1=c00014d979 a2=1ed a3=0 items=2 ppid=1214 pid=1231 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:38:06.925000 audit: CWD cwd="/" May 17 00:38:10.804461 systemd[1]: Started systemd-journald.service. May 17 00:38:06.925000 audit: PATH item=0 name=(null) inode=2 dev=00:1c mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 May 17 00:38:06.925000 audit: PATH item=1 name=(null) inode=3 dev=00:1c mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 May 17 00:38:06.925000 audit: PROCTITLE proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 May 17 00:38:10.532000 audit: BPF prog-id=12 op=LOAD May 17 00:38:10.532000 audit: BPF prog-id=3 op=UNLOAD May 17 00:38:10.532000 audit: BPF prog-id=13 op=LOAD May 17 00:38:10.532000 audit: BPF prog-id=14 op=LOAD May 17 00:38:10.532000 audit: BPF prog-id=4 op=UNLOAD May 17 00:38:10.532000 audit: BPF prog-id=5 op=UNLOAD May 17 00:38:10.534000 audit: BPF prog-id=15 op=LOAD May 17 00:38:10.534000 audit: BPF prog-id=12 op=UNLOAD May 17 00:38:10.534000 audit: BPF prog-id=16 op=LOAD May 17 00:38:10.534000 audit: BPF prog-id=17 op=LOAD May 17 00:38:10.534000 audit: BPF prog-id=13 op=UNLOAD May 17 00:38:10.534000 audit: BPF prog-id=14 op=UNLOAD May 17 00:38:10.534000 audit: BPF prog-id=18 op=LOAD May 17 00:38:10.534000 audit: BPF prog-id=15 op=UNLOAD May 17 00:38:10.534000 audit: BPF prog-id=19 op=LOAD May 17 00:38:10.534000 audit: BPF prog-id=20 op=LOAD May 17 00:38:10.534000 audit: BPF prog-id=16 op=UNLOAD May 17 00:38:10.535000 audit: BPF prog-id=17 op=UNLOAD May 17 00:38:10.535000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:38:10.539000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:38:10.542000 audit: BPF prog-id=18 op=UNLOAD May 17 00:38:10.543000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:38:10.544000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:38:10.684000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:38:10.700000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:38:10.710000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:38:10.710000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:38:10.716000 audit: BPF prog-id=21 op=LOAD May 17 00:38:10.716000 audit: BPF prog-id=22 op=LOAD May 17 00:38:10.716000 audit: BPF prog-id=23 op=LOAD May 17 00:38:10.716000 audit: BPF prog-id=19 op=UNLOAD May 17 00:38:10.716000 audit: BPF prog-id=20 op=UNLOAD May 17 00:38:10.774000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:38:10.784000 audit: CONFIG_CHANGE op=set audit_enabled=1 old=1 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 res=1 May 17 00:38:10.784000 audit[1310]: SYSCALL arch=c000003e syscall=46 success=yes exit=60 a0=3 a1=7ffd4a7676a0 a2=4000 a3=7ffd4a76773c items=0 ppid=1 pid=1310 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-journal" exe="/usr/lib/systemd/systemd-journald" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:38:10.784000 audit: PROCTITLE proctitle="/usr/lib/systemd/systemd-journald" May 17 00:38:10.804000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:38:10.532197 systemd[1]: Queued start job for default target multi-user.target. May 17 00:38:06.919681 /usr/lib/systemd/system-generators/torcx-generator[1231]: time="2025-05-17T00:38:06Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.7 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.7 /var/lib/torcx/store]" May 17 00:38:10.532211 systemd[1]: Unnecessary job was removed for dev-nvme0n1p6.device. May 17 00:38:06.920724 /usr/lib/systemd/system-generators/torcx-generator[1231]: time="2025-05-17T00:38:06Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json May 17 00:38:10.536881 systemd[1]: systemd-journald.service: Deactivated successfully. May 17 00:38:06.920755 /usr/lib/systemd/system-generators/torcx-generator[1231]: time="2025-05-17T00:38:06Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json May 17 00:38:10.805732 systemd[1]: Mounted sys-kernel-debug.mount. May 17 00:38:06.920801 /usr/lib/systemd/system-generators/torcx-generator[1231]: time="2025-05-17T00:38:06Z" level=info msg="no vendor profile selected by /etc/flatcar/docker-1.12" May 17 00:38:10.807780 systemd[1]: Mounted sys-kernel-tracing.mount. May 17 00:38:06.920818 /usr/lib/systemd/system-generators/torcx-generator[1231]: time="2025-05-17T00:38:06Z" level=debug msg="skipped missing lower profile" missing profile=oem May 17 00:38:10.808847 systemd[1]: Mounted tmp.mount. May 17 00:38:06.920863 /usr/lib/systemd/system-generators/torcx-generator[1231]: time="2025-05-17T00:38:06Z" level=warning msg="no next profile: unable to read profile file: open /etc/torcx/next-profile: no such file or directory" May 17 00:38:06.920883 /usr/lib/systemd/system-generators/torcx-generator[1231]: time="2025-05-17T00:38:06Z" level=debug msg="apply configuration parsed" lower profiles (vendor/oem)="[vendor]" upper profile (user)= May 17 00:38:06.921146 /usr/lib/systemd/system-generators/torcx-generator[1231]: time="2025-05-17T00:38:06Z" level=debug msg="mounted tmpfs" target=/run/torcx/unpack May 17 00:38:06.921199 /usr/lib/systemd/system-generators/torcx-generator[1231]: time="2025-05-17T00:38:06Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json May 17 00:38:06.921221 /usr/lib/systemd/system-generators/torcx-generator[1231]: time="2025-05-17T00:38:06Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json May 17 00:38:06.923004 /usr/lib/systemd/system-generators/torcx-generator[1231]: time="2025-05-17T00:38:06Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:20.10.torcx.tgz" reference=20.10 May 17 00:38:06.923079 /usr/lib/systemd/system-generators/torcx-generator[1231]: time="2025-05-17T00:38:06Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:com.coreos.cl.torcx.tgz" reference=com.coreos.cl May 17 00:38:06.923110 /usr/lib/systemd/system-generators/torcx-generator[1231]: time="2025-05-17T00:38:06Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store/3510.3.7: no such file or directory" path=/usr/share/oem/torcx/store/3510.3.7 May 17 00:38:06.923133 /usr/lib/systemd/system-generators/torcx-generator[1231]: time="2025-05-17T00:38:06Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store: no such file or directory" path=/usr/share/oem/torcx/store May 17 00:38:06.923164 /usr/lib/systemd/system-generators/torcx-generator[1231]: time="2025-05-17T00:38:06Z" level=info msg="store skipped" err="open /var/lib/torcx/store/3510.3.7: no such file or directory" path=/var/lib/torcx/store/3510.3.7 May 17 00:38:06.923185 /usr/lib/systemd/system-generators/torcx-generator[1231]: time="2025-05-17T00:38:06Z" level=info msg="store skipped" err="open /var/lib/torcx/store: no such file or directory" path=/var/lib/torcx/store May 17 00:38:10.001908 /usr/lib/systemd/system-generators/torcx-generator[1231]: time="2025-05-17T00:38:10Z" level=debug msg="image unpacked" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl May 17 00:38:10.002644 /usr/lib/systemd/system-generators/torcx-generator[1231]: time="2025-05-17T00:38:10Z" level=debug msg="binaries propagated" assets="[/bin/containerd /bin/containerd-shim /bin/ctr /bin/docker /bin/docker-containerd /bin/docker-containerd-shim /bin/docker-init /bin/docker-proxy /bin/docker-runc /bin/dockerd /bin/runc /bin/tini]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl May 17 00:38:10.002862 /usr/lib/systemd/system-generators/torcx-generator[1231]: time="2025-05-17T00:38:10Z" level=debug msg="networkd units propagated" assets="[/lib/systemd/network/50-docker.network /lib/systemd/network/90-docker-veth.network]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl May 17 00:38:10.003692 /usr/lib/systemd/system-generators/torcx-generator[1231]: time="2025-05-17T00:38:10Z" level=debug msg="systemd units propagated" assets="[/lib/systemd/system/containerd.service /lib/systemd/system/docker.service /lib/systemd/system/docker.socket /lib/systemd/system/sockets.target.wants /lib/systemd/system/multi-user.target.wants]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl May 17 00:38:10.003751 /usr/lib/systemd/system-generators/torcx-generator[1231]: time="2025-05-17T00:38:10Z" level=debug msg="profile applied" sealed profile=/run/torcx/profile.json upper profile= May 17 00:38:10.003810 /usr/lib/systemd/system-generators/torcx-generator[1231]: time="2025-05-17T00:38:10Z" level=debug msg="system state sealed" content="[TORCX_LOWER_PROFILES=\"vendor\" TORCX_UPPER_PROFILE=\"\" TORCX_PROFILE_PATH=\"/run/torcx/profile.json\" TORCX_BINDIR=\"/run/torcx/bin\" TORCX_UNPACKDIR=\"/run/torcx/unpack\"]" path=/run/metadata/torcx May 17 00:38:10.812000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:38:10.814000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:38:10.814000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:38:10.816000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:38:10.816000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:38:10.813072 systemd[1]: Finished kmod-static-nodes.service. May 17 00:38:10.815030 systemd[1]: modprobe@configfs.service: Deactivated successfully. May 17 00:38:10.815252 systemd[1]: Finished modprobe@configfs.service. May 17 00:38:10.816617 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. May 17 00:38:10.816833 systemd[1]: Finished modprobe@dm_mod.service. May 17 00:38:10.818114 systemd[1]: modprobe@drm.service: Deactivated successfully. May 17 00:38:10.818316 systemd[1]: Finished modprobe@drm.service. May 17 00:38:10.819000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:38:10.819000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:38:10.820000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:38:10.820000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:38:10.820742 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. May 17 00:38:10.820955 systemd[1]: Finished modprobe@efi_pstore.service. May 17 00:38:10.822313 systemd[1]: modprobe@fuse.service: Deactivated successfully. May 17 00:38:10.825000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:38:10.825000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:38:10.826000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:38:10.826000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:38:10.823686 systemd[1]: Finished modprobe@fuse.service. May 17 00:38:10.827008 systemd[1]: modprobe@loop.service: Deactivated successfully. May 17 00:38:10.827165 systemd[1]: Finished modprobe@loop.service. May 17 00:38:10.829000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:38:10.829652 systemd[1]: Finished systemd-modules-load.service. May 17 00:38:10.831000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-network-generator comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:38:10.831529 systemd[1]: Finished systemd-network-generator.service. May 17 00:38:10.832807 systemd[1]: Finished systemd-remount-fs.service. May 17 00:38:10.834000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-remount-fs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:38:10.836163 systemd[1]: Reached target network-pre.target. May 17 00:38:10.838621 systemd[1]: Mounting sys-fs-fuse-connections.mount... May 17 00:38:10.841290 systemd[1]: Mounting sys-kernel-config.mount... May 17 00:38:10.843033 systemd[1]: remount-root.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/). May 17 00:38:10.848296 systemd[1]: Starting systemd-hwdb-update.service... May 17 00:38:10.850572 systemd[1]: Starting systemd-journal-flush.service... May 17 00:38:10.852445 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). May 17 00:38:10.854580 systemd[1]: Starting systemd-random-seed.service... May 17 00:38:10.855456 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. May 17 00:38:10.858322 systemd[1]: Starting systemd-sysctl.service... May 17 00:38:10.860949 systemd[1]: Mounted sys-fs-fuse-connections.mount. May 17 00:38:10.861806 systemd[1]: Mounted sys-kernel-config.mount. May 17 00:38:10.870965 systemd-journald[1310]: Time spent on flushing to /var/log/journal/ec2236bb8aa2d8d59aa49924919d1751 is 62.093ms for 1217 entries. May 17 00:38:10.870965 systemd-journald[1310]: System Journal (/var/log/journal/ec2236bb8aa2d8d59aa49924919d1751) is 8.0M, max 195.6M, 187.6M free. May 17 00:38:10.940473 systemd-journald[1310]: Received client request to flush runtime journal. May 17 00:38:10.879000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-random-seed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:38:10.898000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:38:10.910000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=flatcar-tmpfiles comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:38:10.880439 systemd[1]: Finished systemd-random-seed.service. May 17 00:38:10.881314 systemd[1]: Reached target first-boot-complete.target. May 17 00:38:10.899178 systemd[1]: Finished systemd-sysctl.service. May 17 00:38:10.911542 systemd[1]: Finished flatcar-tmpfiles.service. May 17 00:38:10.913877 systemd[1]: Starting systemd-sysusers.service... May 17 00:38:10.941682 systemd[1]: Finished systemd-journal-flush.service. May 17 00:38:10.941000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-flush comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:38:10.948000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:38:10.948969 systemd[1]: Finished systemd-udev-trigger.service. May 17 00:38:10.951231 systemd[1]: Starting systemd-udev-settle.service... May 17 00:38:10.964300 udevadm[1351]: systemd-udev-settle.service is deprecated. Please fix lvm2-activation-early.service, lvm2-activation.service not to pull it in. May 17 00:38:11.053000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysusers comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:38:11.054614 systemd[1]: Finished systemd-sysusers.service. May 17 00:38:11.512000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hwdb-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:38:11.513000 audit: BPF prog-id=24 op=LOAD May 17 00:38:11.513000 audit: BPF prog-id=25 op=LOAD May 17 00:38:11.513000 audit: BPF prog-id=7 op=UNLOAD May 17 00:38:11.513000 audit: BPF prog-id=8 op=UNLOAD May 17 00:38:11.513867 systemd[1]: Finished systemd-hwdb-update.service. May 17 00:38:11.515746 systemd[1]: Starting systemd-udevd.service... May 17 00:38:11.534718 systemd-udevd[1352]: Using default interface naming scheme 'v252'. May 17 00:38:11.588000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:38:11.589000 audit: BPF prog-id=26 op=LOAD May 17 00:38:11.589740 systemd[1]: Started systemd-udevd.service. May 17 00:38:11.591982 systemd[1]: Starting systemd-networkd.service... May 17 00:38:11.611000 audit: BPF prog-id=27 op=LOAD May 17 00:38:11.611000 audit: BPF prog-id=28 op=LOAD May 17 00:38:11.611000 audit: BPF prog-id=29 op=LOAD May 17 00:38:11.613831 systemd[1]: Starting systemd-userdbd.service... May 17 00:38:11.631555 systemd[1]: Condition check resulted in dev-ttyS0.device being skipped. May 17 00:38:11.648000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-userdbd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:38:11.649573 systemd[1]: Started systemd-userdbd.service. May 17 00:38:11.656003 (udev-worker)[1363]: Network interface NamePolicy= disabled on kernel command line. May 17 00:38:11.696355 kernel: input: Power Button as /devices/LNXSYSTM:00/LNXPWRBN:00/input/input2 May 17 00:38:11.705827 kernel: ACPI: button: Power Button [PWRF] May 17 00:38:11.705912 kernel: input: Sleep Button as /devices/LNXSYSTM:00/LNXSLPBN:00/input/input3 May 17 00:38:11.721000 audit[1358]: AVC avc: denied { confidentiality } for pid=1358 comm="(udev-worker)" lockdown_reason="use of tracefs" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=1 May 17 00:38:11.721000 audit[1358]: SYSCALL arch=c000003e syscall=175 success=yes exit=0 a0=558535598190 a1=338ac a2=7f5c70f2bbc5 a3=5 items=110 ppid=1352 pid=1358 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="(udev-worker)" exe="/usr/bin/udevadm" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:38:11.721000 audit: CWD cwd="/" May 17 00:38:11.721000 audit: PATH item=0 name=(null) inode=43 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 May 17 00:38:11.721000 audit: PATH item=1 name=(null) inode=14698 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 May 17 00:38:11.721000 audit: PATH item=2 name=(null) inode=14698 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 May 17 00:38:11.721000 audit: PATH item=3 name=(null) inode=14699 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 May 17 00:38:11.721000 audit: PATH item=4 name=(null) inode=14698 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 May 17 00:38:11.721000 audit: PATH item=5 name=(null) inode=14700 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 May 17 00:38:11.721000 audit: PATH item=6 name=(null) inode=14698 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 May 17 00:38:11.721000 audit: PATH item=7 name=(null) inode=14701 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 May 17 00:38:11.721000 audit: PATH item=8 name=(null) inode=14701 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 May 17 00:38:11.721000 audit: PATH item=9 name=(null) inode=14702 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 May 17 00:38:11.721000 audit: PATH item=10 name=(null) inode=14701 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 May 17 00:38:11.721000 audit: PATH item=11 name=(null) inode=14703 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 May 17 00:38:11.721000 audit: PATH item=12 name=(null) inode=14701 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 May 17 00:38:11.721000 audit: PATH item=13 name=(null) inode=14704 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 May 17 00:38:11.721000 audit: PATH item=14 name=(null) inode=14701 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 May 17 00:38:11.721000 audit: PATH item=15 name=(null) inode=14705 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 May 17 00:38:11.721000 audit: PATH item=16 name=(null) inode=14701 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 May 17 00:38:11.721000 audit: PATH item=17 name=(null) inode=14706 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 May 17 00:38:11.721000 audit: PATH item=18 name=(null) inode=14698 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 May 17 00:38:11.721000 audit: PATH item=19 name=(null) inode=14707 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 May 17 00:38:11.721000 audit: PATH item=20 name=(null) inode=14707 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 May 17 00:38:11.721000 audit: PATH item=21 name=(null) inode=14708 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 May 17 00:38:11.721000 audit: PATH item=22 name=(null) inode=14707 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 May 17 00:38:11.721000 audit: PATH item=23 name=(null) inode=14709 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 May 17 00:38:11.721000 audit: PATH item=24 name=(null) inode=14707 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 May 17 00:38:11.721000 audit: PATH item=25 name=(null) inode=14710 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 May 17 00:38:11.721000 audit: PATH item=26 name=(null) inode=14707 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 May 17 00:38:11.721000 audit: PATH item=27 name=(null) inode=14711 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 May 17 00:38:11.721000 audit: PATH item=28 name=(null) inode=14707 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 May 17 00:38:11.721000 audit: PATH item=29 name=(null) inode=14712 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 May 17 00:38:11.721000 audit: PATH item=30 name=(null) inode=14698 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 May 17 00:38:11.721000 audit: PATH item=31 name=(null) inode=14713 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 May 17 00:38:11.721000 audit: PATH item=32 name=(null) inode=14713 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 May 17 00:38:11.721000 audit: PATH item=33 name=(null) inode=14714 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 May 17 00:38:11.721000 audit: PATH item=34 name=(null) inode=14713 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 May 17 00:38:11.721000 audit: PATH item=35 name=(null) inode=14715 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 May 17 00:38:11.721000 audit: PATH item=36 name=(null) inode=14713 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 May 17 00:38:11.721000 audit: PATH item=37 name=(null) inode=14716 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 May 17 00:38:11.721000 audit: PATH item=38 name=(null) inode=14713 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 May 17 00:38:11.721000 audit: PATH item=39 name=(null) inode=14717 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 May 17 00:38:11.721000 audit: PATH item=40 name=(null) inode=14713 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 May 17 00:38:11.721000 audit: PATH item=41 name=(null) inode=14718 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 May 17 00:38:11.721000 audit: PATH item=42 name=(null) inode=14698 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 May 17 00:38:11.721000 audit: PATH item=43 name=(null) inode=14719 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 May 17 00:38:11.721000 audit: PATH item=44 name=(null) inode=14719 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 May 17 00:38:11.721000 audit: PATH item=45 name=(null) inode=14720 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 May 17 00:38:11.721000 audit: PATH item=46 name=(null) inode=14719 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 May 17 00:38:11.721000 audit: PATH item=47 name=(null) inode=14721 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 May 17 00:38:11.721000 audit: PATH item=48 name=(null) inode=14719 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 May 17 00:38:11.721000 audit: PATH item=49 name=(null) inode=14722 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 May 17 00:38:11.721000 audit: PATH item=50 name=(null) inode=14719 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 May 17 00:38:11.721000 audit: PATH item=51 name=(null) inode=14723 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 May 17 00:38:11.721000 audit: PATH item=52 name=(null) inode=14719 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 May 17 00:38:11.721000 audit: PATH item=53 name=(null) inode=14724 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 May 17 00:38:11.721000 audit: PATH item=54 name=(null) inode=43 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 May 17 00:38:11.721000 audit: PATH item=55 name=(null) inode=14725 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 May 17 00:38:11.721000 audit: PATH item=56 name=(null) inode=14725 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 May 17 00:38:11.721000 audit: PATH item=57 name=(null) inode=14726 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 May 17 00:38:11.721000 audit: PATH item=58 name=(null) inode=14725 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 May 17 00:38:11.721000 audit: PATH item=59 name=(null) inode=14727 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 May 17 00:38:11.721000 audit: PATH item=60 name=(null) inode=14725 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 May 17 00:38:11.721000 audit: PATH item=61 name=(null) inode=14728 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 May 17 00:38:11.721000 audit: PATH item=62 name=(null) inode=14728 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 May 17 00:38:11.721000 audit: PATH item=63 name=(null) inode=14729 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 May 17 00:38:11.721000 audit: PATH item=64 name=(null) inode=14728 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 May 17 00:38:11.721000 audit: PATH item=65 name=(null) inode=14730 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 May 17 00:38:11.721000 audit: PATH item=66 name=(null) inode=14728 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 May 17 00:38:11.721000 audit: PATH item=67 name=(null) inode=14731 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 May 17 00:38:11.721000 audit: PATH item=68 name=(null) inode=14728 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 May 17 00:38:11.721000 audit: PATH item=69 name=(null) inode=14732 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 May 17 00:38:11.721000 audit: PATH item=70 name=(null) inode=14728 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 May 17 00:38:11.721000 audit: PATH item=71 name=(null) inode=14733 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 May 17 00:38:11.721000 audit: PATH item=72 name=(null) inode=14725 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 May 17 00:38:11.721000 audit: PATH item=73 name=(null) inode=14734 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 May 17 00:38:11.721000 audit: PATH item=74 name=(null) inode=14734 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 May 17 00:38:11.721000 audit: PATH item=75 name=(null) inode=14735 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 May 17 00:38:11.721000 audit: PATH item=76 name=(null) inode=14734 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 May 17 00:38:11.721000 audit: PATH item=77 name=(null) inode=14736 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 May 17 00:38:11.721000 audit: PATH item=78 name=(null) inode=14734 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 May 17 00:38:11.721000 audit: PATH item=79 name=(null) inode=14737 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 May 17 00:38:11.721000 audit: PATH item=80 name=(null) inode=14734 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 May 17 00:38:11.721000 audit: PATH item=81 name=(null) inode=14738 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 May 17 00:38:11.721000 audit: PATH item=82 name=(null) inode=14734 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 May 17 00:38:11.721000 audit: PATH item=83 name=(null) inode=14739 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 May 17 00:38:11.721000 audit: PATH item=84 name=(null) inode=14725 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 May 17 00:38:11.721000 audit: PATH item=85 name=(null) inode=14740 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 May 17 00:38:11.721000 audit: PATH item=86 name=(null) inode=14740 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 May 17 00:38:11.721000 audit: PATH item=87 name=(null) inode=14741 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 May 17 00:38:11.721000 audit: PATH item=88 name=(null) inode=14740 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 May 17 00:38:11.721000 audit: PATH item=89 name=(null) inode=14742 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 May 17 00:38:11.721000 audit: PATH item=90 name=(null) inode=14740 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 May 17 00:38:11.721000 audit: PATH item=91 name=(null) inode=14743 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 May 17 00:38:11.721000 audit: PATH item=92 name=(null) inode=14740 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 May 17 00:38:11.721000 audit: PATH item=93 name=(null) inode=14744 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 May 17 00:38:11.721000 audit: PATH item=94 name=(null) inode=14740 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 May 17 00:38:11.721000 audit: PATH item=95 name=(null) inode=14745 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 May 17 00:38:11.721000 audit: PATH item=96 name=(null) inode=14725 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 May 17 00:38:11.721000 audit: PATH item=97 name=(null) inode=14746 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 May 17 00:38:11.721000 audit: PATH item=98 name=(null) inode=14746 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 May 17 00:38:11.721000 audit: PATH item=99 name=(null) inode=14747 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 May 17 00:38:11.721000 audit: PATH item=100 name=(null) inode=14746 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 May 17 00:38:11.721000 audit: PATH item=101 name=(null) inode=14748 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 May 17 00:38:11.721000 audit: PATH item=102 name=(null) inode=14746 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 May 17 00:38:11.721000 audit: PATH item=103 name=(null) inode=14749 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 May 17 00:38:11.721000 audit: PATH item=104 name=(null) inode=14746 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 May 17 00:38:11.721000 audit: PATH item=105 name=(null) inode=14750 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 May 17 00:38:11.721000 audit: PATH item=106 name=(null) inode=14746 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 May 17 00:38:11.721000 audit: PATH item=107 name=(null) inode=14751 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 May 17 00:38:11.721000 audit: PATH item=108 name=(null) inode=1 dev=00:07 mode=040700 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:debugfs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 May 17 00:38:11.721000 audit: PATH item=109 name=(null) inode=14752 dev=00:07 mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:debugfs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 May 17 00:38:11.721000 audit: PROCTITLE proctitle="(udev-worker)" May 17 00:38:11.738034 kernel: piix4_smbus 0000:00:01.3: SMBus base address uninitialized - upgrade BIOS or use force_addr=0xaddr May 17 00:38:11.751530 kernel: ACPI: button: Sleep Button [SLPF] May 17 00:38:11.758937 systemd-networkd[1360]: lo: Link UP May 17 00:38:11.758946 systemd-networkd[1360]: lo: Gained carrier May 17 00:38:11.759698 systemd-networkd[1360]: Enumeration completed May 17 00:38:11.759804 systemd[1]: Started systemd-networkd.service. May 17 00:38:11.759990 systemd-networkd[1360]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. May 17 00:38:11.761375 systemd[1]: Starting systemd-networkd-wait-online.service... May 17 00:38:11.758000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:38:11.766495 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready May 17 00:38:11.768795 systemd-networkd[1360]: eth0: Link UP May 17 00:38:11.770079 systemd-networkd[1360]: eth0: Gained carrier May 17 00:38:11.772351 kernel: input: ImPS/2 Generic Wheel Mouse as /devices/platform/i8042/serio1/input/input4 May 17 00:38:11.777979 kernel: mousedev: PS/2 mouse device common for all mice May 17 00:38:11.783520 systemd-networkd[1360]: eth0: DHCPv4 address 172.31.30.240/20, gateway 172.31.16.1 acquired from 172.31.16.1 May 17 00:38:11.887029 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. May 17 00:38:11.889764 systemd[1]: Finished systemd-udev-settle.service. May 17 00:38:11.889000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-settle comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:38:11.891714 systemd[1]: Starting lvm2-activation-early.service... May 17 00:38:11.969287 lvm[1466]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. May 17 00:38:11.991916 systemd[1]: Finished lvm2-activation-early.service. May 17 00:38:11.991000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation-early comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:38:11.992666 systemd[1]: Reached target cryptsetup.target. May 17 00:38:11.994656 systemd[1]: Starting lvm2-activation.service... May 17 00:38:11.999788 lvm[1467]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. May 17 00:38:12.021597 systemd[1]: Finished lvm2-activation.service. May 17 00:38:12.020000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:38:12.022465 systemd[1]: Reached target local-fs-pre.target. May 17 00:38:12.023026 systemd[1]: var-lib-machines.mount was skipped because of an unmet condition check (ConditionPathExists=/var/lib/machines.raw). May 17 00:38:12.023065 systemd[1]: Reached target local-fs.target. May 17 00:38:12.023616 systemd[1]: Reached target machines.target. May 17 00:38:12.025365 systemd[1]: Starting ldconfig.service... May 17 00:38:12.027325 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. May 17 00:38:12.027411 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). May 17 00:38:12.028553 systemd[1]: Starting systemd-boot-update.service... May 17 00:38:12.030511 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-OEM.service... May 17 00:38:12.032203 systemd[1]: Starting systemd-machine-id-commit.service... May 17 00:38:12.034563 systemd[1]: Starting systemd-sysext.service... May 17 00:38:12.050098 systemd[1]: boot.automount: Got automount request for /boot, triggered by 1469 (bootctl) May 17 00:38:12.054919 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service... May 17 00:38:12.059354 systemd[1]: Unmounting usr-share-oem.mount... May 17 00:38:12.065000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-OEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:38:12.065751 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-OEM.service. May 17 00:38:12.066682 systemd[1]: usr-share-oem.mount: Deactivated successfully. May 17 00:38:12.066855 systemd[1]: Unmounted usr-share-oem.mount. May 17 00:38:12.084368 kernel: loop0: detected capacity change from 0 to 229808 May 17 00:38:12.215362 kernel: squashfs: version 4.0 (2009/01/31) Phillip Lougher May 17 00:38:12.223738 systemd-fsck[1478]: fsck.fat 4.2 (2021-01-31) May 17 00:38:12.223738 systemd-fsck[1478]: /dev/nvme0n1p1: 790 files, 120726/258078 clusters May 17 00:38:12.225000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:38:12.225986 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service. May 17 00:38:12.228077 systemd[1]: Mounting boot.mount... May 17 00:38:12.234583 kernel: loop1: detected capacity change from 0 to 229808 May 17 00:38:12.238109 systemd[1]: etc-machine\x2did.mount: Deactivated successfully. May 17 00:38:12.238000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-machine-id-commit comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:38:12.239663 systemd[1]: Finished systemd-machine-id-commit.service. May 17 00:38:12.254632 systemd[1]: Mounted boot.mount. May 17 00:38:12.267449 (sd-sysext)[1482]: Using extensions 'kubernetes'. May 17 00:38:12.267850 (sd-sysext)[1482]: Merged extensions into '/usr'. May 17 00:38:12.287632 systemd[1]: Finished systemd-boot-update.service. May 17 00:38:12.287000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-boot-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:38:12.288777 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). May 17 00:38:12.290741 systemd[1]: Mounting usr-share-oem.mount... May 17 00:38:12.291494 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. May 17 00:38:12.293552 systemd[1]: Starting modprobe@dm_mod.service... May 17 00:38:12.297121 systemd[1]: Starting modprobe@efi_pstore.service... May 17 00:38:12.299209 systemd[1]: Starting modprobe@loop.service... May 17 00:38:12.299763 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. May 17 00:38:12.300030 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). May 17 00:38:12.300255 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). May 17 00:38:12.303350 systemd[1]: Mounted usr-share-oem.mount. May 17 00:38:12.304296 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. May 17 00:38:12.304433 systemd[1]: Finished modprobe@dm_mod.service. May 17 00:38:12.303000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:38:12.303000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:38:12.305280 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. May 17 00:38:12.305419 systemd[1]: Finished modprobe@efi_pstore.service. May 17 00:38:12.304000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:38:12.304000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:38:12.306220 systemd[1]: modprobe@loop.service: Deactivated successfully. May 17 00:38:12.306381 systemd[1]: Finished modprobe@loop.service. May 17 00:38:12.305000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:38:12.305000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:38:12.307181 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). May 17 00:38:12.307368 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. May 17 00:38:12.308318 systemd[1]: Finished systemd-sysext.service. May 17 00:38:12.307000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysext comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:38:12.310124 systemd[1]: Starting ensure-sysext.service... May 17 00:38:12.311736 systemd[1]: Starting systemd-tmpfiles-setup.service... May 17 00:38:12.320278 systemd[1]: Reloading. May 17 00:38:12.362449 systemd-tmpfiles[1500]: /usr/lib/tmpfiles.d/legacy.conf:13: Duplicate line for path "/run/lock", ignoring. May 17 00:38:12.387599 systemd-tmpfiles[1500]: /usr/lib/tmpfiles.d/provision.conf:20: Duplicate line for path "/root", ignoring. May 17 00:38:12.411968 systemd-tmpfiles[1500]: /usr/lib/tmpfiles.d/systemd.conf:29: Duplicate line for path "/var/lib/systemd", ignoring. May 17 00:38:12.422290 /usr/lib/systemd/system-generators/torcx-generator[1522]: time="2025-05-17T00:38:12Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.7 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.7 /var/lib/torcx/store]" May 17 00:38:12.422358 /usr/lib/systemd/system-generators/torcx-generator[1522]: time="2025-05-17T00:38:12Z" level=info msg="torcx already run" May 17 00:38:12.543770 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. May 17 00:38:12.543993 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. May 17 00:38:12.573226 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. May 17 00:38:12.686000 audit: BPF prog-id=30 op=LOAD May 17 00:38:12.686000 audit: BPF prog-id=26 op=UNLOAD May 17 00:38:12.687000 audit: BPF prog-id=31 op=LOAD May 17 00:38:12.687000 audit: BPF prog-id=32 op=LOAD May 17 00:38:12.687000 audit: BPF prog-id=24 op=UNLOAD May 17 00:38:12.687000 audit: BPF prog-id=25 op=UNLOAD May 17 00:38:12.689000 audit: BPF prog-id=33 op=LOAD May 17 00:38:12.689000 audit: BPF prog-id=21 op=UNLOAD May 17 00:38:12.689000 audit: BPF prog-id=34 op=LOAD May 17 00:38:12.689000 audit: BPF prog-id=35 op=LOAD May 17 00:38:12.689000 audit: BPF prog-id=22 op=UNLOAD May 17 00:38:12.689000 audit: BPF prog-id=23 op=UNLOAD May 17 00:38:12.690000 audit: BPF prog-id=36 op=LOAD May 17 00:38:12.690000 audit: BPF prog-id=27 op=UNLOAD May 17 00:38:12.690000 audit: BPF prog-id=37 op=LOAD May 17 00:38:12.690000 audit: BPF prog-id=38 op=LOAD May 17 00:38:12.690000 audit: BPF prog-id=28 op=UNLOAD May 17 00:38:12.690000 audit: BPF prog-id=29 op=UNLOAD May 17 00:38:12.697376 systemd[1]: Finished systemd-tmpfiles-setup.service. May 17 00:38:12.696000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:38:12.704215 systemd[1]: Starting audit-rules.service... May 17 00:38:12.706510 systemd[1]: Starting clean-ca-certificates.service... May 17 00:38:12.709620 systemd[1]: Starting systemd-journal-catalog-update.service... May 17 00:38:12.710000 audit: BPF prog-id=39 op=LOAD May 17 00:38:12.713355 systemd[1]: Starting systemd-resolved.service... May 17 00:38:12.716000 audit: BPF prog-id=40 op=LOAD May 17 00:38:12.718769 systemd[1]: Starting systemd-timesyncd.service... May 17 00:38:12.723598 systemd[1]: Starting systemd-update-utmp.service... May 17 00:38:12.736630 systemd[1]: Finished clean-ca-certificates.service. May 17 00:38:12.736000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=clean-ca-certificates comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:38:12.737603 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). May 17 00:38:12.738000 audit[1581]: SYSTEM_BOOT pid=1581 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' May 17 00:38:12.746959 systemd[1]: Finished systemd-update-utmp.service. May 17 00:38:12.746000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:38:12.751037 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. May 17 00:38:12.752981 systemd[1]: Starting modprobe@dm_mod.service... May 17 00:38:12.757178 systemd[1]: Starting modprobe@efi_pstore.service... May 17 00:38:12.760440 systemd[1]: Starting modprobe@loop.service... May 17 00:38:12.761203 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. May 17 00:38:12.761467 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). May 17 00:38:12.761672 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). May 17 00:38:12.762991 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. May 17 00:38:12.763188 systemd[1]: Finished modprobe@dm_mod.service. May 17 00:38:12.763000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:38:12.763000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:38:12.768452 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. May 17 00:38:12.770344 systemd[1]: Starting modprobe@dm_mod.service... May 17 00:38:12.771093 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. May 17 00:38:12.771281 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). May 17 00:38:12.771475 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). May 17 00:38:12.776847 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. May 17 00:38:12.782000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:38:12.782000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:38:12.780765 systemd[1]: Starting modprobe@drm.service... May 17 00:38:12.781623 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. May 17 00:38:12.781823 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). May 17 00:38:12.782047 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). May 17 00:38:12.783140 systemd[1]: modprobe@loop.service: Deactivated successfully. May 17 00:38:12.783395 systemd[1]: Finished modprobe@loop.service. May 17 00:38:12.787000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=ensure-sysext comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:38:12.788363 systemd[1]: Finished ensure-sysext.service. May 17 00:38:12.789000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:38:12.789000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:38:12.789663 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. May 17 00:38:12.789845 systemd[1]: Finished modprobe@efi_pstore.service. May 17 00:38:12.790652 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). May 17 00:38:12.796000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:38:12.796000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:38:12.797493 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. May 17 00:38:12.797665 systemd[1]: Finished modprobe@dm_mod.service. May 17 00:38:12.798505 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. May 17 00:38:12.798000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:38:12.798000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:38:12.799343 systemd[1]: modprobe@drm.service: Deactivated successfully. May 17 00:38:12.799507 systemd[1]: Finished modprobe@drm.service. May 17 00:38:12.846000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-catalog-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:38:12.846968 systemd[1]: Finished systemd-journal-catalog-update.service. May 17 00:38:12.874000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-timesyncd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:38:12.874743 systemd[1]: Started systemd-timesyncd.service. May 17 00:38:12.875465 systemd[1]: Reached target time-set.target. May 17 00:38:12.891485 augenrules[1602]: No rules May 17 00:38:12.889000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=add_rule key=(null) list=5 res=1 May 17 00:38:12.889000 audit[1602]: SYSCALL arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffe5ee31a90 a2=420 a3=0 items=0 ppid=1576 pid=1602 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:38:12.889000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 May 17 00:38:12.892304 systemd[1]: Finished audit-rules.service. May 17 00:38:12.905703 systemd-resolved[1579]: Positive Trust Anchors: May 17 00:38:12.905717 systemd-resolved[1579]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d May 17 00:38:12.905750 systemd-resolved[1579]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test May 17 00:38:12.938650 systemd-resolved[1579]: Defaulting to hostname 'linux'. May 17 00:38:12.940503 systemd[1]: Started systemd-resolved.service. May 17 00:38:12.941040 systemd[1]: Reached target network.target. May 17 00:38:12.941501 systemd[1]: Reached target nss-lookup.target. May 17 00:38:13.065937 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). May 17 00:38:13.065961 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). May 17 00:38:13.787519 systemd-timesyncd[1580]: Contacted time server 5.161.111.190:123 (0.flatcar.pool.ntp.org). May 17 00:38:13.787582 systemd-timesyncd[1580]: Initial clock synchronization to Sat 2025-05-17 00:38:13.787387 UTC. May 17 00:38:13.787669 systemd-resolved[1579]: Clock change detected. Flushing caches. May 17 00:38:13.830998 ldconfig[1468]: /sbin/ldconfig: /lib/ld.so.conf is not an ELF file - it has the wrong magic bytes at the start. May 17 00:38:13.837710 systemd[1]: Finished ldconfig.service. May 17 00:38:13.839517 systemd[1]: Starting systemd-update-done.service... May 17 00:38:13.847492 systemd[1]: Finished systemd-update-done.service. May 17 00:38:13.847986 systemd[1]: Reached target sysinit.target. May 17 00:38:13.848427 systemd[1]: Started motdgen.path. May 17 00:38:13.848797 systemd[1]: Started user-cloudinit@var-lib-flatcar\x2dinstall-user_data.path. May 17 00:38:13.849285 systemd[1]: Started logrotate.timer. May 17 00:38:13.849686 systemd[1]: Started mdadm.timer. May 17 00:38:13.850038 systemd[1]: Started systemd-tmpfiles-clean.timer. May 17 00:38:13.850350 systemd[1]: update-engine-stub.timer was skipped because of an unmet condition check (ConditionPathExists=/usr/.noupdate). May 17 00:38:13.850383 systemd[1]: Reached target paths.target. May 17 00:38:13.850842 systemd[1]: Reached target timers.target. May 17 00:38:13.851447 systemd[1]: Listening on dbus.socket. May 17 00:38:13.852880 systemd[1]: Starting docker.socket... May 17 00:38:13.857026 systemd[1]: Listening on sshd.socket. May 17 00:38:13.857543 systemd[1]: systemd-pcrphase-sysinit.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). May 17 00:38:13.858122 systemd[1]: Listening on docker.socket. May 17 00:38:13.858539 systemd[1]: Reached target sockets.target. May 17 00:38:13.858979 systemd[1]: Reached target basic.target. May 17 00:38:13.859338 systemd[1]: addon-config@usr-share-oem.service was skipped because no trigger condition checks were met. May 17 00:38:13.859366 systemd[1]: addon-run@usr-share-oem.service was skipped because no trigger condition checks were met. May 17 00:38:13.860427 systemd[1]: Starting containerd.service... May 17 00:38:13.861739 systemd[1]: Starting coreos-metadata-sshkeys@core.service... May 17 00:38:13.863827 systemd[1]: Starting dbus.service... May 17 00:38:13.865171 systemd[1]: Starting enable-oem-cloudinit.service... May 17 00:38:13.866877 systemd[1]: Starting extend-filesystems.service... May 17 00:38:13.867680 systemd[1]: flatcar-setup-environment.service was skipped because of an unmet condition check (ConditionPathExists=/usr/share/oem/bin/flatcar-setup-environment). May 17 00:38:13.870893 systemd[1]: Starting motdgen.service... May 17 00:38:13.883255 jq[1613]: false May 17 00:38:13.873464 systemd[1]: Starting prepare-helm.service... May 17 00:38:13.874868 systemd[1]: Starting ssh-key-proc-cmdline.service... May 17 00:38:13.876799 systemd[1]: Starting sshd-keygen.service... May 17 00:38:13.881348 systemd[1]: Starting systemd-logind.service... May 17 00:38:13.881741 systemd[1]: systemd-pcrphase.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). May 17 00:38:13.881857 systemd[1]: tcsd.service was skipped because of an unmet condition check (ConditionPathExists=/dev/tpm0). May 17 00:38:13.882294 systemd[1]: cgroup compatibility translation between legacy and unified hierarchy settings activated. See cgroup-compat debug messages for details. May 17 00:38:13.883021 systemd[1]: Starting update-engine.service... May 17 00:38:13.886586 systemd[1]: Starting update-ssh-keys-after-ignition.service... May 17 00:38:13.888662 systemd[1]: enable-oem-cloudinit.service: Skipped due to 'exec-condition'. May 17 00:38:13.888865 systemd[1]: Condition check resulted in enable-oem-cloudinit.service being skipped. May 17 00:38:13.889155 systemd[1]: ssh-key-proc-cmdline.service: Deactivated successfully. May 17 00:38:13.889284 systemd[1]: Finished ssh-key-proc-cmdline.service. May 17 00:38:13.892369 jq[1625]: true May 17 00:38:13.919441 tar[1628]: linux-amd64/LICENSE May 17 00:38:13.919683 tar[1628]: linux-amd64/helm May 17 00:38:13.923099 jq[1627]: true May 17 00:38:13.938216 dbus-daemon[1612]: [system] SELinux support is enabled May 17 00:38:13.939875 systemd[1]: Started dbus.service. May 17 00:38:13.942307 systemd[1]: system-cloudinit@usr-share-oem-cloud\x2dconfig.yml.service was skipped because of an unmet condition check (ConditionFileNotEmpty=/usr/share/oem/cloud-config.yml). May 17 00:38:13.942340 systemd[1]: Reached target system-config.target. May 17 00:38:13.942760 systemd[1]: user-cloudinit-proc-cmdline.service was skipped because of an unmet condition check (ConditionKernelCommandLine=cloud-config-url). May 17 00:38:13.942792 systemd[1]: Reached target user-config.target. May 17 00:38:13.944503 dbus-daemon[1612]: [system] Activating via systemd: service name='org.freedesktop.hostname1' unit='dbus-org.freedesktop.hostname1.service' requested by ':1.3' (uid=244 pid=1360 comm="/usr/lib/systemd/systemd-networkd" label="system_u:system_r:kernel_t:s0") May 17 00:38:13.948024 systemd[1]: Starting systemd-hostnamed.service... May 17 00:38:13.965673 extend-filesystems[1614]: Found loop1 May 17 00:38:13.966567 extend-filesystems[1614]: Found nvme0n1 May 17 00:38:13.968538 extend-filesystems[1614]: Found nvme0n1p1 May 17 00:38:13.969633 extend-filesystems[1614]: Found nvme0n1p2 May 17 00:38:13.970310 extend-filesystems[1614]: Found nvme0n1p3 May 17 00:38:13.972137 extend-filesystems[1614]: Found usr May 17 00:38:13.974623 extend-filesystems[1614]: Found nvme0n1p4 May 17 00:38:13.975443 extend-filesystems[1614]: Found nvme0n1p6 May 17 00:38:13.975854 extend-filesystems[1614]: Found nvme0n1p7 May 17 00:38:13.976223 extend-filesystems[1614]: Found nvme0n1p9 May 17 00:38:13.976587 extend-filesystems[1614]: Checking size of /dev/nvme0n1p9 May 17 00:38:13.983124 systemd[1]: motdgen.service: Deactivated successfully. May 17 00:38:13.983300 systemd[1]: Finished motdgen.service. May 17 00:38:14.012035 env[1634]: time="2025-05-17T00:38:14.011610836Z" level=info msg="starting containerd" revision=92b3a9d6f1b3bcc6dc74875cfdea653fe39f09c2 version=1.6.16 May 17 00:38:14.029044 extend-filesystems[1614]: Resized partition /dev/nvme0n1p9 May 17 00:38:14.034243 extend-filesystems[1669]: resize2fs 1.46.5 (30-Dec-2021) May 17 00:38:14.044808 kernel: EXT4-fs (nvme0n1p9): resizing filesystem from 553472 to 1489915 blocks May 17 00:38:14.064334 systemd-logind[1620]: Watching system buttons on /dev/input/event1 (Power Button) May 17 00:38:14.065719 systemd-logind[1620]: Watching system buttons on /dev/input/event2 (Sleep Button) May 17 00:38:14.065748 systemd-logind[1620]: Watching system buttons on /dev/input/event0 (AT Translated Set 2 keyboard) May 17 00:38:14.067388 systemd-logind[1620]: New seat seat0. May 17 00:38:14.082877 update_engine[1623]: I0517 00:38:14.082120 1623 main.cc:92] Flatcar Update Engine starting May 17 00:38:14.111755 update_engine[1623]: I0517 00:38:14.086315 1623 update_check_scheduler.cc:74] Next update check in 9m8s May 17 00:38:14.086276 systemd[1]: Started update-engine.service. May 17 00:38:14.121794 kernel: EXT4-fs (nvme0n1p9): resized filesystem to 1489915 May 17 00:38:14.130331 systemd[1]: Started locksmithd.service. May 17 00:38:14.131519 systemd[1]: Started systemd-logind.service. May 17 00:38:14.138057 extend-filesystems[1669]: Filesystem at /dev/nvme0n1p9 is mounted on /; on-line resizing required May 17 00:38:14.138057 extend-filesystems[1669]: old_desc_blocks = 1, new_desc_blocks = 1 May 17 00:38:14.138057 extend-filesystems[1669]: The filesystem on /dev/nvme0n1p9 is now 1489915 (4k) blocks long. May 17 00:38:14.140124 extend-filesystems[1614]: Resized filesystem in /dev/nvme0n1p9 May 17 00:38:14.140994 systemd[1]: extend-filesystems.service: Deactivated successfully. May 17 00:38:14.144189 bash[1670]: Updated "/home/core/.ssh/authorized_keys" May 17 00:38:14.151326 systemd[1]: Finished extend-filesystems.service. May 17 00:38:14.152367 systemd[1]: Finished update-ssh-keys-after-ignition.service. May 17 00:38:14.156158 dbus-daemon[1612]: [system] Successfully activated service 'org.freedesktop.hostname1' May 17 00:38:14.156286 systemd[1]: Started systemd-hostnamed.service. May 17 00:38:14.157725 dbus-daemon[1612]: [system] Activating via systemd: service name='org.freedesktop.PolicyKit1' unit='polkit.service' requested by ':1.6' (uid=0 pid=1646 comm="/usr/lib/systemd/systemd-hostnamed" label="system_u:system_r:kernel_t:s0") May 17 00:38:14.160849 systemd[1]: Starting polkit.service... May 17 00:38:14.175410 env[1634]: time="2025-05-17T00:38:14.175368346Z" level=info msg="loading plugin \"io.containerd.content.v1.content\"..." type=io.containerd.content.v1 May 17 00:38:14.176639 env[1634]: time="2025-05-17T00:38:14.176609323Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.aufs\"..." type=io.containerd.snapshotter.v1 May 17 00:38:14.178338 polkitd[1681]: Started polkitd version 121 May 17 00:38:14.185012 env[1634]: time="2025-05-17T00:38:14.184969148Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.aufs\"..." error="aufs is not supported (modprobe aufs failed: exit status 1 \"modprobe: FATAL: Module aufs not found in directory /lib/modules/5.15.182-flatcar\\n\"): skip plugin" type=io.containerd.snapshotter.v1 May 17 00:38:14.185143 env[1634]: time="2025-05-17T00:38:14.185128831Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." type=io.containerd.snapshotter.v1 May 17 00:38:14.185465 env[1634]: time="2025-05-17T00:38:14.185445595Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.btrfs (ext4) must be a btrfs filesystem to be used with the btrfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 May 17 00:38:14.186909 env[1634]: time="2025-05-17T00:38:14.186881088Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.devmapper\"..." type=io.containerd.snapshotter.v1 May 17 00:38:14.187012 env[1634]: time="2025-05-17T00:38:14.186998857Z" level=warning msg="failed to load plugin io.containerd.snapshotter.v1.devmapper" error="devmapper not configured" May 17 00:38:14.187061 env[1634]: time="2025-05-17T00:38:14.187050926Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.native\"..." type=io.containerd.snapshotter.v1 May 17 00:38:14.187195 env[1634]: time="2025-05-17T00:38:14.187182398Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.overlayfs\"..." type=io.containerd.snapshotter.v1 May 17 00:38:14.188535 env[1634]: time="2025-05-17T00:38:14.188511962Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.zfs\"..." type=io.containerd.snapshotter.v1 May 17 00:38:14.188807 env[1634]: time="2025-05-17T00:38:14.188787160Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.zfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.zfs must be a zfs filesystem to be used with the zfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 May 17 00:38:14.191761 env[1634]: time="2025-05-17T00:38:14.191734448Z" level=info msg="loading plugin \"io.containerd.metadata.v1.bolt\"..." type=io.containerd.metadata.v1 May 17 00:38:14.195301 env[1634]: time="2025-05-17T00:38:14.195269644Z" level=warning msg="could not use snapshotter devmapper in metadata plugin" error="devmapper not configured" May 17 00:38:14.195425 env[1634]: time="2025-05-17T00:38:14.195411923Z" level=info msg="metadata content store policy set" policy=shared May 17 00:38:14.198510 polkitd[1681]: Loading rules from directory /etc/polkit-1/rules.d May 17 00:38:14.198828 polkitd[1681]: Loading rules from directory /usr/share/polkit-1/rules.d May 17 00:38:14.200915 polkitd[1681]: Finished loading, compiling and executing 2 rules May 17 00:38:14.201443 dbus-daemon[1612]: [system] Successfully activated service 'org.freedesktop.PolicyKit1' May 17 00:38:14.201597 systemd[1]: Started polkit.service. May 17 00:38:14.203855 env[1634]: time="2025-05-17T00:38:14.203821722Z" level=info msg="loading plugin \"io.containerd.differ.v1.walking\"..." type=io.containerd.differ.v1 May 17 00:38:14.203966 env[1634]: time="2025-05-17T00:38:14.203952735Z" level=info msg="loading plugin \"io.containerd.event.v1.exchange\"..." type=io.containerd.event.v1 May 17 00:38:14.204017 env[1634]: time="2025-05-17T00:38:14.204007603Z" level=info msg="loading plugin \"io.containerd.gc.v1.scheduler\"..." type=io.containerd.gc.v1 May 17 00:38:14.204117 env[1634]: time="2025-05-17T00:38:14.204105405Z" level=info msg="loading plugin \"io.containerd.service.v1.introspection-service\"..." type=io.containerd.service.v1 May 17 00:38:14.204178 env[1634]: time="2025-05-17T00:38:14.204168801Z" level=info msg="loading plugin \"io.containerd.service.v1.containers-service\"..." type=io.containerd.service.v1 May 17 00:38:14.204227 env[1634]: time="2025-05-17T00:38:14.204217803Z" level=info msg="loading plugin \"io.containerd.service.v1.content-service\"..." type=io.containerd.service.v1 May 17 00:38:14.204280 env[1634]: time="2025-05-17T00:38:14.204270369Z" level=info msg="loading plugin \"io.containerd.service.v1.diff-service\"..." type=io.containerd.service.v1 May 17 00:38:14.204337 env[1634]: time="2025-05-17T00:38:14.204327514Z" level=info msg="loading plugin \"io.containerd.service.v1.images-service\"..." type=io.containerd.service.v1 May 17 00:38:14.204384 env[1634]: time="2025-05-17T00:38:14.204375194Z" level=info msg="loading plugin \"io.containerd.service.v1.leases-service\"..." type=io.containerd.service.v1 May 17 00:38:14.204431 env[1634]: time="2025-05-17T00:38:14.204421751Z" level=info msg="loading plugin \"io.containerd.service.v1.namespaces-service\"..." type=io.containerd.service.v1 May 17 00:38:14.204483 env[1634]: time="2025-05-17T00:38:14.204473888Z" level=info msg="loading plugin \"io.containerd.service.v1.snapshots-service\"..." type=io.containerd.service.v1 May 17 00:38:14.204529 env[1634]: time="2025-05-17T00:38:14.204520594Z" level=info msg="loading plugin \"io.containerd.runtime.v1.linux\"..." type=io.containerd.runtime.v1 May 17 00:38:14.204688 env[1634]: time="2025-05-17T00:38:14.204675409Z" level=info msg="loading plugin \"io.containerd.runtime.v2.task\"..." type=io.containerd.runtime.v2 May 17 00:38:14.204846 env[1634]: time="2025-05-17T00:38:14.204831944Z" level=info msg="loading plugin \"io.containerd.monitor.v1.cgroups\"..." type=io.containerd.monitor.v1 May 17 00:38:14.205199 env[1634]: time="2025-05-17T00:38:14.205172032Z" level=info msg="loading plugin \"io.containerd.service.v1.tasks-service\"..." type=io.containerd.service.v1 May 17 00:38:14.208086 polkitd[1681]: Acquired the name org.freedesktop.PolicyKit1 on the system bus May 17 00:38:14.208292 env[1634]: time="2025-05-17T00:38:14.208266489Z" level=info msg="loading plugin \"io.containerd.grpc.v1.introspection\"..." type=io.containerd.grpc.v1 May 17 00:38:14.208370 env[1634]: time="2025-05-17T00:38:14.208359370Z" level=info msg="loading plugin \"io.containerd.internal.v1.restart\"..." type=io.containerd.internal.v1 May 17 00:38:14.208479 env[1634]: time="2025-05-17T00:38:14.208466833Z" level=info msg="loading plugin \"io.containerd.grpc.v1.containers\"..." type=io.containerd.grpc.v1 May 17 00:38:14.208953 env[1634]: time="2025-05-17T00:38:14.208933403Z" level=info msg="loading plugin \"io.containerd.grpc.v1.content\"..." type=io.containerd.grpc.v1 May 17 00:38:14.209034 env[1634]: time="2025-05-17T00:38:14.209022518Z" level=info msg="loading plugin \"io.containerd.grpc.v1.diff\"..." type=io.containerd.grpc.v1 May 17 00:38:14.209094 env[1634]: time="2025-05-17T00:38:14.209083964Z" level=info msg="loading plugin \"io.containerd.grpc.v1.events\"..." type=io.containerd.grpc.v1 May 17 00:38:14.209146 env[1634]: time="2025-05-17T00:38:14.209136538Z" level=info msg="loading plugin \"io.containerd.grpc.v1.healthcheck\"..." type=io.containerd.grpc.v1 May 17 00:38:14.209203 env[1634]: time="2025-05-17T00:38:14.209193861Z" level=info msg="loading plugin \"io.containerd.grpc.v1.images\"..." type=io.containerd.grpc.v1 May 17 00:38:14.209831 env[1634]: time="2025-05-17T00:38:14.209809694Z" level=info msg="loading plugin \"io.containerd.grpc.v1.leases\"..." type=io.containerd.grpc.v1 May 17 00:38:14.209914 env[1634]: time="2025-05-17T00:38:14.209901766Z" level=info msg="loading plugin \"io.containerd.grpc.v1.namespaces\"..." type=io.containerd.grpc.v1 May 17 00:38:14.210142 env[1634]: time="2025-05-17T00:38:14.210127711Z" level=info msg="loading plugin \"io.containerd.internal.v1.opt\"..." type=io.containerd.internal.v1 May 17 00:38:14.210691 env[1634]: time="2025-05-17T00:38:14.210672111Z" level=info msg="loading plugin \"io.containerd.grpc.v1.snapshots\"..." type=io.containerd.grpc.v1 May 17 00:38:14.210817 env[1634]: time="2025-05-17T00:38:14.210803392Z" level=info msg="loading plugin \"io.containerd.grpc.v1.tasks\"..." type=io.containerd.grpc.v1 May 17 00:38:14.210996 env[1634]: time="2025-05-17T00:38:14.210982381Z" level=info msg="loading plugin \"io.containerd.grpc.v1.version\"..." type=io.containerd.grpc.v1 May 17 00:38:14.211393 env[1634]: time="2025-05-17T00:38:14.211374335Z" level=info msg="loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." type=io.containerd.tracing.processor.v1 May 17 00:38:14.211834 env[1634]: time="2025-05-17T00:38:14.211808015Z" level=info msg="skip loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." error="no OpenTelemetry endpoint: skip plugin" type=io.containerd.tracing.processor.v1 May 17 00:38:14.211906 env[1634]: time="2025-05-17T00:38:14.211894742Z" level=info msg="loading plugin \"io.containerd.internal.v1.tracing\"..." type=io.containerd.internal.v1 May 17 00:38:14.211974 env[1634]: time="2025-05-17T00:38:14.211963403Z" level=error msg="failed to initialize a tracing processor \"otlp\"" error="no OpenTelemetry endpoint: skip plugin" May 17 00:38:14.212100 env[1634]: time="2025-05-17T00:38:14.212088660Z" level=info msg="loading plugin \"io.containerd.grpc.v1.cri\"..." type=io.containerd.grpc.v1 May 17 00:38:14.212381 env[1634]: time="2025-05-17T00:38:14.212337775Z" level=info msg="Start cri plugin with config {PluginConfig:{ContainerdConfig:{Snapshotter:overlayfs DefaultRuntimeName:runc DefaultRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} UntrustedWorkloadRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} Runtimes:map[runc:{Type:io.containerd.runc.v2 Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[SystemdCgroup:true] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0}] NoPivot:false DisableSnapshotAnnotations:true DiscardUnpackedLayers:false IgnoreRdtNotEnabledErrors:false} CniConfig:{NetworkPluginBinDir:/opt/cni/bin NetworkPluginConfDir:/etc/cni/net.d NetworkPluginMaxConfNum:1 NetworkPluginConfTemplate: IPPreference:} Registry:{ConfigPath: Mirrors:map[] Configs:map[] Auths:map[] Headers:map[]} ImageDecryption:{KeyModel:node} DisableTCPService:true StreamServerAddress:127.0.0.1 StreamServerPort:0 StreamIdleTimeout:4h0m0s EnableSelinux:true SelinuxCategoryRange:1024 SandboxImage:registry.k8s.io/pause:3.6 StatsCollectPeriod:10 SystemdCgroup:false EnableTLSStreaming:false X509KeyPairStreaming:{TLSCertFile: TLSKeyFile:} MaxContainerLogLineSize:16384 DisableCgroup:false DisableApparmor:false RestrictOOMScoreAdj:false MaxConcurrentDownloads:3 DisableProcMount:false UnsetSeccompProfile: TolerateMissingHugetlbController:true DisableHugetlbController:true DeviceOwnershipFromSecurityContext:false IgnoreImageDefinedVolumes:false NetNSMountsUnderStateDir:false EnableUnprivilegedPorts:false EnableUnprivilegedICMP:false} ContainerdRootDir:/var/lib/containerd ContainerdEndpoint:/run/containerd/containerd.sock RootDir:/var/lib/containerd/io.containerd.grpc.v1.cri StateDir:/run/containerd/io.containerd.grpc.v1.cri}" May 17 00:38:14.215036 env[1634]: time="2025-05-17T00:38:14.213979447Z" level=info msg="Connect containerd service" May 17 00:38:14.215036 env[1634]: time="2025-05-17T00:38:14.214034815Z" level=info msg="Get image filesystem path \"/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs\"" May 17 00:38:14.217948 env[1634]: time="2025-05-17T00:38:14.217797393Z" level=error msg="failed to load cni during init, please check CRI plugin status before setting up network for pods" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" May 17 00:38:14.218899 env[1634]: time="2025-05-17T00:38:14.218878683Z" level=info msg=serving... address=/run/containerd/containerd.sock.ttrpc May 17 00:38:14.220345 env[1634]: time="2025-05-17T00:38:14.220325482Z" level=info msg=serving... address=/run/containerd/containerd.sock May 17 00:38:14.220548 systemd[1]: Started containerd.service. May 17 00:38:14.221821 env[1634]: time="2025-05-17T00:38:14.221801933Z" level=info msg="containerd successfully booted in 0.223302s" May 17 00:38:14.222253 env[1634]: time="2025-05-17T00:38:14.218601582Z" level=info msg="Start subscribing containerd event" May 17 00:38:14.222368 env[1634]: time="2025-05-17T00:38:14.222354067Z" level=info msg="Start recovering state" May 17 00:38:14.222473 env[1634]: time="2025-05-17T00:38:14.222462441Z" level=info msg="Start event monitor" May 17 00:38:14.222521 env[1634]: time="2025-05-17T00:38:14.222512508Z" level=info msg="Start snapshots syncer" May 17 00:38:14.222565 env[1634]: time="2025-05-17T00:38:14.222556579Z" level=info msg="Start cni network conf syncer for default" May 17 00:38:14.229822 systemd-hostnamed[1646]: Hostname set to (transient) May 17 00:38:14.232574 systemd-resolved[1579]: System hostname changed to 'ip-172-31-30-240'. May 17 00:38:14.237897 env[1634]: time="2025-05-17T00:38:14.237851936Z" level=info msg="Start streaming server" May 17 00:38:14.264593 systemd[1]: Created slice system-sshd.slice. May 17 00:38:14.265851 systemd-networkd[1360]: eth0: Gained IPv6LL May 17 00:38:14.267476 systemd[1]: Finished systemd-networkd-wait-online.service. May 17 00:38:14.268189 systemd[1]: Reached target network-online.target. May 17 00:38:14.269916 systemd[1]: Started amazon-ssm-agent.service. May 17 00:38:14.272532 systemd[1]: Starting kubelet.service... May 17 00:38:14.274183 systemd[1]: Started nvidia.service. May 17 00:38:14.354166 coreos-metadata[1611]: May 17 00:38:14.343 INFO Putting http://169.254.169.254/latest/api/token: Attempt #1 May 17 00:38:14.376865 coreos-metadata[1611]: May 17 00:38:14.376 INFO Fetching http://169.254.169.254/2019-10-01/meta-data/public-keys: Attempt #1 May 17 00:38:14.377369 coreos-metadata[1611]: May 17 00:38:14.377 INFO Fetch successful May 17 00:38:14.377369 coreos-metadata[1611]: May 17 00:38:14.377 INFO Fetching http://169.254.169.254/2019-10-01/meta-data/public-keys/0/openssh-key: Attempt #1 May 17 00:38:14.378343 coreos-metadata[1611]: May 17 00:38:14.378 INFO Fetch successful May 17 00:38:14.380109 unknown[1611]: wrote ssh authorized keys file for user: core May 17 00:38:14.429491 update-ssh-keys[1735]: Updated "/home/core/.ssh/authorized_keys" May 17 00:38:14.429798 systemd[1]: Finished coreos-metadata-sshkeys@core.service. May 17 00:38:14.447020 amazon-ssm-agent[1712]: 2025/05/17 00:38:14 Failed to load instance info from vault. RegistrationKey does not exist. May 17 00:38:14.447650 amazon-ssm-agent[1712]: Initializing new seelog logger May 17 00:38:14.447788 amazon-ssm-agent[1712]: New Seelog Logger Creation Complete May 17 00:38:14.447847 amazon-ssm-agent[1712]: 2025/05/17 00:38:14 Found config file at /etc/amazon/ssm/amazon-ssm-agent.json. May 17 00:38:14.447847 amazon-ssm-agent[1712]: Applying config override from /etc/amazon/ssm/amazon-ssm-agent.json. May 17 00:38:14.448007 amazon-ssm-agent[1712]: 2025/05/17 00:38:14 processing appconfig overrides May 17 00:38:14.553679 systemd[1]: nvidia.service: Deactivated successfully. May 17 00:38:14.834445 amazon-ssm-agent[1712]: 2025-05-17 00:38:14 INFO Create new startup processor May 17 00:38:14.834748 amazon-ssm-agent[1712]: 2025-05-17 00:38:14 INFO [LongRunningPluginsManager] registered plugins: {} May 17 00:38:14.835651 amazon-ssm-agent[1712]: 2025-05-17 00:38:14 INFO Initializing bookkeeping folders May 17 00:38:14.835731 amazon-ssm-agent[1712]: 2025-05-17 00:38:14 INFO removing the completed state files May 17 00:38:14.835796 amazon-ssm-agent[1712]: 2025-05-17 00:38:14 INFO Initializing bookkeeping folders for long running plugins May 17 00:38:14.835841 amazon-ssm-agent[1712]: 2025-05-17 00:38:14 INFO Initializing replies folder for MDS reply requests that couldn't reach the service May 17 00:38:14.835906 amazon-ssm-agent[1712]: 2025-05-17 00:38:14 INFO Initializing healthcheck folders for long running plugins May 17 00:38:14.835949 amazon-ssm-agent[1712]: 2025-05-17 00:38:14 INFO Initializing locations for inventory plugin May 17 00:38:14.836006 amazon-ssm-agent[1712]: 2025-05-17 00:38:14 INFO Initializing default location for custom inventory May 17 00:38:14.836109 amazon-ssm-agent[1712]: 2025-05-17 00:38:14 INFO Initializing default location for file inventory May 17 00:38:14.836153 amazon-ssm-agent[1712]: 2025-05-17 00:38:14 INFO Initializing default location for role inventory May 17 00:38:14.836208 amazon-ssm-agent[1712]: 2025-05-17 00:38:14 INFO Init the cloudwatchlogs publisher May 17 00:38:14.836271 amazon-ssm-agent[1712]: 2025-05-17 00:38:14 INFO [instanceID=i-0d0a7c5327814166d] Successfully loaded platform independent plugin aws:configurePackage May 17 00:38:14.836346 amazon-ssm-agent[1712]: 2025-05-17 00:38:14 INFO [instanceID=i-0d0a7c5327814166d] Successfully loaded platform independent plugin aws:downloadContent May 17 00:38:14.836346 amazon-ssm-agent[1712]: 2025-05-17 00:38:14 INFO [instanceID=i-0d0a7c5327814166d] Successfully loaded platform independent plugin aws:updateSsmAgent May 17 00:38:14.836480 amazon-ssm-agent[1712]: 2025-05-17 00:38:14 INFO [instanceID=i-0d0a7c5327814166d] Successfully loaded platform independent plugin aws:configureDocker May 17 00:38:14.836480 amazon-ssm-agent[1712]: 2025-05-17 00:38:14 INFO [instanceID=i-0d0a7c5327814166d] Successfully loaded platform independent plugin aws:runDockerAction May 17 00:38:14.836480 amazon-ssm-agent[1712]: 2025-05-17 00:38:14 INFO [instanceID=i-0d0a7c5327814166d] Successfully loaded platform independent plugin aws:refreshAssociation May 17 00:38:14.836480 amazon-ssm-agent[1712]: 2025-05-17 00:38:14 INFO [instanceID=i-0d0a7c5327814166d] Successfully loaded platform independent plugin aws:runDocument May 17 00:38:14.836480 amazon-ssm-agent[1712]: 2025-05-17 00:38:14 INFO [instanceID=i-0d0a7c5327814166d] Successfully loaded platform independent plugin aws:softwareInventory May 17 00:38:14.836480 amazon-ssm-agent[1712]: 2025-05-17 00:38:14 INFO [instanceID=i-0d0a7c5327814166d] Successfully loaded platform independent plugin aws:runPowerShellScript May 17 00:38:14.836480 amazon-ssm-agent[1712]: 2025-05-17 00:38:14 INFO [instanceID=i-0d0a7c5327814166d] Successfully loaded platform dependent plugin aws:runShellScript May 17 00:38:14.837046 amazon-ssm-agent[1712]: 2025-05-17 00:38:14 INFO Starting Agent: amazon-ssm-agent - v2.3.1319.0 May 17 00:38:14.837046 amazon-ssm-agent[1712]: 2025-05-17 00:38:14 INFO OS: linux, Arch: amd64 May 17 00:38:14.839496 amazon-ssm-agent[1712]: datastore file /var/lib/amazon/ssm/i-0d0a7c5327814166d/longrunningplugins/datastore/store doesn't exist - no long running plugins to execute May 17 00:38:14.851282 amazon-ssm-agent[1712]: 2025-05-17 00:38:14 INFO [MessagingDeliveryService] Starting document processing engine... May 17 00:38:14.947536 amazon-ssm-agent[1712]: 2025-05-17 00:38:14 INFO [MessagingDeliveryService] [EngineProcessor] Starting May 17 00:38:14.989363 tar[1628]: linux-amd64/README.md May 17 00:38:14.994172 systemd[1]: Finished prepare-helm.service. May 17 00:38:15.041838 amazon-ssm-agent[1712]: 2025-05-17 00:38:14 INFO [MessagingDeliveryService] [EngineProcessor] Initial processing May 17 00:38:15.137053 amazon-ssm-agent[1712]: 2025-05-17 00:38:14 INFO [MessagingDeliveryService] Starting message polling May 17 00:38:15.178108 locksmithd[1677]: locksmithd starting currentOperation="UPDATE_STATUS_IDLE" strategy="reboot" May 17 00:38:15.231621 amazon-ssm-agent[1712]: 2025-05-17 00:38:14 INFO [MessagingDeliveryService] Starting send replies to MDS May 17 00:38:15.326537 amazon-ssm-agent[1712]: 2025-05-17 00:38:14 INFO [instanceID=i-0d0a7c5327814166d] Starting association polling May 17 00:38:15.422302 amazon-ssm-agent[1712]: 2025-05-17 00:38:14 INFO [MessagingDeliveryService] [Association] [EngineProcessor] Starting May 17 00:38:15.516357 amazon-ssm-agent[1712]: 2025-05-17 00:38:14 INFO [MessagingDeliveryService] [Association] Launching response handler May 17 00:38:15.611820 amazon-ssm-agent[1712]: 2025-05-17 00:38:14 INFO [MessagingDeliveryService] [Association] [EngineProcessor] Initial processing May 17 00:38:15.707531 amazon-ssm-agent[1712]: 2025-05-17 00:38:14 INFO [MessagingDeliveryService] [Association] Initializing association scheduling service May 17 00:38:15.804156 amazon-ssm-agent[1712]: 2025-05-17 00:38:14 INFO [MessagingDeliveryService] [Association] Association scheduling service initialized May 17 00:38:15.900564 amazon-ssm-agent[1712]: 2025-05-17 00:38:14 INFO [OfflineService] Starting document processing engine... May 17 00:38:15.996992 amazon-ssm-agent[1712]: 2025-05-17 00:38:14 INFO [OfflineService] [EngineProcessor] Starting May 17 00:38:16.004432 systemd[1]: Started kubelet.service. May 17 00:38:16.093451 amazon-ssm-agent[1712]: 2025-05-17 00:38:14 INFO [OfflineService] [EngineProcessor] Initial processing May 17 00:38:16.190094 amazon-ssm-agent[1712]: 2025-05-17 00:38:14 INFO [OfflineService] Starting message polling May 17 00:38:16.286991 amazon-ssm-agent[1712]: 2025-05-17 00:38:14 INFO [OfflineService] Starting send replies to MDS May 17 00:38:16.384894 amazon-ssm-agent[1712]: 2025-05-17 00:38:14 INFO [LongRunningPluginsManager] starting long running plugin manager May 17 00:38:16.482634 amazon-ssm-agent[1712]: 2025-05-17 00:38:14 INFO [MessageGatewayService] Starting session document processing engine... May 17 00:38:16.580099 amazon-ssm-agent[1712]: 2025-05-17 00:38:14 INFO [MessageGatewayService] [EngineProcessor] Starting May 17 00:38:16.664278 sshd_keygen[1642]: ssh-keygen: generating new host keys: RSA ECDSA ED25519 May 17 00:38:16.677633 amazon-ssm-agent[1712]: 2025-05-17 00:38:14 INFO [MessageGatewayService] SSM Agent is trying to setup control channel for Session Manager module. May 17 00:38:16.692655 systemd[1]: Finished sshd-keygen.service. May 17 00:38:16.695099 systemd[1]: Starting issuegen.service... May 17 00:38:16.697504 systemd[1]: Started sshd@0-172.31.30.240:22-139.178.68.195:49424.service. May 17 00:38:16.704840 systemd[1]: issuegen.service: Deactivated successfully. May 17 00:38:16.705051 systemd[1]: Finished issuegen.service. May 17 00:38:16.707475 systemd[1]: Starting systemd-user-sessions.service... May 17 00:38:16.719519 systemd[1]: Finished systemd-user-sessions.service. May 17 00:38:16.722457 systemd[1]: Started getty@tty1.service. May 17 00:38:16.725106 systemd[1]: Started serial-getty@ttyS0.service. May 17 00:38:16.727583 systemd[1]: Reached target getty.target. May 17 00:38:16.728433 systemd[1]: Reached target multi-user.target. May 17 00:38:16.731891 systemd[1]: Starting systemd-update-utmp-runlevel.service... May 17 00:38:16.745878 systemd[1]: systemd-update-utmp-runlevel.service: Deactivated successfully. May 17 00:38:16.746084 systemd[1]: Finished systemd-update-utmp-runlevel.service. May 17 00:38:16.746884 systemd[1]: Startup finished in 666ms (kernel) + 6.668s (initrd) + 9.615s (userspace) = 16.950s. May 17 00:38:16.775519 amazon-ssm-agent[1712]: 2025-05-17 00:38:14 INFO [MessageGatewayService] Setting up websocket for controlchannel for instance: i-0d0a7c5327814166d, requestId: 4bac0e30-707c-4547-ae28-846e06eed8b4 May 17 00:38:16.873495 amazon-ssm-agent[1712]: 2025-05-17 00:38:14 INFO [LongRunningPluginsManager] there aren't any long running plugin to execute May 17 00:38:16.896563 sshd[1823]: Accepted publickey for core from 139.178.68.195 port 49424 ssh2: RSA SHA256:I5cGDzOOPhNK8a4J4SFPiuUQivu3TK8ocBzhX4AkN30 May 17 00:38:16.900023 sshd[1823]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) May 17 00:38:16.914924 systemd[1]: Created slice user-500.slice. May 17 00:38:16.916130 systemd[1]: Starting user-runtime-dir@500.service... May 17 00:38:16.920510 systemd-logind[1620]: New session 1 of user core. May 17 00:38:16.927826 systemd[1]: Finished user-runtime-dir@500.service. May 17 00:38:16.929334 systemd[1]: Starting user@500.service... May 17 00:38:16.935488 (systemd)[1832]: pam_unix(systemd-user:session): session opened for user core(uid=500) by (uid=0) May 17 00:38:16.957173 kubelet[1809]: E0517 00:38:16.957132 1809 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" May 17 00:38:16.959269 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE May 17 00:38:16.959403 systemd[1]: kubelet.service: Failed with result 'exit-code'. May 17 00:38:16.959664 systemd[1]: kubelet.service: Consumed 1.214s CPU time. May 17 00:38:16.971762 amazon-ssm-agent[1712]: 2025-05-17 00:38:14 INFO [HealthCheck] HealthCheck reporting agent health. May 17 00:38:17.032816 systemd[1832]: Queued start job for default target default.target. May 17 00:38:17.033350 systemd[1832]: Reached target paths.target. May 17 00:38:17.033448 systemd[1832]: Reached target sockets.target. May 17 00:38:17.033465 systemd[1832]: Reached target timers.target. May 17 00:38:17.033477 systemd[1832]: Reached target basic.target. May 17 00:38:17.033594 systemd[1]: Started user@500.service. May 17 00:38:17.034443 systemd[1]: Started session-1.scope. May 17 00:38:17.035545 systemd[1832]: Reached target default.target. May 17 00:38:17.035591 systemd[1832]: Startup finished in 91ms. May 17 00:38:17.070149 amazon-ssm-agent[1712]: 2025-05-17 00:38:14 INFO [MessageGatewayService] listening reply. May 17 00:38:17.168935 amazon-ssm-agent[1712]: 2025-05-17 00:38:14 INFO [LongRunningPluginsManager] There are no long running plugins currently getting executed - skipping their healthcheck May 17 00:38:17.180940 systemd[1]: Started sshd@1-172.31.30.240:22-139.178.68.195:49440.service. May 17 00:38:17.267679 amazon-ssm-agent[1712]: 2025-05-17 00:38:14 INFO [StartupProcessor] Executing startup processor tasks May 17 00:38:17.344564 sshd[1841]: Accepted publickey for core from 139.178.68.195 port 49440 ssh2: RSA SHA256:I5cGDzOOPhNK8a4J4SFPiuUQivu3TK8ocBzhX4AkN30 May 17 00:38:17.346015 sshd[1841]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) May 17 00:38:17.352636 systemd[1]: Started session-2.scope. May 17 00:38:17.352995 systemd-logind[1620]: New session 2 of user core. May 17 00:38:17.366916 amazon-ssm-agent[1712]: 2025-05-17 00:38:14 INFO [StartupProcessor] Write to serial port: Amazon SSM Agent v2.3.1319.0 is running May 17 00:38:17.466193 amazon-ssm-agent[1712]: 2025-05-17 00:38:14 INFO [StartupProcessor] Write to serial port: OsProductName: Flatcar Container Linux by Kinvolk May 17 00:38:17.479427 sshd[1841]: pam_unix(sshd:session): session closed for user core May 17 00:38:17.482428 systemd[1]: sshd@1-172.31.30.240:22-139.178.68.195:49440.service: Deactivated successfully. May 17 00:38:17.483471 systemd[1]: session-2.scope: Deactivated successfully. May 17 00:38:17.484172 systemd-logind[1620]: Session 2 logged out. Waiting for processes to exit. May 17 00:38:17.485101 systemd-logind[1620]: Removed session 2. May 17 00:38:17.504920 systemd[1]: Started sshd@2-172.31.30.240:22-139.178.68.195:49454.service. May 17 00:38:17.565558 amazon-ssm-agent[1712]: 2025-05-17 00:38:14 INFO [StartupProcessor] Write to serial port: OsVersion: 3510.3.7 May 17 00:38:17.665144 amazon-ssm-agent[1712]: 2025-05-17 00:38:14 INFO [MessageGatewayService] Opening websocket connection to: wss://ssmmessages.us-west-2.amazonaws.com/v1/control-channel/i-0d0a7c5327814166d?role=subscribe&stream=input May 17 00:38:17.671515 sshd[1847]: Accepted publickey for core from 139.178.68.195 port 49454 ssh2: RSA SHA256:I5cGDzOOPhNK8a4J4SFPiuUQivu3TK8ocBzhX4AkN30 May 17 00:38:17.673100 sshd[1847]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) May 17 00:38:17.678585 systemd[1]: Started session-3.scope. May 17 00:38:17.679433 systemd-logind[1620]: New session 3 of user core. May 17 00:38:17.765029 amazon-ssm-agent[1712]: 2025-05-17 00:38:14 INFO [MessageGatewayService] Successfully opened websocket connection to: wss://ssmmessages.us-west-2.amazonaws.com/v1/control-channel/i-0d0a7c5327814166d?role=subscribe&stream=input May 17 00:38:17.803542 sshd[1847]: pam_unix(sshd:session): session closed for user core May 17 00:38:17.806400 systemd[1]: sshd@2-172.31.30.240:22-139.178.68.195:49454.service: Deactivated successfully. May 17 00:38:17.807210 systemd[1]: session-3.scope: Deactivated successfully. May 17 00:38:17.807755 systemd-logind[1620]: Session 3 logged out. Waiting for processes to exit. May 17 00:38:17.808485 systemd-logind[1620]: Removed session 3. May 17 00:38:17.828462 systemd[1]: Started sshd@3-172.31.30.240:22-139.178.68.195:49456.service. May 17 00:38:17.864978 amazon-ssm-agent[1712]: 2025-05-17 00:38:14 INFO [MessageGatewayService] Starting receiving message from control channel May 17 00:38:17.965163 amazon-ssm-agent[1712]: 2025-05-17 00:38:14 INFO [MessageGatewayService] [EngineProcessor] Initial processing May 17 00:38:17.994432 sshd[1853]: Accepted publickey for core from 139.178.68.195 port 49456 ssh2: RSA SHA256:I5cGDzOOPhNK8a4J4SFPiuUQivu3TK8ocBzhX4AkN30 May 17 00:38:17.996001 sshd[1853]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) May 17 00:38:18.001840 systemd-logind[1620]: New session 4 of user core. May 17 00:38:18.003113 systemd[1]: Started session-4.scope. May 17 00:38:18.129093 sshd[1853]: pam_unix(sshd:session): session closed for user core May 17 00:38:18.132420 systemd[1]: sshd@3-172.31.30.240:22-139.178.68.195:49456.service: Deactivated successfully. May 17 00:38:18.133198 systemd[1]: session-4.scope: Deactivated successfully. May 17 00:38:18.134496 systemd-logind[1620]: Session 4 logged out. Waiting for processes to exit. May 17 00:38:18.135618 systemd-logind[1620]: Removed session 4. May 17 00:38:18.156198 systemd[1]: Started sshd@4-172.31.30.240:22-139.178.68.195:49462.service. May 17 00:38:18.322375 sshd[1859]: Accepted publickey for core from 139.178.68.195 port 49462 ssh2: RSA SHA256:I5cGDzOOPhNK8a4J4SFPiuUQivu3TK8ocBzhX4AkN30 May 17 00:38:18.324567 sshd[1859]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) May 17 00:38:18.329525 systemd-logind[1620]: New session 5 of user core. May 17 00:38:18.330147 systemd[1]: Started session-5.scope. May 17 00:38:18.474306 sudo[1862]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/setenforce 1 May 17 00:38:18.475003 sudo[1862]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) May 17 00:38:18.483084 dbus-daemon[1612]: \xd0\xfdi\xbd)V: received setenforce notice (enforcing=2010004224) May 17 00:38:18.484891 sudo[1862]: pam_unix(sudo:session): session closed for user root May 17 00:38:18.510432 sshd[1859]: pam_unix(sshd:session): session closed for user core May 17 00:38:18.513876 systemd[1]: sshd@4-172.31.30.240:22-139.178.68.195:49462.service: Deactivated successfully. May 17 00:38:18.514634 systemd[1]: session-5.scope: Deactivated successfully. May 17 00:38:18.515435 systemd-logind[1620]: Session 5 logged out. Waiting for processes to exit. May 17 00:38:18.516428 systemd-logind[1620]: Removed session 5. May 17 00:38:18.536011 systemd[1]: Started sshd@5-172.31.30.240:22-139.178.68.195:49470.service. May 17 00:38:18.700312 sshd[1866]: Accepted publickey for core from 139.178.68.195 port 49470 ssh2: RSA SHA256:I5cGDzOOPhNK8a4J4SFPiuUQivu3TK8ocBzhX4AkN30 May 17 00:38:18.701652 sshd[1866]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) May 17 00:38:18.705825 systemd-logind[1620]: New session 6 of user core. May 17 00:38:18.706579 systemd[1]: Started session-6.scope. May 17 00:38:18.813119 sudo[1870]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/rm -rf /etc/audit/rules.d/80-selinux.rules /etc/audit/rules.d/99-default.rules May 17 00:38:18.813740 sudo[1870]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) May 17 00:38:18.817073 sudo[1870]: pam_unix(sudo:session): session closed for user root May 17 00:38:18.822472 sudo[1869]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/systemctl restart audit-rules May 17 00:38:18.822723 sudo[1869]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) May 17 00:38:18.833428 systemd[1]: Stopping audit-rules.service... May 17 00:38:18.838871 kernel: kauditd_printk_skb: 206 callbacks suppressed May 17 00:38:18.839002 kernel: audit: type=1305 audit(1747442298.834:209): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 May 17 00:38:18.839044 kernel: audit: type=1300 audit(1747442298.834:209): arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffe74006230 a2=420 a3=0 items=0 ppid=1 pid=1873 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:38:18.834000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 May 17 00:38:18.834000 audit[1873]: SYSCALL arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffe74006230 a2=420 a3=0 items=0 ppid=1 pid=1873 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:38:18.843332 auditctl[1873]: No rules May 17 00:38:18.834000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D44 May 17 00:38:18.849052 kernel: audit: type=1327 audit(1747442298.834:209): proctitle=2F7362696E2F617564697463746C002D44 May 17 00:38:18.849151 kernel: audit: type=1131 audit(1747442298.843:210): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:38:18.843000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:38:18.844233 systemd[1]: audit-rules.service: Deactivated successfully. May 17 00:38:18.844441 systemd[1]: Stopped audit-rules.service. May 17 00:38:18.848910 systemd[1]: Starting audit-rules.service... May 17 00:38:18.870369 augenrules[1890]: No rules May 17 00:38:18.877400 kernel: audit: type=1130 audit(1747442298.870:211): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:38:18.877495 kernel: audit: type=1106 audit(1747442298.874:212): pid=1869 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' May 17 00:38:18.870000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:38:18.874000 audit[1869]: USER_END pid=1869 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' May 17 00:38:18.871388 systemd[1]: Finished audit-rules.service. May 17 00:38:18.875378 sudo[1869]: pam_unix(sudo:session): session closed for user root May 17 00:38:18.874000 audit[1869]: CRED_DISP pid=1869 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' May 17 00:38:18.882761 kernel: audit: type=1104 audit(1747442298.874:213): pid=1869 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' May 17 00:38:18.898090 sshd[1866]: pam_unix(sshd:session): session closed for user core May 17 00:38:18.898000 audit[1866]: USER_END pid=1866 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' May 17 00:38:18.901005 systemd[1]: sshd@5-172.31.30.240:22-139.178.68.195:49470.service: Deactivated successfully. May 17 00:38:18.901889 systemd[1]: session-6.scope: Deactivated successfully. May 17 00:38:18.903405 systemd-logind[1620]: Session 6 logged out. Waiting for processes to exit. May 17 00:38:18.904869 systemd-logind[1620]: Removed session 6. May 17 00:38:18.898000 audit[1866]: CRED_DISP pid=1866 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' May 17 00:38:18.909097 kernel: audit: type=1106 audit(1747442298.898:214): pid=1866 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' May 17 00:38:18.909155 kernel: audit: type=1104 audit(1747442298.898:215): pid=1866 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' May 17 00:38:18.909194 kernel: audit: type=1131 audit(1747442298.900:216): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-172.31.30.240:22-139.178.68.195:49470 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:38:18.900000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-172.31.30.240:22-139.178.68.195:49470 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:38:18.923839 systemd[1]: Started sshd@6-172.31.30.240:22-139.178.68.195:49484.service. May 17 00:38:18.923000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-172.31.30.240:22-139.178.68.195:49484 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:38:19.090000 audit[1896]: USER_ACCT pid=1896 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' May 17 00:38:19.091000 audit[1896]: CRED_ACQ pid=1896 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' May 17 00:38:19.091000 audit[1896]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc56ab0950 a2=3 a3=0 items=0 ppid=1 pid=1896 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=7 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:38:19.091000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D May 17 00:38:19.093128 sshd[1896]: Accepted publickey for core from 139.178.68.195 port 49484 ssh2: RSA SHA256:I5cGDzOOPhNK8a4J4SFPiuUQivu3TK8ocBzhX4AkN30 May 17 00:38:19.093077 sshd[1896]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) May 17 00:38:19.098631 systemd[1]: Started session-7.scope. May 17 00:38:19.099210 systemd-logind[1620]: New session 7 of user core. May 17 00:38:19.104000 audit[1896]: USER_START pid=1896 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' May 17 00:38:19.105000 audit[1898]: CRED_ACQ pid=1898 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' May 17 00:38:19.204000 audit[1899]: USER_ACCT pid=1899 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' May 17 00:38:19.204000 audit[1899]: CRED_REFR pid=1899 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' May 17 00:38:19.205165 sudo[1899]: core : PWD=/home/core ; USER=root ; COMMAND=/home/core/install.sh May 17 00:38:19.205396 sudo[1899]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) May 17 00:38:19.206000 audit[1899]: USER_START pid=1899 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' May 17 00:38:19.231203 systemd[1]: Starting docker.service... May 17 00:38:19.272185 env[1909]: time="2025-05-17T00:38:19.272144318Z" level=info msg="Starting up" May 17 00:38:19.274033 env[1909]: time="2025-05-17T00:38:19.273862752Z" level=info msg="parsed scheme: \"unix\"" module=grpc May 17 00:38:19.274033 env[1909]: time="2025-05-17T00:38:19.273887361Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc May 17 00:38:19.274033 env[1909]: time="2025-05-17T00:38:19.273907301Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc May 17 00:38:19.274033 env[1909]: time="2025-05-17T00:38:19.273917353Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc May 17 00:38:19.276121 env[1909]: time="2025-05-17T00:38:19.276096719Z" level=info msg="parsed scheme: \"unix\"" module=grpc May 17 00:38:19.276244 env[1909]: time="2025-05-17T00:38:19.276230768Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc May 17 00:38:19.276325 env[1909]: time="2025-05-17T00:38:19.276293346Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc May 17 00:38:19.276377 env[1909]: time="2025-05-17T00:38:19.276368818Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc May 17 00:38:19.282970 systemd[1]: var-lib-docker-check\x2doverlayfs\x2dsupport574512254-merged.mount: Deactivated successfully. May 17 00:38:19.490516 env[1909]: time="2025-05-17T00:38:19.490468920Z" level=info msg="Loading containers: start." May 17 00:38:19.628000 audit[1941]: NETFILTER_CFG table=nat:2 family=2 entries=2 op=nft_register_chain pid=1941 subj=system_u:system_r:kernel_t:s0 comm="iptables" May 17 00:38:19.628000 audit[1941]: SYSCALL arch=c000003e syscall=46 success=yes exit=116 a0=3 a1=7ffc22818e50 a2=0 a3=7ffc22818e3c items=0 ppid=1909 pid=1941 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:38:19.628000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4E00444F434B4552 May 17 00:38:19.630000 audit[1943]: NETFILTER_CFG table=filter:3 family=2 entries=2 op=nft_register_chain pid=1943 subj=system_u:system_r:kernel_t:s0 comm="iptables" May 17 00:38:19.630000 audit[1943]: SYSCALL arch=c000003e syscall=46 success=yes exit=124 a0=3 a1=7ffe09d541a0 a2=0 a3=7ffe09d5418c items=0 ppid=1909 pid=1943 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:38:19.630000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B4552 May 17 00:38:19.633000 audit[1945]: NETFILTER_CFG table=filter:4 family=2 entries=1 op=nft_register_chain pid=1945 subj=system_u:system_r:kernel_t:s0 comm="iptables" May 17 00:38:19.633000 audit[1945]: SYSCALL arch=c000003e syscall=46 success=yes exit=112 a0=3 a1=7ffe22883140 a2=0 a3=7ffe2288312c items=0 ppid=1909 pid=1945 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:38:19.633000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D31 May 17 00:38:19.635000 audit[1947]: NETFILTER_CFG table=filter:5 family=2 entries=1 op=nft_register_chain pid=1947 subj=system_u:system_r:kernel_t:s0 comm="iptables" May 17 00:38:19.635000 audit[1947]: SYSCALL arch=c000003e syscall=46 success=yes exit=112 a0=3 a1=7ffd03808e40 a2=0 a3=7ffd03808e2c items=0 ppid=1909 pid=1947 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:38:19.635000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D32 May 17 00:38:19.638000 audit[1949]: NETFILTER_CFG table=filter:6 family=2 entries=1 op=nft_register_rule pid=1949 subj=system_u:system_r:kernel_t:s0 comm="iptables" May 17 00:38:19.638000 audit[1949]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffd62537200 a2=0 a3=7ffd625371ec items=0 ppid=1909 pid=1949 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:38:19.638000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D31002D6A0052455455524E May 17 00:38:19.658000 audit[1954]: NETFILTER_CFG table=filter:7 family=2 entries=1 op=nft_register_rule pid=1954 subj=system_u:system_r:kernel_t:s0 comm="iptables" May 17 00:38:19.658000 audit[1954]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffdef7dde30 a2=0 a3=7ffdef7dde1c items=0 ppid=1909 pid=1954 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:38:19.658000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D32002D6A0052455455524E May 17 00:38:19.691000 audit[1956]: NETFILTER_CFG table=filter:8 family=2 entries=1 op=nft_register_chain pid=1956 subj=system_u:system_r:kernel_t:s0 comm="iptables" May 17 00:38:19.691000 audit[1956]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7fff689d87f0 a2=0 a3=7fff689d87dc items=0 ppid=1909 pid=1956 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:38:19.691000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D55534552 May 17 00:38:19.694000 audit[1958]: NETFILTER_CFG table=filter:9 family=2 entries=1 op=nft_register_rule pid=1958 subj=system_u:system_r:kernel_t:s0 comm="iptables" May 17 00:38:19.694000 audit[1958]: SYSCALL arch=c000003e syscall=46 success=yes exit=212 a0=3 a1=7ffde3054590 a2=0 a3=7ffde305457c items=0 ppid=1909 pid=1958 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:38:19.694000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D55534552002D6A0052455455524E May 17 00:38:19.696000 audit[1960]: NETFILTER_CFG table=filter:10 family=2 entries=2 op=nft_register_chain pid=1960 subj=system_u:system_r:kernel_t:s0 comm="iptables" May 17 00:38:19.696000 audit[1960]: SYSCALL arch=c000003e syscall=46 success=yes exit=308 a0=3 a1=7ffd321beb30 a2=0 a3=7ffd321beb1c items=0 ppid=1909 pid=1960 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:38:19.696000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 May 17 00:38:19.707000 audit[1964]: NETFILTER_CFG table=filter:11 family=2 entries=1 op=nft_unregister_rule pid=1964 subj=system_u:system_r:kernel_t:s0 comm="iptables" May 17 00:38:19.707000 audit[1964]: SYSCALL arch=c000003e syscall=46 success=yes exit=216 a0=3 a1=7fffe1d88d40 a2=0 a3=7fffe1d88d2c items=0 ppid=1909 pid=1964 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:38:19.707000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 May 17 00:38:19.712000 audit[1965]: NETFILTER_CFG table=filter:12 family=2 entries=1 op=nft_register_rule pid=1965 subj=system_u:system_r:kernel_t:s0 comm="iptables" May 17 00:38:19.712000 audit[1965]: SYSCALL arch=c000003e syscall=46 success=yes exit=224 a0=3 a1=7ffc22822860 a2=0 a3=7ffc2282284c items=0 ppid=1909 pid=1965 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:38:19.712000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 May 17 00:38:19.737793 kernel: Initializing XFRM netlink socket May 17 00:38:19.802413 env[1909]: time="2025-05-17T00:38:19.801257207Z" level=info msg="Default bridge (docker0) is assigned with an IP address 172.17.0.0/16. Daemon option --bip can be used to set a preferred IP address" May 17 00:38:19.803541 (udev-worker)[1921]: Network interface NamePolicy= disabled on kernel command line. May 17 00:38:19.825000 audit[1973]: NETFILTER_CFG table=nat:13 family=2 entries=2 op=nft_register_chain pid=1973 subj=system_u:system_r:kernel_t:s0 comm="iptables" May 17 00:38:19.825000 audit[1973]: SYSCALL arch=c000003e syscall=46 success=yes exit=492 a0=3 a1=7ffc25a6d500 a2=0 a3=7ffc25a6d4ec items=0 ppid=1909 pid=1973 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:38:19.825000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900504F5354524F5554494E47002D73003137322E31372E302E302F31360000002D6F00646F636B657230002D6A004D415351554552414445 May 17 00:38:19.835000 audit[1976]: NETFILTER_CFG table=nat:14 family=2 entries=1 op=nft_register_rule pid=1976 subj=system_u:system_r:kernel_t:s0 comm="iptables" May 17 00:38:19.835000 audit[1976]: SYSCALL arch=c000003e syscall=46 success=yes exit=288 a0=3 a1=7fff0f259040 a2=0 a3=7fff0f25902c items=0 ppid=1909 pid=1976 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:38:19.835000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900444F434B4552002D6900646F636B657230002D6A0052455455524E May 17 00:38:19.839000 audit[1979]: NETFILTER_CFG table=filter:15 family=2 entries=1 op=nft_register_rule pid=1979 subj=system_u:system_r:kernel_t:s0 comm="iptables" May 17 00:38:19.839000 audit[1979]: SYSCALL arch=c000003e syscall=46 success=yes exit=376 a0=3 a1=7ffea7d21d30 a2=0 a3=7ffea7d21d1c items=0 ppid=1909 pid=1979 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:38:19.839000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B657230002D6F00646F636B657230002D6A00414343455054 May 17 00:38:19.842000 audit[1981]: NETFILTER_CFG table=filter:16 family=2 entries=1 op=nft_register_rule pid=1981 subj=system_u:system_r:kernel_t:s0 comm="iptables" May 17 00:38:19.842000 audit[1981]: SYSCALL arch=c000003e syscall=46 success=yes exit=376 a0=3 a1=7ffc5c212790 a2=0 a3=7ffc5c21277c items=0 ppid=1909 pid=1981 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:38:19.842000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B6572300000002D6F00646F636B657230002D6A00414343455054 May 17 00:38:19.844000 audit[1983]: NETFILTER_CFG table=nat:17 family=2 entries=2 op=nft_register_chain pid=1983 subj=system_u:system_r:kernel_t:s0 comm="iptables" May 17 00:38:19.844000 audit[1983]: SYSCALL arch=c000003e syscall=46 success=yes exit=356 a0=3 a1=7ffe85f6b010 a2=0 a3=7ffe85f6affc items=0 ppid=1909 pid=1983 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:38:19.844000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4100505245524F5554494E47002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B4552 May 17 00:38:19.846000 audit[1985]: NETFILTER_CFG table=nat:18 family=2 entries=2 op=nft_register_chain pid=1985 subj=system_u:system_r:kernel_t:s0 comm="iptables" May 17 00:38:19.846000 audit[1985]: SYSCALL arch=c000003e syscall=46 success=yes exit=444 a0=3 a1=7fffbcf3ac50 a2=0 a3=7fffbcf3ac3c items=0 ppid=1909 pid=1985 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:38:19.846000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D41004F5554505554002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B45520000002D2D647374003132372E302E302E302F38 May 17 00:38:19.849000 audit[1987]: NETFILTER_CFG table=filter:19 family=2 entries=1 op=nft_register_rule pid=1987 subj=system_u:system_r:kernel_t:s0 comm="iptables" May 17 00:38:19.849000 audit[1987]: SYSCALL arch=c000003e syscall=46 success=yes exit=304 a0=3 a1=7ffef8e4ecf0 a2=0 a3=7ffef8e4ecdc items=0 ppid=1909 pid=1987 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:38:19.849000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6A00444F434B4552 May 17 00:38:19.881000 audit[1990]: NETFILTER_CFG table=filter:20 family=2 entries=1 op=nft_register_rule pid=1990 subj=system_u:system_r:kernel_t:s0 comm="iptables" May 17 00:38:19.881000 audit[1990]: SYSCALL arch=c000003e syscall=46 success=yes exit=508 a0=3 a1=7fff4b5bedd0 a2=0 a3=7fff4b5bedbc items=0 ppid=1909 pid=1990 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:38:19.881000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6D00636F6E6E747261636B002D2D637473746174650052454C415445442C45535441424C4953484544002D6A00414343455054 May 17 00:38:19.884000 audit[1992]: NETFILTER_CFG table=filter:21 family=2 entries=1 op=nft_register_rule pid=1992 subj=system_u:system_r:kernel_t:s0 comm="iptables" May 17 00:38:19.884000 audit[1992]: SYSCALL arch=c000003e syscall=46 success=yes exit=240 a0=3 a1=7ffc4e5c5860 a2=0 a3=7ffc4e5c584c items=0 ppid=1909 pid=1992 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:38:19.884000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D31 May 17 00:38:19.886000 audit[1994]: NETFILTER_CFG table=filter:22 family=2 entries=1 op=nft_register_rule pid=1994 subj=system_u:system_r:kernel_t:s0 comm="iptables" May 17 00:38:19.886000 audit[1994]: SYSCALL arch=c000003e syscall=46 success=yes exit=428 a0=3 a1=7ffc06190e20 a2=0 a3=7ffc06190e0c items=0 ppid=1909 pid=1994 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:38:19.886000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D31002D6900646F636B6572300000002D6F00646F636B657230002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D32 May 17 00:38:19.888000 audit[1996]: NETFILTER_CFG table=filter:23 family=2 entries=1 op=nft_register_rule pid=1996 subj=system_u:system_r:kernel_t:s0 comm="iptables" May 17 00:38:19.888000 audit[1996]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7ffd01110a80 a2=0 a3=7ffd01110a6c items=0 ppid=1909 pid=1996 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:38:19.888000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D32002D6F00646F636B657230002D6A0044524F50 May 17 00:38:19.890359 systemd-networkd[1360]: docker0: Link UP May 17 00:38:19.916000 audit[2000]: NETFILTER_CFG table=filter:24 family=2 entries=1 op=nft_unregister_rule pid=2000 subj=system_u:system_r:kernel_t:s0 comm="iptables" May 17 00:38:19.916000 audit[2000]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7fff214f9a00 a2=0 a3=7fff214f99ec items=0 ppid=1909 pid=2000 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:38:19.916000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 May 17 00:38:19.922000 audit[2001]: NETFILTER_CFG table=filter:25 family=2 entries=1 op=nft_register_rule pid=2001 subj=system_u:system_r:kernel_t:s0 comm="iptables" May 17 00:38:19.922000 audit[2001]: SYSCALL arch=c000003e syscall=46 success=yes exit=224 a0=3 a1=7ffd2a103690 a2=0 a3=7ffd2a10367c items=0 ppid=1909 pid=2001 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:38:19.922000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 May 17 00:38:19.923760 env[1909]: time="2025-05-17T00:38:19.923720776Z" level=info msg="Loading containers: done." May 17 00:38:19.944136 env[1909]: time="2025-05-17T00:38:19.944088503Z" level=warning msg="Not using native diff for overlay2, this may cause degraded performance for building images: kernel has CONFIG_OVERLAY_FS_REDIRECT_DIR enabled" storage-driver=overlay2 May 17 00:38:19.944367 env[1909]: time="2025-05-17T00:38:19.944320663Z" level=info msg="Docker daemon" commit=112bdf3343 graphdriver(s)=overlay2 version=20.10.23 May 17 00:38:19.944463 env[1909]: time="2025-05-17T00:38:19.944444927Z" level=info msg="Daemon has completed initialization" May 17 00:38:19.966964 systemd[1]: Started docker.service. May 17 00:38:19.966000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=docker comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:38:19.972093 env[1909]: time="2025-05-17T00:38:19.972022242Z" level=info msg="API listen on /run/docker.sock" May 17 00:38:20.867126 env[1634]: time="2025-05-17T00:38:20.867088822Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.33.1\"" May 17 00:38:21.471392 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount626663457.mount: Deactivated successfully. May 17 00:38:23.304077 env[1634]: time="2025-05-17T00:38:23.304013816Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver:v1.33.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" May 17 00:38:23.307488 env[1634]: time="2025-05-17T00:38:23.307442727Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:c6ab243b29f82a6ce269a5342bfd9ea3d0d4ef0f2bb7e98c6ac0bde1aeafab66,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" May 17 00:38:23.309374 env[1634]: time="2025-05-17T00:38:23.309335416Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-apiserver:v1.33.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" May 17 00:38:23.311465 env[1634]: time="2025-05-17T00:38:23.311428483Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver@sha256:d8ae2fb01c39aa1c7add84f3d54425cf081c24c11e3946830292a8cfa4293548,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" May 17 00:38:23.312172 env[1634]: time="2025-05-17T00:38:23.312138680Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.33.1\" returns image reference \"sha256:c6ab243b29f82a6ce269a5342bfd9ea3d0d4ef0f2bb7e98c6ac0bde1aeafab66\"" May 17 00:38:23.312751 env[1634]: time="2025-05-17T00:38:23.312729864Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.33.1\"" May 17 00:38:25.116600 env[1634]: time="2025-05-17T00:38:25.116554387Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager:v1.33.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" May 17 00:38:25.118613 env[1634]: time="2025-05-17T00:38:25.118558416Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:ef43894fa110c389f7286f4d5a3ea176072c95280efeca60d6a79617cdbbf3e4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" May 17 00:38:25.121128 env[1634]: time="2025-05-17T00:38:25.121098627Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-controller-manager:v1.33.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" May 17 00:38:25.123418 env[1634]: time="2025-05-17T00:38:25.123382618Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager@sha256:7c9bea694e3a3c01ed6a5ee02d55a6124cc08e0b2eec6caa33f2c396b8cbc3f8,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" May 17 00:38:25.123720 env[1634]: time="2025-05-17T00:38:25.123692279Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.33.1\" returns image reference \"sha256:ef43894fa110c389f7286f4d5a3ea176072c95280efeca60d6a79617cdbbf3e4\"" May 17 00:38:25.124997 env[1634]: time="2025-05-17T00:38:25.124967436Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.33.1\"" May 17 00:38:26.704242 env[1634]: time="2025-05-17T00:38:26.704182865Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler:v1.33.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" May 17 00:38:26.707084 env[1634]: time="2025-05-17T00:38:26.707042593Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:398c985c0d950becc8dcdab5877a8a517ffeafca0792b3fe5f1acff218aeac49,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" May 17 00:38:26.709025 env[1634]: time="2025-05-17T00:38:26.708991861Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-scheduler:v1.33.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" May 17 00:38:26.711998 env[1634]: time="2025-05-17T00:38:26.711964811Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler@sha256:395b7de7cdbdcc3c3a3db270844a3f71d757e2447a1e4db76b4cce46fba7fd55,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" May 17 00:38:26.712759 env[1634]: time="2025-05-17T00:38:26.712726348Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.33.1\" returns image reference \"sha256:398c985c0d950becc8dcdab5877a8a517ffeafca0792b3fe5f1acff218aeac49\"" May 17 00:38:26.713317 env[1634]: time="2025-05-17T00:38:26.713296167Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.33.1\"" May 17 00:38:27.111359 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 1. May 17 00:38:27.111546 systemd[1]: Stopped kubelet.service. May 17 00:38:27.111599 systemd[1]: kubelet.service: Consumed 1.214s CPU time. May 17 00:38:27.110000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:38:27.117463 kernel: kauditd_printk_skb: 84 callbacks suppressed May 17 00:38:27.117567 kernel: audit: type=1130 audit(1747442307.110:251): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:38:27.117599 kernel: audit: type=1131 audit(1747442307.110:252): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:38:27.110000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:38:27.114080 systemd[1]: Starting kubelet.service... May 17 00:38:27.342299 systemd[1]: Started kubelet.service. May 17 00:38:27.341000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:38:27.346959 kernel: audit: type=1130 audit(1747442307.341:253): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:38:27.452728 kubelet[2038]: E0517 00:38:27.452602 2038 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" May 17 00:38:27.464918 kernel: audit: type=1131 audit(1747442307.459:254): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' May 17 00:38:27.459000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' May 17 00:38:27.459691 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE May 17 00:38:27.459883 systemd[1]: kubelet.service: Failed with result 'exit-code'. May 17 00:38:27.943203 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2024440676.mount: Deactivated successfully. May 17 00:38:28.684326 env[1634]: time="2025-05-17T00:38:28.684269294Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy:v1.33.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" May 17 00:38:28.704691 env[1634]: time="2025-05-17T00:38:28.704642658Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:b79c189b052cdbe0e837d0caa6faf1d9fd696d8664fcc462f67d9ea51f26fef2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" May 17 00:38:28.710413 env[1634]: time="2025-05-17T00:38:28.710364161Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-proxy:v1.33.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" May 17 00:38:28.714055 env[1634]: time="2025-05-17T00:38:28.713996186Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy@sha256:7ddf379897139ae8ade8b33cb9373b70c632a4d5491da6e234f5d830e0a50807,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" May 17 00:38:28.714956 env[1634]: time="2025-05-17T00:38:28.714913110Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.33.1\" returns image reference \"sha256:b79c189b052cdbe0e837d0caa6faf1d9fd696d8664fcc462f67d9ea51f26fef2\"" May 17 00:38:28.715884 env[1634]: time="2025-05-17T00:38:28.715844373Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.12.0\"" May 17 00:38:29.004706 amazon-ssm-agent[1712]: 2025-05-17 00:38:29 INFO [MessagingDeliveryService] [Association] No associations on boot. Requerying for associations after 30 seconds. May 17 00:38:29.277091 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2608503606.mount: Deactivated successfully. May 17 00:38:30.480988 env[1634]: time="2025-05-17T00:38:30.480934533Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns:v1.12.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" May 17 00:38:30.483913 env[1634]: time="2025-05-17T00:38:30.483872837Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:1cf5f116067c67da67f97bff78c4bbc76913f59057c18627b96facaced73ea0b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" May 17 00:38:30.487058 env[1634]: time="2025-05-17T00:38:30.487015333Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/coredns/coredns:v1.12.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" May 17 00:38:30.489146 env[1634]: time="2025-05-17T00:38:30.489107676Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns@sha256:40384aa1f5ea6bfdc77997d243aec73da05f27aed0c5e9d65bfa98933c519d97,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" May 17 00:38:30.490149 env[1634]: time="2025-05-17T00:38:30.490116846Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.12.0\" returns image reference \"sha256:1cf5f116067c67da67f97bff78c4bbc76913f59057c18627b96facaced73ea0b\"" May 17 00:38:30.490588 env[1634]: time="2025-05-17T00:38:30.490566265Z" level=info msg="PullImage \"registry.k8s.io/pause:3.10\"" May 17 00:38:30.955142 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount882061000.mount: Deactivated successfully. May 17 00:38:30.963627 env[1634]: time="2025-05-17T00:38:30.963574633Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" May 17 00:38:30.966481 env[1634]: time="2025-05-17T00:38:30.966436956Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:873ed75102791e5b0b8a7fcd41606c92fcec98d56d05ead4ac5131650004c136,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" May 17 00:38:30.970162 env[1634]: time="2025-05-17T00:38:30.970125682Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" May 17 00:38:30.971606 env[1634]: time="2025-05-17T00:38:30.971551791Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:ee6521f290b2168b6e0935a181d4cff9be1ac3f505666ef0e3c98fae8199917a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" May 17 00:38:30.972361 env[1634]: time="2025-05-17T00:38:30.972308585Z" level=info msg="PullImage \"registry.k8s.io/pause:3.10\" returns image reference \"sha256:873ed75102791e5b0b8a7fcd41606c92fcec98d56d05ead4ac5131650004c136\"" May 17 00:38:30.972986 env[1634]: time="2025-05-17T00:38:30.972955363Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.21-0\"" May 17 00:38:33.908303 env[1634]: time="2025-05-17T00:38:33.908245985Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd:3.5.21-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" May 17 00:38:33.911040 env[1634]: time="2025-05-17T00:38:33.910993454Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:499038711c0816eda03a1ad96a8eb0440c005baa6949698223c6176b7f5077e1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" May 17 00:38:33.913347 env[1634]: time="2025-05-17T00:38:33.913311478Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/etcd:3.5.21-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" May 17 00:38:33.915133 env[1634]: time="2025-05-17T00:38:33.915095824Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd@sha256:d58c035df557080a27387d687092e3fc2b64c6d0e3162dc51453a115f847d121,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" May 17 00:38:33.916126 env[1634]: time="2025-05-17T00:38:33.916090430Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.21-0\" returns image reference \"sha256:499038711c0816eda03a1ad96a8eb0440c005baa6949698223c6176b7f5077e1\"" May 17 00:38:37.611397 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 2. May 17 00:38:37.620829 kernel: audit: type=1130 audit(1747442317.610:255): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:38:37.620887 kernel: audit: type=1131 audit(1747442317.610:256): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:38:37.610000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:38:37.610000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:38:37.611661 systemd[1]: Stopped kubelet.service. May 17 00:38:37.623183 systemd[1]: Starting kubelet.service... May 17 00:38:37.772236 systemd[1]: kubelet.service: Control process exited, code=killed, status=15/TERM May 17 00:38:37.772343 systemd[1]: kubelet.service: Failed with result 'signal'. May 17 00:38:37.772643 systemd[1]: Stopped kubelet.service. May 17 00:38:37.777471 kernel: audit: type=1130 audit(1747442317.772:257): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' May 17 00:38:37.772000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' May 17 00:38:37.775679 systemd[1]: Starting kubelet.service... May 17 00:38:37.813875 systemd[1]: Reloading. May 17 00:38:37.925482 /usr/lib/systemd/system-generators/torcx-generator[2096]: time="2025-05-17T00:38:37Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.7 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.7 /var/lib/torcx/store]" May 17 00:38:37.925523 /usr/lib/systemd/system-generators/torcx-generator[2096]: time="2025-05-17T00:38:37Z" level=info msg="torcx already run" May 17 00:38:38.065853 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. May 17 00:38:38.065877 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. May 17 00:38:38.089053 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. May 17 00:38:38.195538 kernel: audit: type=1400 audit(1747442318.188:258): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:38.195661 kernel: audit: type=1400 audit(1747442318.188:259): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:38.188000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:38.188000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:38.203300 kernel: audit: type=1400 audit(1747442318.188:260): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:38.188000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:38.216891 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 May 17 00:38:38.217037 kernel: audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 May 17 00:38:38.217073 kernel: audit: type=1400 audit(1747442318.188:261): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:38.217105 kernel: audit: backlog limit exceeded May 17 00:38:38.188000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:38.188000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:38.188000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:38.188000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:38.188000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:38.188000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:38.194000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:38.194000 audit: BPF prog-id=49 op=LOAD May 17 00:38:38.194000 audit: BPF prog-id=30 op=UNLOAD May 17 00:38:38.197000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:38.197000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:38.197000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:38.197000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:38.197000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:38.197000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:38.197000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:38.197000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:38.197000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:38.201000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:38.201000 audit: BPF prog-id=50 op=LOAD May 17 00:38:38.201000 audit: BPF prog-id=41 op=UNLOAD May 17 00:38:38.201000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:38.201000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:38.201000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:38.201000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:38.201000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:38.201000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:38.201000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:38.201000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:38.201000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:38.201000 audit: BPF prog-id=51 op=LOAD May 17 00:38:38.202000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:38.202000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:38.202000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:38.202000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:38.202000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:38.202000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:38.202000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:38.202000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:38.202000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:38.202000 audit: BPF prog-id=52 op=LOAD May 17 00:38:38.202000 audit: BPF prog-id=42 op=UNLOAD May 17 00:38:38.202000 audit: BPF prog-id=43 op=UNLOAD May 17 00:38:38.202000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:38.202000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:38.202000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:38.202000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:38.202000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:38.202000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:38.202000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:38.202000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:38.202000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:38.202000 audit: BPF prog-id=53 op=LOAD May 17 00:38:38.202000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:38.202000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:38.202000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:38.202000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:38.202000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:38.202000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:38.202000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:38.202000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:38.202000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:38.202000 audit: BPF prog-id=54 op=LOAD May 17 00:38:38.202000 audit: BPF prog-id=31 op=UNLOAD May 17 00:38:38.202000 audit: BPF prog-id=32 op=UNLOAD May 17 00:38:38.204000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:38.216000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:38.218000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:38.218000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:38.218000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:38.218000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:38.218000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:38.218000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:38.218000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:38.218000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:38.218000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:38.219000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:38.219000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:38.220000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:38.220000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:38.220000 audit: BPF prog-id=35 op=UNLOAD May 17 00:38:38.221000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:38.221000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:38.221000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:38.221000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:38.221000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:38.222000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:38.222000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:38.222000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:38.222000 audit: BPF prog-id=63 op=LOAD May 17 00:38:38.222000 audit: BPF prog-id=36 op=UNLOAD May 17 00:38:38.222000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:38.222000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:38.222000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:38.222000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:38.222000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:38.222000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:38.222000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:38.222000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:38.222000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:38.222000 audit: BPF prog-id=64 op=LOAD May 17 00:38:38.222000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:38.222000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:38.222000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:38.222000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:38.222000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:38.222000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:38.222000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:38.222000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:38.222000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:38.222000 audit: BPF prog-id=65 op=LOAD May 17 00:38:38.222000 audit: BPF prog-id=37 op=UNLOAD May 17 00:38:38.222000 audit: BPF prog-id=38 op=UNLOAD May 17 00:38:38.226000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:38.226000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:38.226000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:38.226000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:38.226000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:38.226000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:38.226000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:38.226000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:38.226000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:38.226000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:38.226000 audit: BPF prog-id=66 op=LOAD May 17 00:38:38.226000 audit: BPF prog-id=40 op=UNLOAD May 17 00:38:38.246210 systemd[1]: kubelet.service: Control process exited, code=killed, status=15/TERM May 17 00:38:38.246314 systemd[1]: kubelet.service: Failed with result 'signal'. May 17 00:38:38.246572 systemd[1]: Stopped kubelet.service. May 17 00:38:38.245000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' May 17 00:38:38.248566 systemd[1]: Starting kubelet.service... May 17 00:38:38.513142 systemd[1]: Started kubelet.service. May 17 00:38:38.512000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:38:38.578860 kubelet[2153]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. May 17 00:38:38.578860 kubelet[2153]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.35. Image garbage collector will get sandbox image information from CRI. May 17 00:38:38.578860 kubelet[2153]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. May 17 00:38:38.578860 kubelet[2153]: I0517 00:38:38.578829 2153 server.go:212] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" May 17 00:38:39.234933 kubelet[2153]: I0517 00:38:39.234889 2153 server.go:530] "Kubelet version" kubeletVersion="v1.33.0" May 17 00:38:39.234933 kubelet[2153]: I0517 00:38:39.234921 2153 server.go:532] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" May 17 00:38:39.235316 kubelet[2153]: I0517 00:38:39.235293 2153 server.go:956] "Client rotation is on, will bootstrap in background" May 17 00:38:39.296164 kubelet[2153]: E0517 00:38:39.296102 2153 certificate_manager.go:596] "Failed while requesting a signed certificate from the control plane" err="cannot create certificate signing request: Post \"https://172.31.30.240:6443/apis/certificates.k8s.io/v1/certificatesigningrequests\": dial tcp 172.31.30.240:6443: connect: connection refused" logger="kubernetes.io/kube-apiserver-client-kubelet.UnhandledError" May 17 00:38:39.299233 kubelet[2153]: I0517 00:38:39.299190 2153 dynamic_cafile_content.go:161] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" May 17 00:38:39.307112 kubelet[2153]: E0517 00:38:39.307069 2153 log.go:32] "RuntimeConfig from runtime service failed" err="rpc error: code = Unimplemented desc = unknown method RuntimeConfig for service runtime.v1.RuntimeService" May 17 00:38:39.307112 kubelet[2153]: I0517 00:38:39.307103 2153 server.go:1423] "CRI implementation should be updated to support RuntimeConfig when KubeletCgroupDriverFromCRI feature gate has been enabled. Falling back to using cgroupDriver from kubelet config." May 17 00:38:39.310565 kubelet[2153]: I0517 00:38:39.310537 2153 server.go:782] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" May 17 00:38:39.310977 kubelet[2153]: I0517 00:38:39.310946 2153 container_manager_linux.go:267] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] May 17 00:38:39.312460 kubelet[2153]: I0517 00:38:39.310975 2153 container_manager_linux.go:272] "Creating Container Manager object based on Node Config" nodeConfig={"NodeName":"ip-172-31-30-240","RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"MemoryManagerPolicy":"None","MemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null,"CgroupVersion":2} May 17 00:38:39.312599 kubelet[2153]: I0517 00:38:39.312469 2153 topology_manager.go:138] "Creating topology manager with none policy" May 17 00:38:39.312599 kubelet[2153]: I0517 00:38:39.312482 2153 container_manager_linux.go:303] "Creating device plugin manager" May 17 00:38:39.313862 kubelet[2153]: I0517 00:38:39.313833 2153 state_mem.go:36] "Initialized new in-memory state store" May 17 00:38:39.319911 kubelet[2153]: I0517 00:38:39.319864 2153 kubelet.go:480] "Attempting to sync node with API server" May 17 00:38:39.319911 kubelet[2153]: I0517 00:38:39.319917 2153 kubelet.go:375] "Adding static pod path" path="/etc/kubernetes/manifests" May 17 00:38:39.320078 kubelet[2153]: I0517 00:38:39.319948 2153 kubelet.go:386] "Adding apiserver pod source" May 17 00:38:39.320078 kubelet[2153]: I0517 00:38:39.319964 2153 apiserver.go:42] "Waiting for node sync before watching apiserver pods" May 17 00:38:39.347896 kubelet[2153]: E0517 00:38:39.347595 2153 reflector.go:200] "Failed to watch" err="failed to list *v1.Node: Get \"https://172.31.30.240:6443/api/v1/nodes?fieldSelector=metadata.name%3Dip-172-31-30-240&limit=500&resourceVersion=0\": dial tcp 172.31.30.240:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.Node" May 17 00:38:39.349005 kubelet[2153]: E0517 00:38:39.348200 2153 reflector.go:200] "Failed to watch" err="failed to list *v1.Service: Get \"https://172.31.30.240:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0\": dial tcp 172.31.30.240:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.Service" May 17 00:38:39.349005 kubelet[2153]: I0517 00:38:39.348321 2153 kuberuntime_manager.go:279] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" May 17 00:38:39.349194 kubelet[2153]: I0517 00:38:39.349049 2153 kubelet.go:935] "Not starting ClusterTrustBundle informer because we are in static kubelet mode or the ClusterTrustBundleProjection featuregate is disabled" May 17 00:38:39.350026 kubelet[2153]: W0517 00:38:39.350004 2153 probe.go:272] Flexvolume plugin directory at /opt/libexec/kubernetes/kubelet-plugins/volume/exec/ does not exist. Recreating. May 17 00:38:39.354079 kubelet[2153]: I0517 00:38:39.354058 2153 watchdog_linux.go:99] "Systemd watchdog is not enabled" May 17 00:38:39.354183 kubelet[2153]: I0517 00:38:39.354110 2153 server.go:1289] "Started kubelet" May 17 00:38:39.370872 kubelet[2153]: E0517 00:38:39.368548 2153 event.go:368] "Unable to write event (may retry after sleeping)" err="Post \"https://172.31.30.240:6443/api/v1/namespaces/default/events\": dial tcp 172.31.30.240:6443: connect: connection refused" event="&Event{ObjectMeta:{ip-172-31-30-240.18402987f695b131 default 0 0001-01-01 00:00:00 +0000 UTC map[] map[] [] [] []},InvolvedObject:ObjectReference{Kind:Node,Namespace:,Name:ip-172-31-30-240,UID:ip-172-31-30-240,APIVersion:,ResourceVersion:,FieldPath:,},Reason:Starting,Message:Starting kubelet.,Source:EventSource{Component:kubelet,Host:ip-172-31-30-240,},FirstTimestamp:2025-05-17 00:38:39.354081585 +0000 UTC m=+0.833158757,LastTimestamp:2025-05-17 00:38:39.354081585 +0000 UTC m=+0.833158757,Count:1,Type:Normal,EventTime:0001-01-01 00:00:00 +0000 UTC,Series:nil,Action:,Related:nil,ReportingController:kubelet,ReportingInstance:ip-172-31-30-240,}" May 17 00:38:39.371177 kubelet[2153]: I0517 00:38:39.371115 2153 ratelimit.go:55] "Setting rate limiting for endpoint" service="podresources" qps=100 burstTokens=10 May 17 00:38:39.371551 kubelet[2153]: I0517 00:38:39.371533 2153 server.go:255] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" May 17 00:38:39.371712 kubelet[2153]: I0517 00:38:39.371618 2153 server.go:180] "Starting to listen" address="0.0.0.0" port=10250 May 17 00:38:39.372550 kubelet[2153]: I0517 00:38:39.372533 2153 server.go:317] "Adding debug handlers to kubelet server" May 17 00:38:39.372000 audit[2153]: AVC avc: denied { mac_admin } for pid=2153 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:39.372000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" May 17 00:38:39.372000 audit[2153]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000a5b620 a1=c000a0e798 a2=c000a5b5f0 a3=25 items=0 ppid=1 pid=2153 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:38:39.372000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 May 17 00:38:39.374035 kubelet[2153]: I0517 00:38:39.373728 2153 kubelet.go:1552] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins_registry: invalid argument" May 17 00:38:39.374035 kubelet[2153]: I0517 00:38:39.373760 2153 kubelet.go:1556] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins: invalid argument" May 17 00:38:39.374035 kubelet[2153]: I0517 00:38:39.373840 2153 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" May 17 00:38:39.372000 audit[2153]: AVC avc: denied { mac_admin } for pid=2153 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:39.372000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" May 17 00:38:39.372000 audit[2153]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000a5d140 a1=c000a0e7b0 a2=c000a5b6b0 a3=25 items=0 ppid=1 pid=2153 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:38:39.372000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 May 17 00:38:39.377435 kubelet[2153]: I0517 00:38:39.377408 2153 dynamic_serving_content.go:135] "Starting controller" name="kubelet-server-cert-files::/var/lib/kubelet/pki/kubelet.crt::/var/lib/kubelet/pki/kubelet.key" May 17 00:38:39.379828 kubelet[2153]: E0517 00:38:39.379799 2153 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"ip-172-31-30-240\" not found" May 17 00:38:39.379922 kubelet[2153]: I0517 00:38:39.379863 2153 volume_manager.go:297] "Starting Kubelet Volume Manager" May 17 00:38:39.380090 kubelet[2153]: I0517 00:38:39.380070 2153 desired_state_of_world_populator.go:150] "Desired state populator starts to run" May 17 00:38:39.380134 kubelet[2153]: I0517 00:38:39.380124 2153 reconciler.go:26] "Reconciler: start to sync state" May 17 00:38:39.380576 kubelet[2153]: E0517 00:38:39.380496 2153 reflector.go:200] "Failed to watch" err="failed to list *v1.CSIDriver: Get \"https://172.31.30.240:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0\": dial tcp 172.31.30.240:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.CSIDriver" May 17 00:38:39.380867 kubelet[2153]: I0517 00:38:39.380847 2153 factory.go:221] Registration of the crio container factory failed: Get "http://%2Fvar%2Frun%2Fcrio%2Fcrio.sock/info": dial unix /var/run/crio/crio.sock: connect: no such file or directory May 17 00:38:39.382258 kubelet[2153]: I0517 00:38:39.382244 2153 factory.go:223] Registration of the containerd container factory successfully May 17 00:38:39.382258 kubelet[2153]: I0517 00:38:39.382258 2153 factory.go:223] Registration of the systemd container factory successfully May 17 00:38:39.382000 audit[2169]: NETFILTER_CFG table=mangle:26 family=10 entries=2 op=nft_register_chain pid=2169 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" May 17 00:38:39.382000 audit[2169]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7fff9509be70 a2=0 a3=7fff9509be5c items=0 ppid=2153 pid=2169 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:38:39.382000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 May 17 00:38:39.383469 kubelet[2153]: I0517 00:38:39.383386 2153 kubelet_network_linux.go:49] "Initialized iptables rules." protocol="IPv6" May 17 00:38:39.383000 audit[2170]: NETFILTER_CFG table=mangle:27 family=2 entries=2 op=nft_register_chain pid=2170 subj=system_u:system_r:kernel_t:s0 comm="iptables" May 17 00:38:39.383000 audit[2170]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7ffccb2b6f20 a2=0 a3=7ffccb2b6f0c items=0 ppid=2153 pid=2170 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:38:39.383000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 May 17 00:38:39.384000 audit[2171]: NETFILTER_CFG table=filter:28 family=2 entries=1 op=nft_register_chain pid=2171 subj=system_u:system_r:kernel_t:s0 comm="iptables" May 17 00:38:39.384000 audit[2171]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffcc3872070 a2=0 a3=7ffcc387205c items=0 ppid=2153 pid=2171 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:38:39.384000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 May 17 00:38:39.385000 audit[2172]: NETFILTER_CFG table=mangle:29 family=10 entries=1 op=nft_register_chain pid=2172 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" May 17 00:38:39.385000 audit[2172]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffcbfdd9e00 a2=0 a3=7ffcbfdd9dec items=0 ppid=2153 pid=2172 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:38:39.385000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 May 17 00:38:39.386000 audit[2173]: NETFILTER_CFG table=nat:30 family=10 entries=2 op=nft_register_chain pid=2173 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" May 17 00:38:39.386000 audit[2173]: SYSCALL arch=c000003e syscall=46 success=yes exit=128 a0=3 a1=7fff189125f0 a2=0 a3=7fff189125dc items=0 ppid=2153 pid=2173 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:38:39.386000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 May 17 00:38:39.387000 audit[2174]: NETFILTER_CFG table=filter:31 family=10 entries=2 op=nft_register_chain pid=2174 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" May 17 00:38:39.387000 audit[2174]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7ffcf8fb4f40 a2=0 a3=7ffcf8fb4f2c items=0 ppid=2153 pid=2174 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:38:39.387000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 May 17 00:38:39.389000 audit[2176]: NETFILTER_CFG table=filter:32 family=2 entries=2 op=nft_register_chain pid=2176 subj=system_u:system_r:kernel_t:s0 comm="iptables" May 17 00:38:39.389000 audit[2176]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7ffe4aafccb0 a2=0 a3=7ffe4aafcc9c items=0 ppid=2153 pid=2176 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:38:39.389000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C May 17 00:38:39.391000 audit[2178]: NETFILTER_CFG table=filter:33 family=2 entries=2 op=nft_register_chain pid=2178 subj=system_u:system_r:kernel_t:s0 comm="iptables" May 17 00:38:39.391000 audit[2178]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7ffcaceba140 a2=0 a3=7ffcaceba12c items=0 ppid=2153 pid=2178 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:38:39.391000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C May 17 00:38:39.400000 audit[2181]: NETFILTER_CFG table=filter:34 family=2 entries=1 op=nft_register_rule pid=2181 subj=system_u:system_r:kernel_t:s0 comm="iptables" May 17 00:38:39.400000 audit[2181]: SYSCALL arch=c000003e syscall=46 success=yes exit=924 a0=3 a1=7ffd65466a00 a2=0 a3=7ffd654669ec items=0 ppid=2153 pid=2181 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:38:39.400000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E7400626C6F636B20696E636F6D696E67206C6F63616C6E657420636F6E6E656374696F6E73002D2D647374003132372E302E302E302F38 May 17 00:38:39.402370 kubelet[2153]: I0517 00:38:39.402350 2153 kubelet_network_linux.go:49] "Initialized iptables rules." protocol="IPv4" May 17 00:38:39.402440 kubelet[2153]: I0517 00:38:39.402433 2153 status_manager.go:230] "Starting to sync pod status with apiserver" May 17 00:38:39.402522 kubelet[2153]: I0517 00:38:39.402514 2153 watchdog_linux.go:127] "Systemd watchdog is not enabled or the interval is invalid, so health checking will not be started." May 17 00:38:39.402567 kubelet[2153]: I0517 00:38:39.402561 2153 kubelet.go:2436] "Starting kubelet main sync loop" May 17 00:38:39.402867 kubelet[2153]: E0517 00:38:39.402645 2153 kubelet.go:2460] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" May 17 00:38:39.403000 audit[2182]: NETFILTER_CFG table=mangle:35 family=2 entries=1 op=nft_register_chain pid=2182 subj=system_u:system_r:kernel_t:s0 comm="iptables" May 17 00:38:39.403000 audit[2182]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffd5afa7280 a2=0 a3=7ffd5afa726c items=0 ppid=2153 pid=2182 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:38:39.403000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 May 17 00:38:39.409554 kubelet[2153]: E0517 00:38:39.409506 2153 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://172.31.30.240:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-30-240?timeout=10s\": dial tcp 172.31.30.240:6443: connect: connection refused" interval="200ms" May 17 00:38:39.409716 kubelet[2153]: E0517 00:38:39.409693 2153 reflector.go:200] "Failed to watch" err="failed to list *v1.RuntimeClass: Get \"https://172.31.30.240:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0\": dial tcp 172.31.30.240:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.RuntimeClass" May 17 00:38:39.414296 kubelet[2153]: I0517 00:38:39.414270 2153 cpu_manager.go:221] "Starting CPU manager" policy="none" May 17 00:38:39.414296 kubelet[2153]: I0517 00:38:39.414287 2153 cpu_manager.go:222] "Reconciling" reconcilePeriod="10s" May 17 00:38:39.414437 kubelet[2153]: I0517 00:38:39.414313 2153 state_mem.go:36] "Initialized new in-memory state store" May 17 00:38:39.414000 audit[2185]: NETFILTER_CFG table=nat:36 family=2 entries=1 op=nft_register_chain pid=2185 subj=system_u:system_r:kernel_t:s0 comm="iptables" May 17 00:38:39.414000 audit[2185]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffc578ff9e0 a2=0 a3=7ffc578ff9cc items=0 ppid=2153 pid=2185 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:38:39.414000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 May 17 00:38:39.415000 audit[2186]: NETFILTER_CFG table=filter:37 family=2 entries=1 op=nft_register_chain pid=2186 subj=system_u:system_r:kernel_t:s0 comm="iptables" May 17 00:38:39.415000 audit[2186]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffd69653890 a2=0 a3=7ffd6965387c items=0 ppid=2153 pid=2186 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:38:39.415000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 May 17 00:38:39.418589 kubelet[2153]: I0517 00:38:39.418563 2153 policy_none.go:49] "None policy: Start" May 17 00:38:39.418756 kubelet[2153]: I0517 00:38:39.418598 2153 memory_manager.go:186] "Starting memorymanager" policy="None" May 17 00:38:39.418756 kubelet[2153]: I0517 00:38:39.418610 2153 state_mem.go:35] "Initializing new in-memory state store" May 17 00:38:39.426341 systemd[1]: Created slice kubepods.slice. May 17 00:38:39.431480 systemd[1]: Created slice kubepods-burstable.slice. May 17 00:38:39.435104 systemd[1]: Created slice kubepods-besteffort.slice. May 17 00:38:39.440622 kubelet[2153]: E0517 00:38:39.440584 2153 manager.go:517] "Failed to read data from checkpoint" err="checkpoint is not found" checkpoint="kubelet_internal_checkpoint" May 17 00:38:39.439000 audit[2153]: AVC avc: denied { mac_admin } for pid=2153 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:39.439000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" May 17 00:38:39.439000 audit[2153]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000d895c0 a1=c000dad4e8 a2=c000d89590 a3=25 items=0 ppid=1 pid=2153 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:38:39.439000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 May 17 00:38:39.441077 kubelet[2153]: E0517 00:38:39.440656 2153 server.go:94] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/device-plugins/: invalid argument" path="/var/lib/kubelet/device-plugins/" May 17 00:38:39.441077 kubelet[2153]: I0517 00:38:39.440830 2153 eviction_manager.go:189] "Eviction manager: starting control loop" May 17 00:38:39.441077 kubelet[2153]: I0517 00:38:39.440847 2153 container_log_manager.go:189] "Initializing container log rotate workers" workers=1 monitorPeriod="10s" May 17 00:38:39.442644 kubelet[2153]: I0517 00:38:39.442045 2153 plugin_manager.go:118] "Starting Kubelet Plugin Manager" May 17 00:38:39.444058 kubelet[2153]: E0517 00:38:39.444028 2153 eviction_manager.go:267] "eviction manager: failed to check if we have separate container filesystem. Ignoring." err="no imagefs label for configured runtime" May 17 00:38:39.444160 kubelet[2153]: E0517 00:38:39.444075 2153 eviction_manager.go:292] "Eviction manager: failed to get summary stats" err="failed to get node info: node \"ip-172-31-30-240\" not found" May 17 00:38:39.517820 systemd[1]: Created slice kubepods-burstable-pod9a0f07f34260120a2430eccefa9b32ed.slice. May 17 00:38:39.527312 kubelet[2153]: E0517 00:38:39.527274 2153 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ip-172-31-30-240\" not found" node="ip-172-31-30-240" May 17 00:38:39.530739 systemd[1]: Created slice kubepods-burstable-podf93a1c7e886b7fc4a0eb1c29e6545cdb.slice. May 17 00:38:39.533646 kubelet[2153]: E0517 00:38:39.533627 2153 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ip-172-31-30-240\" not found" node="ip-172-31-30-240" May 17 00:38:39.543236 systemd[1]: Created slice kubepods-burstable-poda6bb00d3083d3b8c0a54ce654e44c7ab.slice. May 17 00:38:39.545564 kubelet[2153]: I0517 00:38:39.545531 2153 kubelet_node_status.go:75] "Attempting to register node" node="ip-172-31-30-240" May 17 00:38:39.546180 kubelet[2153]: E0517 00:38:39.546135 2153 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://172.31.30.240:6443/api/v1/nodes\": dial tcp 172.31.30.240:6443: connect: connection refused" node="ip-172-31-30-240" May 17 00:38:39.546928 kubelet[2153]: E0517 00:38:39.546907 2153 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ip-172-31-30-240\" not found" node="ip-172-31-30-240" May 17 00:38:39.610555 kubelet[2153]: E0517 00:38:39.610499 2153 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://172.31.30.240:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-30-240?timeout=10s\": dial tcp 172.31.30.240:6443: connect: connection refused" interval="400ms" May 17 00:38:39.681854 kubelet[2153]: I0517 00:38:39.681802 2153 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/9a0f07f34260120a2430eccefa9b32ed-ca-certs\") pod \"kube-apiserver-ip-172-31-30-240\" (UID: \"9a0f07f34260120a2430eccefa9b32ed\") " pod="kube-system/kube-apiserver-ip-172-31-30-240" May 17 00:38:39.681854 kubelet[2153]: I0517 00:38:39.681859 2153 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/9a0f07f34260120a2430eccefa9b32ed-usr-share-ca-certificates\") pod \"kube-apiserver-ip-172-31-30-240\" (UID: \"9a0f07f34260120a2430eccefa9b32ed\") " pod="kube-system/kube-apiserver-ip-172-31-30-240" May 17 00:38:39.682047 kubelet[2153]: I0517 00:38:39.681882 2153 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/f93a1c7e886b7fc4a0eb1c29e6545cdb-ca-certs\") pod \"kube-controller-manager-ip-172-31-30-240\" (UID: \"f93a1c7e886b7fc4a0eb1c29e6545cdb\") " pod="kube-system/kube-controller-manager-ip-172-31-30-240" May 17 00:38:39.682047 kubelet[2153]: I0517 00:38:39.681908 2153 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/f93a1c7e886b7fc4a0eb1c29e6545cdb-flexvolume-dir\") pod \"kube-controller-manager-ip-172-31-30-240\" (UID: \"f93a1c7e886b7fc4a0eb1c29e6545cdb\") " pod="kube-system/kube-controller-manager-ip-172-31-30-240" May 17 00:38:39.682047 kubelet[2153]: I0517 00:38:39.681934 2153 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/f93a1c7e886b7fc4a0eb1c29e6545cdb-kubeconfig\") pod \"kube-controller-manager-ip-172-31-30-240\" (UID: \"f93a1c7e886b7fc4a0eb1c29e6545cdb\") " pod="kube-system/kube-controller-manager-ip-172-31-30-240" May 17 00:38:39.682047 kubelet[2153]: I0517 00:38:39.681959 2153 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/9a0f07f34260120a2430eccefa9b32ed-k8s-certs\") pod \"kube-apiserver-ip-172-31-30-240\" (UID: \"9a0f07f34260120a2430eccefa9b32ed\") " pod="kube-system/kube-apiserver-ip-172-31-30-240" May 17 00:38:39.682047 kubelet[2153]: I0517 00:38:39.681983 2153 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/f93a1c7e886b7fc4a0eb1c29e6545cdb-k8s-certs\") pod \"kube-controller-manager-ip-172-31-30-240\" (UID: \"f93a1c7e886b7fc4a0eb1c29e6545cdb\") " pod="kube-system/kube-controller-manager-ip-172-31-30-240" May 17 00:38:39.682176 kubelet[2153]: I0517 00:38:39.682006 2153 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/f93a1c7e886b7fc4a0eb1c29e6545cdb-usr-share-ca-certificates\") pod \"kube-controller-manager-ip-172-31-30-240\" (UID: \"f93a1c7e886b7fc4a0eb1c29e6545cdb\") " pod="kube-system/kube-controller-manager-ip-172-31-30-240" May 17 00:38:39.682176 kubelet[2153]: I0517 00:38:39.682024 2153 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/a6bb00d3083d3b8c0a54ce654e44c7ab-kubeconfig\") pod \"kube-scheduler-ip-172-31-30-240\" (UID: \"a6bb00d3083d3b8c0a54ce654e44c7ab\") " pod="kube-system/kube-scheduler-ip-172-31-30-240" May 17 00:38:39.748334 kubelet[2153]: I0517 00:38:39.748305 2153 kubelet_node_status.go:75] "Attempting to register node" node="ip-172-31-30-240" May 17 00:38:39.748638 kubelet[2153]: E0517 00:38:39.748613 2153 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://172.31.30.240:6443/api/v1/nodes\": dial tcp 172.31.30.240:6443: connect: connection refused" node="ip-172-31-30-240" May 17 00:38:39.829111 env[1634]: time="2025-05-17T00:38:39.828995599Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-ip-172-31-30-240,Uid:9a0f07f34260120a2430eccefa9b32ed,Namespace:kube-system,Attempt:0,}" May 17 00:38:39.834803 env[1634]: time="2025-05-17T00:38:39.834598981Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-ip-172-31-30-240,Uid:f93a1c7e886b7fc4a0eb1c29e6545cdb,Namespace:kube-system,Attempt:0,}" May 17 00:38:39.848643 env[1634]: time="2025-05-17T00:38:39.848510439Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-ip-172-31-30-240,Uid:a6bb00d3083d3b8c0a54ce654e44c7ab,Namespace:kube-system,Attempt:0,}" May 17 00:38:39.935501 kubelet[2153]: E0517 00:38:39.935394 2153 event.go:368] "Unable to write event (may retry after sleeping)" err="Post \"https://172.31.30.240:6443/api/v1/namespaces/default/events\": dial tcp 172.31.30.240:6443: connect: connection refused" event="&Event{ObjectMeta:{ip-172-31-30-240.18402987f695b131 default 0 0001-01-01 00:00:00 +0000 UTC map[] map[] [] [] []},InvolvedObject:ObjectReference{Kind:Node,Namespace:,Name:ip-172-31-30-240,UID:ip-172-31-30-240,APIVersion:,ResourceVersion:,FieldPath:,},Reason:Starting,Message:Starting kubelet.,Source:EventSource{Component:kubelet,Host:ip-172-31-30-240,},FirstTimestamp:2025-05-17 00:38:39.354081585 +0000 UTC m=+0.833158757,LastTimestamp:2025-05-17 00:38:39.354081585 +0000 UTC m=+0.833158757,Count:1,Type:Normal,EventTime:0001-01-01 00:00:00 +0000 UTC,Series:nil,Action:,Related:nil,ReportingController:kubelet,ReportingInstance:ip-172-31-30-240,}" May 17 00:38:40.011579 kubelet[2153]: E0517 00:38:40.011519 2153 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://172.31.30.240:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-30-240?timeout=10s\": dial tcp 172.31.30.240:6443: connect: connection refused" interval="800ms" May 17 00:38:40.151926 kubelet[2153]: I0517 00:38:40.151898 2153 kubelet_node_status.go:75] "Attempting to register node" node="ip-172-31-30-240" May 17 00:38:40.152255 kubelet[2153]: E0517 00:38:40.152192 2153 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://172.31.30.240:6443/api/v1/nodes\": dial tcp 172.31.30.240:6443: connect: connection refused" node="ip-172-31-30-240" May 17 00:38:40.185368 kubelet[2153]: E0517 00:38:40.185325 2153 reflector.go:200] "Failed to watch" err="failed to list *v1.Service: Get \"https://172.31.30.240:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0\": dial tcp 172.31.30.240:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.Service" May 17 00:38:40.318050 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount717643445.mount: Deactivated successfully. May 17 00:38:40.333030 env[1634]: time="2025-05-17T00:38:40.332975976Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" May 17 00:38:40.339200 env[1634]: time="2025-05-17T00:38:40.339155161Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" May 17 00:38:40.341369 env[1634]: time="2025-05-17T00:38:40.341328637Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" May 17 00:38:40.343307 env[1634]: time="2025-05-17T00:38:40.343272506Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" May 17 00:38:40.348075 env[1634]: time="2025-05-17T00:38:40.348029021Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" May 17 00:38:40.350005 env[1634]: time="2025-05-17T00:38:40.349965474Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" May 17 00:38:40.352109 env[1634]: time="2025-05-17T00:38:40.352068597Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" May 17 00:38:40.356283 env[1634]: time="2025-05-17T00:38:40.356237844Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" May 17 00:38:40.358370 env[1634]: time="2025-05-17T00:38:40.358327424Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" May 17 00:38:40.360319 env[1634]: time="2025-05-17T00:38:40.360276684Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" May 17 00:38:40.366147 env[1634]: time="2025-05-17T00:38:40.366110244Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" May 17 00:38:40.371468 env[1634]: time="2025-05-17T00:38:40.371419248Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" May 17 00:38:40.414935 env[1634]: time="2025-05-17T00:38:40.405297727Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 May 17 00:38:40.414935 env[1634]: time="2025-05-17T00:38:40.405342455Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 May 17 00:38:40.414935 env[1634]: time="2025-05-17T00:38:40.405360310Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 May 17 00:38:40.414935 env[1634]: time="2025-05-17T00:38:40.405815568Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/4a5f3fed77bf8731532a7194c09d9bc646d7ccf15f8b9a169b532b919ed9fc2c pid=2197 runtime=io.containerd.runc.v2 May 17 00:38:40.432150 systemd[1]: Started cri-containerd-4a5f3fed77bf8731532a7194c09d9bc646d7ccf15f8b9a169b532b919ed9fc2c.scope. May 17 00:38:40.438795 env[1634]: time="2025-05-17T00:38:40.437087955Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 May 17 00:38:40.438795 env[1634]: time="2025-05-17T00:38:40.437158648Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 May 17 00:38:40.438795 env[1634]: time="2025-05-17T00:38:40.437181765Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 May 17 00:38:40.438795 env[1634]: time="2025-05-17T00:38:40.437333723Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/63154f6493986e987e02c90a2b8435f3835f87106831088e8cb9a6dda2f7bddd pid=2221 runtime=io.containerd.runc.v2 May 17 00:38:40.461000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.461000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.461000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.461000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.461000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.461000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.461000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.461000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.461000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.461000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.461000 audit: BPF prog-id=67 op=LOAD May 17 00:38:40.462000 audit[2215]: AVC avc: denied { bpf } for pid=2215 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.462000 audit[2215]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=2197 pid=2215 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:38:40.462000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3461356633666564373762663837333135333261373139346330396439 May 17 00:38:40.462000 audit[2215]: AVC avc: denied { perfmon } for pid=2215 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.462000 audit[2215]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=2197 pid=2215 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:38:40.462000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3461356633666564373762663837333135333261373139346330396439 May 17 00:38:40.462000 audit[2215]: AVC avc: denied { bpf } for pid=2215 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.462000 audit[2215]: AVC avc: denied { bpf } for pid=2215 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.462000 audit[2215]: AVC avc: denied { bpf } for pid=2215 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.462000 audit[2215]: AVC avc: denied { perfmon } for pid=2215 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.462000 audit[2215]: AVC avc: denied { perfmon } for pid=2215 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.462000 audit[2215]: AVC avc: denied { perfmon } for pid=2215 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.462000 audit[2215]: AVC avc: denied { perfmon } for pid=2215 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.462000 audit[2215]: AVC avc: denied { perfmon } for pid=2215 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.462000 audit[2215]: AVC avc: denied { bpf } for pid=2215 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.462000 audit[2215]: AVC avc: denied { bpf } for pid=2215 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.462000 audit: BPF prog-id=68 op=LOAD May 17 00:38:40.462000 audit[2215]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001459d8 a2=78 a3=c00034a580 items=0 ppid=2197 pid=2215 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:38:40.462000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3461356633666564373762663837333135333261373139346330396439 May 17 00:38:40.463000 audit[2215]: AVC avc: denied { bpf } for pid=2215 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.463000 audit[2215]: AVC avc: denied { bpf } for pid=2215 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.463000 audit[2215]: AVC avc: denied { perfmon } for pid=2215 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.463000 audit[2215]: AVC avc: denied { perfmon } for pid=2215 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.463000 audit[2215]: AVC avc: denied { perfmon } for pid=2215 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.463000 audit[2215]: AVC avc: denied { perfmon } for pid=2215 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.463000 audit[2215]: AVC avc: denied { perfmon } for pid=2215 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.463000 audit[2215]: AVC avc: denied { bpf } for pid=2215 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.463000 audit[2215]: AVC avc: denied { bpf } for pid=2215 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.463000 audit: BPF prog-id=69 op=LOAD May 17 00:38:40.463000 audit[2215]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000145770 a2=78 a3=c00034a5c8 items=0 ppid=2197 pid=2215 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:38:40.463000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3461356633666564373762663837333135333261373139346330396439 May 17 00:38:40.463000 audit: BPF prog-id=69 op=UNLOAD May 17 00:38:40.463000 audit: BPF prog-id=68 op=UNLOAD May 17 00:38:40.463000 audit[2215]: AVC avc: denied { bpf } for pid=2215 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.463000 audit[2215]: AVC avc: denied { bpf } for pid=2215 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.463000 audit[2215]: AVC avc: denied { bpf } for pid=2215 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.463000 audit[2215]: AVC avc: denied { perfmon } for pid=2215 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.463000 audit[2215]: AVC avc: denied { perfmon } for pid=2215 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.463000 audit[2215]: AVC avc: denied { perfmon } for pid=2215 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.463000 audit[2215]: AVC avc: denied { perfmon } for pid=2215 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.463000 audit[2215]: AVC avc: denied { perfmon } for pid=2215 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.463000 audit[2215]: AVC avc: denied { bpf } for pid=2215 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.463000 audit[2215]: AVC avc: denied { bpf } for pid=2215 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.463000 audit: BPF prog-id=70 op=LOAD May 17 00:38:40.463000 audit[2215]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000145c30 a2=78 a3=c00034a9d8 items=0 ppid=2197 pid=2215 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:38:40.463000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3461356633666564373762663837333135333261373139346330396439 May 17 00:38:40.467857 env[1634]: time="2025-05-17T00:38:40.467795944Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 May 17 00:38:40.467991 env[1634]: time="2025-05-17T00:38:40.467875589Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 May 17 00:38:40.467991 env[1634]: time="2025-05-17T00:38:40.467901614Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 May 17 00:38:40.468093 env[1634]: time="2025-05-17T00:38:40.468076807Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/ddd5306b4024236e083e6f2fa246f4ba8900d0ba8f2138bbdeda57dbc45e5ff3 pid=2248 runtime=io.containerd.runc.v2 May 17 00:38:40.479816 systemd[1]: Started cri-containerd-63154f6493986e987e02c90a2b8435f3835f87106831088e8cb9a6dda2f7bddd.scope. May 17 00:38:40.500645 systemd[1]: Started cri-containerd-ddd5306b4024236e083e6f2fa246f4ba8900d0ba8f2138bbdeda57dbc45e5ff3.scope. May 17 00:38:40.510000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.510000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.510000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.510000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.510000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.510000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.510000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.510000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.510000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.510000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.510000 audit: BPF prog-id=71 op=LOAD May 17 00:38:40.510000 audit[2241]: AVC avc: denied { bpf } for pid=2241 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.510000 audit[2241]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=2221 pid=2241 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:38:40.510000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3633313534663634393339383665393837653032633930613262383433 May 17 00:38:40.510000 audit[2241]: AVC avc: denied { perfmon } for pid=2241 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.510000 audit[2241]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=2221 pid=2241 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:38:40.510000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3633313534663634393339383665393837653032633930613262383433 May 17 00:38:40.511000 audit[2241]: AVC avc: denied { bpf } for pid=2241 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.511000 audit[2241]: AVC avc: denied { bpf } for pid=2241 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.511000 audit[2241]: AVC avc: denied { bpf } for pid=2241 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.511000 audit[2241]: AVC avc: denied { perfmon } for pid=2241 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.511000 audit[2241]: AVC avc: denied { perfmon } for pid=2241 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.511000 audit[2241]: AVC avc: denied { perfmon } for pid=2241 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.511000 audit[2241]: AVC avc: denied { perfmon } for pid=2241 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.511000 audit[2241]: AVC avc: denied { perfmon } for pid=2241 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.511000 audit[2241]: AVC avc: denied { bpf } for pid=2241 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.511000 audit[2241]: AVC avc: denied { bpf } for pid=2241 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.511000 audit: BPF prog-id=72 op=LOAD May 17 00:38:40.511000 audit[2241]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0002a4f00 items=0 ppid=2221 pid=2241 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:38:40.511000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3633313534663634393339383665393837653032633930613262383433 May 17 00:38:40.511000 audit[2241]: AVC avc: denied { bpf } for pid=2241 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.511000 audit[2241]: AVC avc: denied { bpf } for pid=2241 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.511000 audit[2241]: AVC avc: denied { perfmon } for pid=2241 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.511000 audit[2241]: AVC avc: denied { perfmon } for pid=2241 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.511000 audit[2241]: AVC avc: denied { perfmon } for pid=2241 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.511000 audit[2241]: AVC avc: denied { perfmon } for pid=2241 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.511000 audit[2241]: AVC avc: denied { perfmon } for pid=2241 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.511000 audit[2241]: AVC avc: denied { bpf } for pid=2241 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.511000 audit[2241]: AVC avc: denied { bpf } for pid=2241 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.511000 audit: BPF prog-id=73 op=LOAD May 17 00:38:40.511000 audit[2241]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0002a4f48 items=0 ppid=2221 pid=2241 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:38:40.511000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3633313534663634393339383665393837653032633930613262383433 May 17 00:38:40.511000 audit: BPF prog-id=73 op=UNLOAD May 17 00:38:40.511000 audit: BPF prog-id=72 op=UNLOAD May 17 00:38:40.511000 audit[2241]: AVC avc: denied { bpf } for pid=2241 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.511000 audit[2241]: AVC avc: denied { bpf } for pid=2241 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.511000 audit[2241]: AVC avc: denied { bpf } for pid=2241 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.511000 audit[2241]: AVC avc: denied { perfmon } for pid=2241 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.511000 audit[2241]: AVC avc: denied { perfmon } for pid=2241 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.511000 audit[2241]: AVC avc: denied { perfmon } for pid=2241 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.511000 audit[2241]: AVC avc: denied { perfmon } for pid=2241 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.511000 audit[2241]: AVC avc: denied { perfmon } for pid=2241 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.511000 audit[2241]: AVC avc: denied { bpf } for pid=2241 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.511000 audit[2241]: AVC avc: denied { bpf } for pid=2241 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.511000 audit: BPF prog-id=74 op=LOAD May 17 00:38:40.511000 audit[2241]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0002a5358 items=0 ppid=2221 pid=2241 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:38:40.511000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3633313534663634393339383665393837653032633930613262383433 May 17 00:38:40.518456 env[1634]: time="2025-05-17T00:38:40.518417207Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-ip-172-31-30-240,Uid:a6bb00d3083d3b8c0a54ce654e44c7ab,Namespace:kube-system,Attempt:0,} returns sandbox id \"4a5f3fed77bf8731532a7194c09d9bc646d7ccf15f8b9a169b532b919ed9fc2c\"" May 17 00:38:40.528315 env[1634]: time="2025-05-17T00:38:40.528275999Z" level=info msg="CreateContainer within sandbox \"4a5f3fed77bf8731532a7194c09d9bc646d7ccf15f8b9a169b532b919ed9fc2c\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:0,}" May 17 00:38:40.532000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.532000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.532000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.532000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.532000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.532000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.532000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.532000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.532000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.532000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.532000 audit: BPF prog-id=75 op=LOAD May 17 00:38:40.533000 audit[2263]: AVC avc: denied { bpf } for pid=2263 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.533000 audit[2263]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=2248 pid=2263 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:38:40.533000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6464643533303662343032343233366530383365366632666132343666 May 17 00:38:40.533000 audit[2263]: AVC avc: denied { perfmon } for pid=2263 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.533000 audit[2263]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=c items=0 ppid=2248 pid=2263 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:38:40.533000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6464643533303662343032343233366530383365366632666132343666 May 17 00:38:40.533000 audit[2263]: AVC avc: denied { bpf } for pid=2263 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.533000 audit[2263]: AVC avc: denied { bpf } for pid=2263 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.533000 audit[2263]: AVC avc: denied { bpf } for pid=2263 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.533000 audit[2263]: AVC avc: denied { perfmon } for pid=2263 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.533000 audit[2263]: AVC avc: denied { perfmon } for pid=2263 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.533000 audit[2263]: AVC avc: denied { perfmon } for pid=2263 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.533000 audit[2263]: AVC avc: denied { perfmon } for pid=2263 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.533000 audit[2263]: AVC avc: denied { perfmon } for pid=2263 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.533000 audit[2263]: AVC avc: denied { bpf } for pid=2263 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.533000 audit[2263]: AVC avc: denied { bpf } for pid=2263 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.533000 audit: BPF prog-id=76 op=LOAD May 17 00:38:40.533000 audit[2263]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c000349cd0 items=0 ppid=2248 pid=2263 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:38:40.533000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6464643533303662343032343233366530383365366632666132343666 May 17 00:38:40.534000 audit[2263]: AVC avc: denied { bpf } for pid=2263 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.534000 audit[2263]: AVC avc: denied { bpf } for pid=2263 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.534000 audit[2263]: AVC avc: denied { perfmon } for pid=2263 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.534000 audit[2263]: AVC avc: denied { perfmon } for pid=2263 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.534000 audit[2263]: AVC avc: denied { perfmon } for pid=2263 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.534000 audit[2263]: AVC avc: denied { perfmon } for pid=2263 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.534000 audit[2263]: AVC avc: denied { perfmon } for pid=2263 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.534000 audit[2263]: AVC avc: denied { bpf } for pid=2263 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.534000 audit[2263]: AVC avc: denied { bpf } for pid=2263 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.534000 audit: BPF prog-id=77 op=LOAD May 17 00:38:40.534000 audit[2263]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c000349d18 items=0 ppid=2248 pid=2263 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:38:40.534000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6464643533303662343032343233366530383365366632666132343666 May 17 00:38:40.535000 audit: BPF prog-id=77 op=UNLOAD May 17 00:38:40.535000 audit: BPF prog-id=76 op=UNLOAD May 17 00:38:40.535000 audit[2263]: AVC avc: denied { bpf } for pid=2263 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.535000 audit[2263]: AVC avc: denied { bpf } for pid=2263 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.535000 audit[2263]: AVC avc: denied { bpf } for pid=2263 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.535000 audit[2263]: AVC avc: denied { perfmon } for pid=2263 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.535000 audit[2263]: AVC avc: denied { perfmon } for pid=2263 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.535000 audit[2263]: AVC avc: denied { perfmon } for pid=2263 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.535000 audit[2263]: AVC avc: denied { perfmon } for pid=2263 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.535000 audit[2263]: AVC avc: denied { perfmon } for pid=2263 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.535000 audit[2263]: AVC avc: denied { bpf } for pid=2263 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.535000 audit[2263]: AVC avc: denied { bpf } for pid=2263 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.535000 audit: BPF prog-id=78 op=LOAD May 17 00:38:40.535000 audit[2263]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c0003d6128 items=0 ppid=2248 pid=2263 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:38:40.535000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6464643533303662343032343233366530383365366632666132343666 May 17 00:38:40.551012 env[1634]: time="2025-05-17T00:38:40.550967518Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-ip-172-31-30-240,Uid:9a0f07f34260120a2430eccefa9b32ed,Namespace:kube-system,Attempt:0,} returns sandbox id \"63154f6493986e987e02c90a2b8435f3835f87106831088e8cb9a6dda2f7bddd\"" May 17 00:38:40.557091 env[1634]: time="2025-05-17T00:38:40.557053298Z" level=info msg="CreateContainer within sandbox \"63154f6493986e987e02c90a2b8435f3835f87106831088e8cb9a6dda2f7bddd\" for container &ContainerMetadata{Name:kube-apiserver,Attempt:0,}" May 17 00:38:40.574631 env[1634]: time="2025-05-17T00:38:40.574590092Z" level=info msg="CreateContainer within sandbox \"4a5f3fed77bf8731532a7194c09d9bc646d7ccf15f8b9a169b532b919ed9fc2c\" for &ContainerMetadata{Name:kube-scheduler,Attempt:0,} returns container id \"d3f6de2666252f3f9669ba58bd99c55564b69b0fbbf03f9de4919f2fcf964c42\"" May 17 00:38:40.575984 env[1634]: time="2025-05-17T00:38:40.575941083Z" level=info msg="StartContainer for \"d3f6de2666252f3f9669ba58bd99c55564b69b0fbbf03f9de4919f2fcf964c42\"" May 17 00:38:40.577370 env[1634]: time="2025-05-17T00:38:40.577343141Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-ip-172-31-30-240,Uid:f93a1c7e886b7fc4a0eb1c29e6545cdb,Namespace:kube-system,Attempt:0,} returns sandbox id \"ddd5306b4024236e083e6f2fa246f4ba8900d0ba8f2138bbdeda57dbc45e5ff3\"" May 17 00:38:40.581813 kubelet[2153]: E0517 00:38:40.581756 2153 reflector.go:200] "Failed to watch" err="failed to list *v1.Node: Get \"https://172.31.30.240:6443/api/v1/nodes?fieldSelector=metadata.name%3Dip-172-31-30-240&limit=500&resourceVersion=0\": dial tcp 172.31.30.240:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.Node" May 17 00:38:40.584494 env[1634]: time="2025-05-17T00:38:40.584458146Z" level=info msg="CreateContainer within sandbox \"ddd5306b4024236e083e6f2fa246f4ba8900d0ba8f2138bbdeda57dbc45e5ff3\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:0,}" May 17 00:38:40.599419 env[1634]: time="2025-05-17T00:38:40.599359758Z" level=info msg="CreateContainer within sandbox \"63154f6493986e987e02c90a2b8435f3835f87106831088e8cb9a6dda2f7bddd\" for &ContainerMetadata{Name:kube-apiserver,Attempt:0,} returns container id \"5124703db3e676773acd05a302cff23bf63b5ff8b5d99f2f77593a1afc5faf4a\"" May 17 00:38:40.600335 env[1634]: time="2025-05-17T00:38:40.600295224Z" level=info msg="StartContainer for \"5124703db3e676773acd05a302cff23bf63b5ff8b5d99f2f77593a1afc5faf4a\"" May 17 00:38:40.604963 systemd[1]: Started cri-containerd-d3f6de2666252f3f9669ba58bd99c55564b69b0fbbf03f9de4919f2fcf964c42.scope. May 17 00:38:40.625000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.625000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.625000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.625000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.625000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.625000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.625000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.625000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.625000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.625000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.625000 audit: BPF prog-id=79 op=LOAD May 17 00:38:40.627000 audit[2323]: AVC avc: denied { bpf } for pid=2323 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.627000 audit[2323]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000215c48 a2=10 a3=1c items=0 ppid=2197 pid=2323 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:38:40.627000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6433663664653236363632353266336639363639626135386264393963 May 17 00:38:40.627000 audit[2323]: AVC avc: denied { perfmon } for pid=2323 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.627000 audit[2323]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0002156b0 a2=3c a3=8 items=0 ppid=2197 pid=2323 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:38:40.627000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6433663664653236363632353266336639363639626135386264393963 May 17 00:38:40.627000 audit[2323]: AVC avc: denied { bpf } for pid=2323 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.627000 audit[2323]: AVC avc: denied { bpf } for pid=2323 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.627000 audit[2323]: AVC avc: denied { bpf } for pid=2323 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.627000 audit[2323]: AVC avc: denied { perfmon } for pid=2323 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.627000 audit[2323]: AVC avc: denied { perfmon } for pid=2323 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.627000 audit[2323]: AVC avc: denied { perfmon } for pid=2323 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.627000 audit[2323]: AVC avc: denied { perfmon } for pid=2323 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.627000 audit[2323]: AVC avc: denied { perfmon } for pid=2323 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.627000 audit[2323]: AVC avc: denied { bpf } for pid=2323 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.627000 audit[2323]: AVC avc: denied { bpf } for pid=2323 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.627000 audit: BPF prog-id=80 op=LOAD May 17 00:38:40.627000 audit[2323]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0002159d8 a2=78 a3=c00039ef30 items=0 ppid=2197 pid=2323 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:38:40.627000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6433663664653236363632353266336639363639626135386264393963 May 17 00:38:40.628000 audit[2323]: AVC avc: denied { bpf } for pid=2323 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.628000 audit[2323]: AVC avc: denied { bpf } for pid=2323 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.628000 audit[2323]: AVC avc: denied { perfmon } for pid=2323 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.628000 audit[2323]: AVC avc: denied { perfmon } for pid=2323 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.628000 audit[2323]: AVC avc: denied { perfmon } for pid=2323 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.628000 audit[2323]: AVC avc: denied { perfmon } for pid=2323 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.628000 audit[2323]: AVC avc: denied { perfmon } for pid=2323 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.628000 audit[2323]: AVC avc: denied { bpf } for pid=2323 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.628000 audit[2323]: AVC avc: denied { bpf } for pid=2323 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.628000 audit: BPF prog-id=81 op=LOAD May 17 00:38:40.628000 audit[2323]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000215770 a2=78 a3=c00039ef78 items=0 ppid=2197 pid=2323 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:38:40.628000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6433663664653236363632353266336639363639626135386264393963 May 17 00:38:40.629000 audit: BPF prog-id=81 op=UNLOAD May 17 00:38:40.629000 audit: BPF prog-id=80 op=UNLOAD May 17 00:38:40.629000 audit[2323]: AVC avc: denied { bpf } for pid=2323 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.629000 audit[2323]: AVC avc: denied { bpf } for pid=2323 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.629000 audit[2323]: AVC avc: denied { bpf } for pid=2323 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.629000 audit[2323]: AVC avc: denied { perfmon } for pid=2323 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.629000 audit[2323]: AVC avc: denied { perfmon } for pid=2323 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.629000 audit[2323]: AVC avc: denied { perfmon } for pid=2323 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.629000 audit[2323]: AVC avc: denied { perfmon } for pid=2323 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.629000 audit[2323]: AVC avc: denied { perfmon } for pid=2323 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.629000 audit[2323]: AVC avc: denied { bpf } for pid=2323 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.629000 audit[2323]: AVC avc: denied { bpf } for pid=2323 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.629000 audit: BPF prog-id=82 op=LOAD May 17 00:38:40.629000 audit[2323]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000215c30 a2=78 a3=c00039f388 items=0 ppid=2197 pid=2323 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:38:40.629000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6433663664653236363632353266336639363639626135386264393963 May 17 00:38:40.634020 env[1634]: time="2025-05-17T00:38:40.633972921Z" level=info msg="CreateContainer within sandbox \"ddd5306b4024236e083e6f2fa246f4ba8900d0ba8f2138bbdeda57dbc45e5ff3\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:0,} returns container id \"c2bdd09449cb0f71eb6711a0eb9478d45cfa10020383168e3e28b11840c63290\"" May 17 00:38:40.634914 env[1634]: time="2025-05-17T00:38:40.634874241Z" level=info msg="StartContainer for \"c2bdd09449cb0f71eb6711a0eb9478d45cfa10020383168e3e28b11840c63290\"" May 17 00:38:40.650897 systemd[1]: Started cri-containerd-5124703db3e676773acd05a302cff23bf63b5ff8b5d99f2f77593a1afc5faf4a.scope. May 17 00:38:40.675308 systemd[1]: Started cri-containerd-c2bdd09449cb0f71eb6711a0eb9478d45cfa10020383168e3e28b11840c63290.scope. May 17 00:38:40.690917 kubelet[2153]: E0517 00:38:40.690388 2153 reflector.go:200] "Failed to watch" err="failed to list *v1.RuntimeClass: Get \"https://172.31.30.240:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0\": dial tcp 172.31.30.240:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.RuntimeClass" May 17 00:38:40.695000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.695000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.695000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.695000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.695000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.695000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.695000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.695000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.695000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.695000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.695000 audit: BPF prog-id=83 op=LOAD May 17 00:38:40.699000 audit[2347]: AVC avc: denied { bpf } for pid=2347 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.699000 audit[2347]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=2221 pid=2347 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:38:40.699000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3531323437303364623365363736373733616364303561333032636666 May 17 00:38:40.699000 audit[2347]: AVC avc: denied { perfmon } for pid=2347 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.699000 audit[2347]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=2221 pid=2347 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:38:40.699000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3531323437303364623365363736373733616364303561333032636666 May 17 00:38:40.699000 audit[2347]: AVC avc: denied { bpf } for pid=2347 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.699000 audit[2347]: AVC avc: denied { bpf } for pid=2347 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.699000 audit[2347]: AVC avc: denied { bpf } for pid=2347 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.699000 audit[2347]: AVC avc: denied { perfmon } for pid=2347 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.699000 audit[2347]: AVC avc: denied { perfmon } for pid=2347 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.699000 audit[2347]: AVC avc: denied { perfmon } for pid=2347 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.699000 audit[2347]: AVC avc: denied { perfmon } for pid=2347 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.699000 audit[2347]: AVC avc: denied { perfmon } for pid=2347 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.699000 audit[2347]: AVC avc: denied { bpf } for pid=2347 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.699000 audit[2347]: AVC avc: denied { bpf } for pid=2347 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.699000 audit: BPF prog-id=84 op=LOAD May 17 00:38:40.699000 audit[2347]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0003e2850 items=0 ppid=2221 pid=2347 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:38:40.699000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3531323437303364623365363736373733616364303561333032636666 May 17 00:38:40.700000 audit[2347]: AVC avc: denied { bpf } for pid=2347 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.700000 audit[2347]: AVC avc: denied { bpf } for pid=2347 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.700000 audit[2347]: AVC avc: denied { perfmon } for pid=2347 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.700000 audit[2347]: AVC avc: denied { perfmon } for pid=2347 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.700000 audit[2347]: AVC avc: denied { perfmon } for pid=2347 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.700000 audit[2347]: AVC avc: denied { perfmon } for pid=2347 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.700000 audit[2347]: AVC avc: denied { perfmon } for pid=2347 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.700000 audit[2347]: AVC avc: denied { bpf } for pid=2347 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.700000 audit[2347]: AVC avc: denied { bpf } for pid=2347 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.700000 audit: BPF prog-id=85 op=LOAD May 17 00:38:40.700000 audit[2347]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0003e2898 items=0 ppid=2221 pid=2347 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:38:40.700000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3531323437303364623365363736373733616364303561333032636666 May 17 00:38:40.700000 audit: BPF prog-id=85 op=UNLOAD May 17 00:38:40.700000 audit: BPF prog-id=84 op=UNLOAD May 17 00:38:40.700000 audit[2347]: AVC avc: denied { bpf } for pid=2347 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.700000 audit[2347]: AVC avc: denied { bpf } for pid=2347 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.700000 audit[2347]: AVC avc: denied { bpf } for pid=2347 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.700000 audit[2347]: AVC avc: denied { perfmon } for pid=2347 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.700000 audit[2347]: AVC avc: denied { perfmon } for pid=2347 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.700000 audit[2347]: AVC avc: denied { perfmon } for pid=2347 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.700000 audit[2347]: AVC avc: denied { perfmon } for pid=2347 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.700000 audit[2347]: AVC avc: denied { perfmon } for pid=2347 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.700000 audit[2347]: AVC avc: denied { bpf } for pid=2347 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.700000 audit[2347]: AVC avc: denied { bpf } for pid=2347 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.700000 audit: BPF prog-id=86 op=LOAD May 17 00:38:40.700000 audit[2347]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0003e2ca8 items=0 ppid=2221 pid=2347 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:38:40.700000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3531323437303364623365363736373733616364303561333032636666 May 17 00:38:40.719000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.720000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.720000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.720000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.720000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.720000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.720000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.720000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.720000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.720000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.720000 audit: BPF prog-id=87 op=LOAD May 17 00:38:40.721000 audit[2364]: AVC avc: denied { bpf } for pid=2364 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.721000 audit[2364]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=2248 pid=2364 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:38:40.721000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6332626464303934343963623066373165623637313161306562393437 May 17 00:38:40.721000 audit[2364]: AVC avc: denied { perfmon } for pid=2364 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.721000 audit[2364]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=8 items=0 ppid=2248 pid=2364 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:38:40.721000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6332626464303934343963623066373165623637313161306562393437 May 17 00:38:40.722000 audit[2364]: AVC avc: denied { bpf } for pid=2364 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.722000 audit[2364]: AVC avc: denied { bpf } for pid=2364 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.722000 audit[2364]: AVC avc: denied { bpf } for pid=2364 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.722000 audit[2364]: AVC avc: denied { perfmon } for pid=2364 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.722000 audit[2364]: AVC avc: denied { perfmon } for pid=2364 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.722000 audit[2364]: AVC avc: denied { perfmon } for pid=2364 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.722000 audit[2364]: AVC avc: denied { perfmon } for pid=2364 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.722000 audit[2364]: AVC avc: denied { perfmon } for pid=2364 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.722000 audit[2364]: AVC avc: denied { bpf } for pid=2364 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.722000 audit[2364]: AVC avc: denied { bpf } for pid=2364 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.722000 audit: BPF prog-id=88 op=LOAD May 17 00:38:40.722000 audit[2364]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c0001a9390 items=0 ppid=2248 pid=2364 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:38:40.722000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6332626464303934343963623066373165623637313161306562393437 May 17 00:38:40.723000 audit[2364]: AVC avc: denied { bpf } for pid=2364 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.723000 audit[2364]: AVC avc: denied { bpf } for pid=2364 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.723000 audit[2364]: AVC avc: denied { perfmon } for pid=2364 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.723000 audit[2364]: AVC avc: denied { perfmon } for pid=2364 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.723000 audit[2364]: AVC avc: denied { perfmon } for pid=2364 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.723000 audit[2364]: AVC avc: denied { perfmon } for pid=2364 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.723000 audit[2364]: AVC avc: denied { perfmon } for pid=2364 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.723000 audit[2364]: AVC avc: denied { bpf } for pid=2364 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.723000 audit[2364]: AVC avc: denied { bpf } for pid=2364 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.723000 audit: BPF prog-id=89 op=LOAD May 17 00:38:40.723000 audit[2364]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c0001a93d8 items=0 ppid=2248 pid=2364 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:38:40.723000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6332626464303934343963623066373165623637313161306562393437 May 17 00:38:40.723000 audit: BPF prog-id=89 op=UNLOAD May 17 00:38:40.723000 audit: BPF prog-id=88 op=UNLOAD May 17 00:38:40.723000 audit[2364]: AVC avc: denied { bpf } for pid=2364 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.723000 audit[2364]: AVC avc: denied { bpf } for pid=2364 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.723000 audit[2364]: AVC avc: denied { bpf } for pid=2364 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.723000 audit[2364]: AVC avc: denied { perfmon } for pid=2364 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.723000 audit[2364]: AVC avc: denied { perfmon } for pid=2364 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.723000 audit[2364]: AVC avc: denied { perfmon } for pid=2364 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.723000 audit[2364]: AVC avc: denied { perfmon } for pid=2364 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.723000 audit[2364]: AVC avc: denied { perfmon } for pid=2364 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.723000 audit[2364]: AVC avc: denied { bpf } for pid=2364 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.723000 audit[2364]: AVC avc: denied { bpf } for pid=2364 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:40.723000 audit: BPF prog-id=90 op=LOAD May 17 00:38:40.723000 audit[2364]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c0001a97e8 items=0 ppid=2248 pid=2364 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:38:40.723000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6332626464303934343963623066373165623637313161306562393437 May 17 00:38:40.735891 env[1634]: time="2025-05-17T00:38:40.735831747Z" level=info msg="StartContainer for \"d3f6de2666252f3f9669ba58bd99c55564b69b0fbbf03f9de4919f2fcf964c42\" returns successfully" May 17 00:38:40.764295 env[1634]: time="2025-05-17T00:38:40.764238729Z" level=info msg="StartContainer for \"5124703db3e676773acd05a302cff23bf63b5ff8b5d99f2f77593a1afc5faf4a\" returns successfully" May 17 00:38:40.792549 env[1634]: time="2025-05-17T00:38:40.792493833Z" level=info msg="StartContainer for \"c2bdd09449cb0f71eb6711a0eb9478d45cfa10020383168e3e28b11840c63290\" returns successfully" May 17 00:38:40.812661 kubelet[2153]: E0517 00:38:40.812610 2153 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://172.31.30.240:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-30-240?timeout=10s\": dial tcp 172.31.30.240:6443: connect: connection refused" interval="1.6s" May 17 00:38:40.819226 kubelet[2153]: E0517 00:38:40.819177 2153 reflector.go:200] "Failed to watch" err="failed to list *v1.CSIDriver: Get \"https://172.31.30.240:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0\": dial tcp 172.31.30.240:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.CSIDriver" May 17 00:38:40.953920 kubelet[2153]: I0517 00:38:40.953820 2153 kubelet_node_status.go:75] "Attempting to register node" node="ip-172-31-30-240" May 17 00:38:40.954240 kubelet[2153]: E0517 00:38:40.954212 2153 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://172.31.30.240:6443/api/v1/nodes\": dial tcp 172.31.30.240:6443: connect: connection refused" node="ip-172-31-30-240" May 17 00:38:41.357759 kubelet[2153]: E0517 00:38:41.357639 2153 certificate_manager.go:596] "Failed while requesting a signed certificate from the control plane" err="cannot create certificate signing request: Post \"https://172.31.30.240:6443/apis/certificates.k8s.io/v1/certificatesigningrequests\": dial tcp 172.31.30.240:6443: connect: connection refused" logger="kubernetes.io/kube-apiserver-client-kubelet.UnhandledError" May 17 00:38:41.419242 kubelet[2153]: E0517 00:38:41.419210 2153 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ip-172-31-30-240\" not found" node="ip-172-31-30-240" May 17 00:38:41.421790 kubelet[2153]: E0517 00:38:41.421746 2153 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ip-172-31-30-240\" not found" node="ip-172-31-30-240" May 17 00:38:41.424201 kubelet[2153]: E0517 00:38:41.424037 2153 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ip-172-31-30-240\" not found" node="ip-172-31-30-240" May 17 00:38:42.426723 kubelet[2153]: E0517 00:38:42.426693 2153 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ip-172-31-30-240\" not found" node="ip-172-31-30-240" May 17 00:38:42.427676 kubelet[2153]: E0517 00:38:42.427654 2153 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ip-172-31-30-240\" not found" node="ip-172-31-30-240" May 17 00:38:42.556409 kubelet[2153]: I0517 00:38:42.556387 2153 kubelet_node_status.go:75] "Attempting to register node" node="ip-172-31-30-240" May 17 00:38:43.320000 audit[2384]: AVC avc: denied { watch } for pid=2384 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c777,c806 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 May 17 00:38:43.323592 kernel: kauditd_printk_skb: 747 callbacks suppressed May 17 00:38:43.323725 kernel: audit: type=1400 audit(1747442323.320:511): avc: denied { watch } for pid=2384 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c777,c806 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 May 17 00:38:43.320000 audit[2384]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6 a1=c0003ea6e0 a2=fc6 a3=0 items=0 ppid=2248 pid=2384 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c777,c806 key=(null) May 17 00:38:43.348802 kernel: audit: type=1300 audit(1747442323.320:511): arch=c000003e syscall=254 success=no exit=-13 a0=6 a1=c0003ea6e0 a2=fc6 a3=0 items=0 ppid=2248 pid=2384 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c777,c806 key=(null) May 17 00:38:43.320000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 May 17 00:38:43.359693 kernel: audit: type=1327 audit(1747442323.320:511): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 May 17 00:38:43.347000 audit[2384]: AVC avc: denied { watch } for pid=2384 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520978 scontext=system_u:system_r:svirt_lxc_net_t:s0:c777,c806 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 May 17 00:38:43.379732 kernel: audit: type=1400 audit(1747442323.347:512): avc: denied { watch } for pid=2384 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520978 scontext=system_u:system_r:svirt_lxc_net_t:s0:c777,c806 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 May 17 00:38:43.379892 kernel: audit: type=1300 audit(1747442323.347:512): arch=c000003e syscall=254 success=no exit=-13 a0=6 a1=c0005b6870 a2=fc6 a3=0 items=0 ppid=2248 pid=2384 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c777,c806 key=(null) May 17 00:38:43.347000 audit[2384]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6 a1=c0005b6870 a2=fc6 a3=0 items=0 ppid=2248 pid=2384 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c777,c806 key=(null) May 17 00:38:43.347000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 May 17 00:38:43.392792 kernel: audit: type=1327 audit(1747442323.347:512): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 May 17 00:38:43.428186 kubelet[2153]: E0517 00:38:43.428151 2153 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"ip-172-31-30-240\" not found" node="ip-172-31-30-240" May 17 00:38:43.792000 audit[2370]: AVC avc: denied { watch } for pid=2370 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520978 scontext=system_u:system_r:svirt_lxc_net_t:s0:c562,c1015 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 May 17 00:38:43.792000 audit[2370]: AVC avc: denied { watch } for pid=2370 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=520974 scontext=system_u:system_r:svirt_lxc_net_t:s0:c562,c1015 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 May 17 00:38:43.809369 kernel: audit: type=1400 audit(1747442323.792:513): avc: denied { watch } for pid=2370 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520978 scontext=system_u:system_r:svirt_lxc_net_t:s0:c562,c1015 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 May 17 00:38:43.809513 kernel: audit: type=1400 audit(1747442323.792:514): avc: denied { watch } for pid=2370 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=520974 scontext=system_u:system_r:svirt_lxc_net_t:s0:c562,c1015 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 May 17 00:38:43.792000 audit[2370]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=42 a1=c004e047b0 a2=fc6 a3=0 items=0 ppid=2221 pid=2370 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c562,c1015 key=(null) May 17 00:38:43.822794 kernel: audit: type=1300 audit(1747442323.792:514): arch=c000003e syscall=254 success=no exit=-13 a0=42 a1=c004e047b0 a2=fc6 a3=0 items=0 ppid=2221 pid=2370 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c562,c1015 key=(null) May 17 00:38:43.792000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E33302E323430002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 May 17 00:38:43.847792 kernel: audit: type=1327 audit(1747442323.792:514): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E33302E323430002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 May 17 00:38:43.792000 audit[2370]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=41 a1=c005832000 a2=fc6 a3=0 items=0 ppid=2221 pid=2370 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c562,c1015 key=(null) May 17 00:38:43.792000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E33302E323430002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 May 17 00:38:43.794000 audit[2370]: AVC avc: denied { watch } for pid=2370 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c562,c1015 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 May 17 00:38:43.794000 audit[2370]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=41 a1=c009256e00 a2=fc6 a3=0 items=0 ppid=2221 pid=2370 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c562,c1015 key=(null) May 17 00:38:43.794000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E33302E323430002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 May 17 00:38:43.805000 audit[2370]: AVC avc: denied { watch } for pid=2370 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=520980 scontext=system_u:system_r:svirt_lxc_net_t:s0:c562,c1015 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 May 17 00:38:43.805000 audit[2370]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4e a1=c0058327b0 a2=fc6 a3=0 items=0 ppid=2221 pid=2370 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c562,c1015 key=(null) May 17 00:38:43.805000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E33302E323430002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 May 17 00:38:43.829000 audit[2370]: AVC avc: denied { watch } for pid=2370 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c562,c1015 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 May 17 00:38:43.829000 audit[2370]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=82 a1=c009257da0 a2=fc6 a3=0 items=0 ppid=2221 pid=2370 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c562,c1015 key=(null) May 17 00:38:43.829000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E33302E323430002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 May 17 00:38:43.829000 audit[2370]: AVC avc: denied { watch } for pid=2370 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520978 scontext=system_u:system_r:svirt_lxc_net_t:s0:c562,c1015 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 May 17 00:38:43.829000 audit[2370]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=82 a1=c006501ce0 a2=fc6 a3=0 items=0 ppid=2221 pid=2370 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c562,c1015 key=(null) May 17 00:38:43.829000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E33302E323430002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 May 17 00:38:43.973821 kubelet[2153]: E0517 00:38:43.973787 2153 nodelease.go:49] "Failed to get node when trying to set owner ref to the node lease" err="nodes \"ip-172-31-30-240\" not found" node="ip-172-31-30-240" May 17 00:38:44.078813 kubelet[2153]: I0517 00:38:44.078557 2153 kubelet_node_status.go:78] "Successfully registered node" node="ip-172-31-30-240" May 17 00:38:44.078813 kubelet[2153]: E0517 00:38:44.078596 2153 kubelet_node_status.go:548] "Error updating node status, will retry" err="error getting node \"ip-172-31-30-240\": node \"ip-172-31-30-240\" not found" May 17 00:38:44.085388 kubelet[2153]: I0517 00:38:44.084803 2153 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-apiserver-ip-172-31-30-240" May 17 00:38:44.098863 kubelet[2153]: E0517 00:38:44.098831 2153 kubelet.go:3311] "Failed creating a mirror pod" err="pods \"kube-apiserver-ip-172-31-30-240\" is forbidden: no PriorityClass with name system-node-critical was found" pod="kube-system/kube-apiserver-ip-172-31-30-240" May 17 00:38:44.098863 kubelet[2153]: I0517 00:38:44.098862 2153 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-controller-manager-ip-172-31-30-240" May 17 00:38:44.100516 kubelet[2153]: E0517 00:38:44.100484 2153 kubelet.go:3311] "Failed creating a mirror pod" err="pods \"kube-controller-manager-ip-172-31-30-240\" is forbidden: no PriorityClass with name system-node-critical was found" pod="kube-system/kube-controller-manager-ip-172-31-30-240" May 17 00:38:44.100516 kubelet[2153]: I0517 00:38:44.100514 2153 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-scheduler-ip-172-31-30-240" May 17 00:38:44.102104 kubelet[2153]: E0517 00:38:44.102071 2153 kubelet.go:3311] "Failed creating a mirror pod" err="pods \"kube-scheduler-ip-172-31-30-240\" is forbidden: no PriorityClass with name system-node-critical was found" pod="kube-system/kube-scheduler-ip-172-31-30-240" May 17 00:38:44.253891 systemd[1]: systemd-hostnamed.service: Deactivated successfully. May 17 00:38:44.253000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:38:44.278000 audit: BPF prog-id=58 op=UNLOAD May 17 00:38:44.278000 audit: BPF prog-id=57 op=UNLOAD May 17 00:38:44.278000 audit: BPF prog-id=56 op=UNLOAD May 17 00:38:44.359670 kubelet[2153]: I0517 00:38:44.359558 2153 apiserver.go:52] "Watching apiserver" May 17 00:38:44.381099 kubelet[2153]: I0517 00:38:44.381048 2153 desired_state_of_world_populator.go:158] "Finished populating initial desired state of world" May 17 00:38:46.031022 systemd[1]: Reloading. May 17 00:38:46.142669 /usr/lib/systemd/system-generators/torcx-generator[2455]: time="2025-05-17T00:38:46Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.7 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.7 /var/lib/torcx/store]" May 17 00:38:46.143206 /usr/lib/systemd/system-generators/torcx-generator[2455]: time="2025-05-17T00:38:46Z" level=info msg="torcx already run" May 17 00:38:46.258804 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. May 17 00:38:46.258829 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. May 17 00:38:46.298429 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. May 17 00:38:46.458000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:46.458000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:46.459000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:46.459000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:46.459000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:46.459000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:46.459000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:46.459000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:46.459000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:46.460000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:46.460000 audit: BPF prog-id=91 op=LOAD May 17 00:38:46.460000 audit: BPF prog-id=49 op=UNLOAD May 17 00:38:46.462000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:46.462000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:46.462000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:46.462000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:46.462000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:46.462000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:46.462000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:46.462000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:46.462000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:46.463000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:46.463000 audit: BPF prog-id=92 op=LOAD May 17 00:38:46.463000 audit: BPF prog-id=50 op=UNLOAD May 17 00:38:46.463000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:46.463000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:46.463000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:46.463000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:46.463000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:46.463000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:46.463000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:46.463000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:46.465000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:46.465000 audit: BPF prog-id=93 op=LOAD May 17 00:38:46.465000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:46.466000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:46.466000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:46.466000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:46.466000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:46.466000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:46.466000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:46.466000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:46.466000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:46.466000 audit: BPF prog-id=94 op=LOAD May 17 00:38:46.467000 audit: BPF prog-id=51 op=UNLOAD May 17 00:38:46.467000 audit: BPF prog-id=52 op=UNLOAD May 17 00:38:46.467000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:46.467000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:46.467000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:46.467000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:46.467000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:46.467000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:46.467000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:46.467000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:46.467000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:46.467000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:46.467000 audit: BPF prog-id=95 op=LOAD May 17 00:38:46.467000 audit: BPF prog-id=83 op=UNLOAD May 17 00:38:46.468000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:46.468000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:46.468000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:46.468000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:46.468000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:46.468000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:46.468000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:46.468000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:46.468000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:46.468000 audit: BPF prog-id=96 op=LOAD May 17 00:38:46.468000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:46.468000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:46.468000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:46.468000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:46.468000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:46.468000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:46.468000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:46.468000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:46.468000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:46.468000 audit: BPF prog-id=97 op=LOAD May 17 00:38:46.468000 audit: BPF prog-id=53 op=UNLOAD May 17 00:38:46.468000 audit: BPF prog-id=54 op=UNLOAD May 17 00:38:46.469000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:46.469000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:46.469000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:46.469000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:46.469000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:46.469000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:46.469000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:46.469000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:46.469000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:46.469000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:46.469000 audit: BPF prog-id=98 op=LOAD May 17 00:38:46.469000 audit: BPF prog-id=79 op=UNLOAD May 17 00:38:46.470000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:46.470000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:46.470000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:46.470000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:46.470000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:46.470000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:46.470000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:46.470000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:46.470000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:46.470000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:46.470000 audit: BPF prog-id=99 op=LOAD May 17 00:38:46.470000 audit: BPF prog-id=67 op=UNLOAD May 17 00:38:46.471000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:46.471000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:46.471000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:46.471000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:46.471000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:46.471000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:46.471000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:46.471000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:46.471000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:46.471000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:46.471000 audit: BPF prog-id=100 op=LOAD May 17 00:38:46.471000 audit: BPF prog-id=55 op=UNLOAD May 17 00:38:46.472000 audit[2384]: AVC avc: denied { watch } for pid=2384 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c777,c806 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 May 17 00:38:46.473000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:46.473000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:46.473000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:46.473000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:46.473000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:46.473000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:46.473000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:46.473000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:46.473000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:46.474000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:46.474000 audit: BPF prog-id=101 op=LOAD May 17 00:38:46.474000 audit: BPF prog-id=71 op=UNLOAD May 17 00:38:46.474000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:46.474000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:46.474000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:46.474000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:46.474000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:46.474000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:46.474000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:46.474000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:46.474000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:46.475000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:46.475000 audit: BPF prog-id=102 op=LOAD May 17 00:38:46.475000 audit: BPF prog-id=75 op=UNLOAD May 17 00:38:46.476000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:46.476000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:46.476000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:46.476000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:46.476000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:46.476000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:46.476000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:46.476000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:46.476000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:46.476000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:46.476000 audit: BPF prog-id=103 op=LOAD May 17 00:38:46.476000 audit: BPF prog-id=59 op=UNLOAD May 17 00:38:46.476000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:46.476000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:46.476000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:46.476000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:46.476000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:46.476000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:46.476000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:46.476000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:46.476000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:46.476000 audit: BPF prog-id=104 op=LOAD May 17 00:38:46.476000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:46.476000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:46.476000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:46.476000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:46.476000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:46.476000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:46.476000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:46.476000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:46.476000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:46.476000 audit: BPF prog-id=105 op=LOAD May 17 00:38:46.476000 audit: BPF prog-id=60 op=UNLOAD May 17 00:38:46.472000 audit[2384]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c000d6bc80 a2=fc6 a3=0 items=0 ppid=2248 pid=2384 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c777,c806 key=(null) May 17 00:38:46.476000 audit: BPF prog-id=61 op=UNLOAD May 17 00:38:46.472000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 May 17 00:38:46.478000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:46.478000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:46.478000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:46.478000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:46.478000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:46.478000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:46.478000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:46.478000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:46.478000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:46.478000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:46.478000 audit: BPF prog-id=106 op=LOAD May 17 00:38:46.478000 audit: BPF prog-id=62 op=UNLOAD May 17 00:38:46.478000 audit[2384]: AVC avc: denied { watch } for pid=2384 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c777,c806 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 May 17 00:38:46.478000 audit[2384]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6 a1=c000d6be40 a2=fc6 a3=0 items=0 ppid=2248 pid=2384 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c777,c806 key=(null) May 17 00:38:46.478000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 May 17 00:38:46.478000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:46.478000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:46.478000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:46.478000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:46.478000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:46.478000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:46.478000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:46.478000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:46.478000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:46.478000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:46.478000 audit: BPF prog-id=107 op=LOAD May 17 00:38:46.478000 audit: BPF prog-id=87 op=UNLOAD May 17 00:38:46.479000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:46.479000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:46.479000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:46.479000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:46.479000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:46.479000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:46.479000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:46.479000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:46.479000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:46.479000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:46.479000 audit: BPF prog-id=108 op=LOAD May 17 00:38:46.479000 audit: BPF prog-id=63 op=UNLOAD May 17 00:38:46.479000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:46.479000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:46.479000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:46.479000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:46.479000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:46.479000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:46.479000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:46.479000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:46.479000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:46.479000 audit: BPF prog-id=109 op=LOAD May 17 00:38:46.479000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:46.479000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:46.479000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:46.479000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:46.479000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:46.479000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:46.479000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:46.479000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:46.479000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:46.479000 audit: BPF prog-id=110 op=LOAD May 17 00:38:46.479000 audit: BPF prog-id=64 op=UNLOAD May 17 00:38:46.479000 audit: BPF prog-id=65 op=UNLOAD May 17 00:38:46.483000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:46.483000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:46.483000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:46.483000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:46.483000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:46.483000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:46.483000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:46.483000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:46.483000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:46.483000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:46.483000 audit: BPF prog-id=111 op=LOAD May 17 00:38:46.483000 audit: BPF prog-id=66 op=UNLOAD May 17 00:38:46.484000 audit[2384]: AVC avc: denied { watch } for pid=2384 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c777,c806 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 May 17 00:38:46.484000 audit[2384]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6 a1=c00040e000 a2=fc6 a3=0 items=0 ppid=2248 pid=2384 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c777,c806 key=(null) May 17 00:38:46.484000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 May 17 00:38:46.493000 audit[2384]: AVC avc: denied { watch } for pid=2384 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c777,c806 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 May 17 00:38:46.493000 audit[2384]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6 a1=c0004e47e0 a2=fc6 a3=0 items=0 ppid=2248 pid=2384 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c777,c806 key=(null) May 17 00:38:46.493000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 May 17 00:38:46.508439 systemd[1]: Stopping kubelet.service... May 17 00:38:46.539253 systemd[1]: kubelet.service: Deactivated successfully. May 17 00:38:46.539495 systemd[1]: Stopped kubelet.service. May 17 00:38:46.539583 systemd[1]: kubelet.service: Consumed 1.193s CPU time. May 17 00:38:46.538000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:38:46.542103 systemd[1]: Starting kubelet.service... May 17 00:38:46.694000 audit[2384]: AVC avc: denied { watch } for pid=2384 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="nvme0n1p9" ino=521005 scontext=system_u:system_r:svirt_lxc_net_t:s0:c777,c806 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 May 17 00:38:46.694000 audit[2384]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c000489fc0 a2=fc6 a3=0 items=0 ppid=2248 pid=2384 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c777,c806 key=(null) May 17 00:38:46.694000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 May 17 00:38:48.107000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:38:48.107945 systemd[1]: Started kubelet.service. May 17 00:38:48.211158 kubelet[2516]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. May 17 00:38:48.211538 kubelet[2516]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.35. Image garbage collector will get sandbox image information from CRI. May 17 00:38:48.211585 kubelet[2516]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. May 17 00:38:48.211717 kubelet[2516]: I0517 00:38:48.211697 2516 server.go:212] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" May 17 00:38:48.225046 kubelet[2516]: I0517 00:38:48.225011 2516 server.go:530] "Kubelet version" kubeletVersion="v1.33.0" May 17 00:38:48.225198 kubelet[2516]: I0517 00:38:48.225189 2516 server.go:532] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" May 17 00:38:48.225542 kubelet[2516]: I0517 00:38:48.225530 2516 server.go:956] "Client rotation is on, will bootstrap in background" May 17 00:38:48.226718 kubelet[2516]: I0517 00:38:48.226698 2516 certificate_store.go:147] "Loading cert/key pair from a file" filePath="/var/lib/kubelet/pki/kubelet-client-current.pem" May 17 00:38:48.286702 kubelet[2516]: I0517 00:38:48.286670 2516 dynamic_cafile_content.go:161] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" May 17 00:38:48.294992 kubelet[2516]: E0517 00:38:48.294725 2516 log.go:32] "RuntimeConfig from runtime service failed" err="rpc error: code = Unimplemented desc = unknown method RuntimeConfig for service runtime.v1.RuntimeService" May 17 00:38:48.294992 kubelet[2516]: I0517 00:38:48.294995 2516 server.go:1423] "CRI implementation should be updated to support RuntimeConfig when KubeletCgroupDriverFromCRI feature gate has been enabled. Falling back to using cgroupDriver from kubelet config." May 17 00:38:48.297238 kubelet[2516]: I0517 00:38:48.297194 2516 server.go:782] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" May 17 00:38:48.297478 kubelet[2516]: I0517 00:38:48.297380 2516 container_manager_linux.go:267] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] May 17 00:38:48.298502 kubelet[2516]: I0517 00:38:48.297416 2516 container_manager_linux.go:272] "Creating Container Manager object based on Node Config" nodeConfig={"NodeName":"ip-172-31-30-240","RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"MemoryManagerPolicy":"None","MemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null,"CgroupVersion":2} May 17 00:38:48.298502 kubelet[2516]: I0517 00:38:48.297577 2516 topology_manager.go:138] "Creating topology manager with none policy" May 17 00:38:48.298502 kubelet[2516]: I0517 00:38:48.297587 2516 container_manager_linux.go:303] "Creating device plugin manager" May 17 00:38:48.298502 kubelet[2516]: I0517 00:38:48.297628 2516 state_mem.go:36] "Initialized new in-memory state store" May 17 00:38:48.298502 kubelet[2516]: I0517 00:38:48.297748 2516 kubelet.go:480] "Attempting to sync node with API server" May 17 00:38:48.298919 kubelet[2516]: I0517 00:38:48.297758 2516 kubelet.go:375] "Adding static pod path" path="/etc/kubernetes/manifests" May 17 00:38:48.298919 kubelet[2516]: I0517 00:38:48.297798 2516 kubelet.go:386] "Adding apiserver pod source" May 17 00:38:48.298919 kubelet[2516]: I0517 00:38:48.297818 2516 apiserver.go:42] "Waiting for node sync before watching apiserver pods" May 17 00:38:48.304831 kubelet[2516]: I0517 00:38:48.304806 2516 kuberuntime_manager.go:279] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" May 17 00:38:48.327947 kubelet[2516]: I0517 00:38:48.327910 2516 kubelet.go:935] "Not starting ClusterTrustBundle informer because we are in static kubelet mode or the ClusterTrustBundleProjection featuregate is disabled" May 17 00:38:48.338277 kubelet[2516]: I0517 00:38:48.337578 2516 watchdog_linux.go:99] "Systemd watchdog is not enabled" May 17 00:38:48.338691 kubelet[2516]: I0517 00:38:48.338677 2516 server.go:1289] "Started kubelet" May 17 00:38:48.347927 kubelet[2516]: I0517 00:38:48.347880 2516 server.go:180] "Starting to listen" address="0.0.0.0" port=10250 May 17 00:38:48.352848 kubelet[2516]: I0517 00:38:48.352800 2516 server.go:317] "Adding debug handlers to kubelet server" May 17 00:38:48.356000 audit[2516]: AVC avc: denied { mac_admin } for pid=2516 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:48.361408 kernel: kauditd_printk_skb: 279 callbacks suppressed May 17 00:38:48.361624 kernel: audit: type=1400 audit(1747442328.356:774): avc: denied { mac_admin } for pid=2516 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:48.361674 kubelet[2516]: I0517 00:38:48.358848 2516 kubelet.go:1552] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins_registry: invalid argument" May 17 00:38:48.361882 kubelet[2516]: I0517 00:38:48.361850 2516 kubelet.go:1556] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins: invalid argument" May 17 00:38:48.363178 kubelet[2516]: I0517 00:38:48.363154 2516 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" May 17 00:38:48.370837 kernel: audit: type=1401 audit(1747442328.356:774): op=setxattr invalid_context="system_u:object_r:container_file_t:s0" May 17 00:38:48.356000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" May 17 00:38:48.356000 audit[2516]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000687140 a1=c000b0a990 a2=c0006868d0 a3=25 items=0 ppid=1 pid=2516 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:38:48.380261 kernel: audit: type=1300 audit(1747442328.356:774): arch=c000003e syscall=188 success=no exit=-22 a0=c000687140 a1=c000b0a990 a2=c0006868d0 a3=25 items=0 ppid=1 pid=2516 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:38:48.380545 kubelet[2516]: I0517 00:38:48.380471 2516 ratelimit.go:55] "Setting rate limiting for endpoint" service="podresources" qps=100 burstTokens=10 May 17 00:38:48.381007 kubelet[2516]: I0517 00:38:48.380985 2516 server.go:255] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" May 17 00:38:48.356000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 May 17 00:38:48.391796 kernel: audit: type=1327 audit(1747442328.356:774): proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 May 17 00:38:48.393245 kubelet[2516]: I0517 00:38:48.393217 2516 dynamic_serving_content.go:135] "Starting controller" name="kubelet-server-cert-files::/var/lib/kubelet/pki/kubelet.crt::/var/lib/kubelet/pki/kubelet.key" May 17 00:38:48.399082 kubelet[2516]: I0517 00:38:48.397948 2516 volume_manager.go:297] "Starting Kubelet Volume Manager" May 17 00:38:48.399082 kubelet[2516]: I0517 00:38:48.398728 2516 desired_state_of_world_populator.go:150] "Desired state populator starts to run" May 17 00:38:48.399297 kubelet[2516]: I0517 00:38:48.399178 2516 reconciler.go:26] "Reconciler: start to sync state" May 17 00:38:48.361000 audit[2516]: AVC avc: denied { mac_admin } for pid=2516 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:48.413780 kernel: audit: type=1400 audit(1747442328.361:775): avc: denied { mac_admin } for pid=2516 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:48.361000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" May 17 00:38:48.420309 kubelet[2516]: I0517 00:38:48.420283 2516 factory.go:223] Registration of the systemd container factory successfully May 17 00:38:48.420599 kubelet[2516]: I0517 00:38:48.420572 2516 factory.go:221] Registration of the crio container factory failed: Get "http://%2Fvar%2Frun%2Fcrio%2Fcrio.sock/info": dial unix /var/run/crio/crio.sock: connect: no such file or directory May 17 00:38:48.420915 kernel: audit: type=1401 audit(1747442328.361:775): op=setxattr invalid_context="system_u:object_r:container_file_t:s0" May 17 00:38:48.361000 audit[2516]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000bee1c0 a1=c000b0a9a8 a2=c0006871d0 a3=25 items=0 ppid=1 pid=2516 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:38:48.437822 kernel: audit: type=1300 audit(1747442328.361:775): arch=c000003e syscall=188 success=no exit=-22 a0=c000bee1c0 a1=c000b0a9a8 a2=c0006871d0 a3=25 items=0 ppid=1 pid=2516 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:38:48.440695 kubelet[2516]: I0517 00:38:48.440648 2516 kubelet_network_linux.go:49] "Initialized iptables rules." protocol="IPv4" May 17 00:38:48.361000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 May 17 00:38:48.453729 kernel: audit: type=1327 audit(1747442328.361:775): proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 May 17 00:38:48.453968 kubelet[2516]: I0517 00:38:48.452740 2516 kubelet_network_linux.go:49] "Initialized iptables rules." protocol="IPv6" May 17 00:38:48.453968 kubelet[2516]: I0517 00:38:48.452783 2516 status_manager.go:230] "Starting to sync pod status with apiserver" May 17 00:38:48.453968 kubelet[2516]: I0517 00:38:48.452815 2516 watchdog_linux.go:127] "Systemd watchdog is not enabled or the interval is invalid, so health checking will not be started." May 17 00:38:48.453968 kubelet[2516]: I0517 00:38:48.452824 2516 kubelet.go:2436] "Starting kubelet main sync loop" May 17 00:38:48.453968 kubelet[2516]: E0517 00:38:48.452886 2516 kubelet.go:2460] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" May 17 00:38:48.468483 kubelet[2516]: E0517 00:38:48.468446 2516 kubelet.go:1600] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" May 17 00:38:48.469802 kubelet[2516]: I0517 00:38:48.468793 2516 factory.go:223] Registration of the containerd container factory successfully May 17 00:38:48.532736 kubelet[2516]: I0517 00:38:48.532708 2516 cpu_manager.go:221] "Starting CPU manager" policy="none" May 17 00:38:48.532736 kubelet[2516]: I0517 00:38:48.532730 2516 cpu_manager.go:222] "Reconciling" reconcilePeriod="10s" May 17 00:38:48.534373 kubelet[2516]: I0517 00:38:48.532753 2516 state_mem.go:36] "Initialized new in-memory state store" May 17 00:38:48.534373 kubelet[2516]: I0517 00:38:48.533043 2516 state_mem.go:88] "Updated default CPUSet" cpuSet="" May 17 00:38:48.534373 kubelet[2516]: I0517 00:38:48.533059 2516 state_mem.go:96] "Updated CPUSet assignments" assignments={} May 17 00:38:48.534373 kubelet[2516]: I0517 00:38:48.533084 2516 policy_none.go:49] "None policy: Start" May 17 00:38:48.534373 kubelet[2516]: I0517 00:38:48.533098 2516 memory_manager.go:186] "Starting memorymanager" policy="None" May 17 00:38:48.534373 kubelet[2516]: I0517 00:38:48.533113 2516 state_mem.go:35] "Initializing new in-memory state store" May 17 00:38:48.534373 kubelet[2516]: I0517 00:38:48.533305 2516 state_mem.go:75] "Updated machine memory state" May 17 00:38:48.545024 kubelet[2516]: E0517 00:38:48.544989 2516 manager.go:517] "Failed to read data from checkpoint" err="checkpoint is not found" checkpoint="kubelet_internal_checkpoint" May 17 00:38:48.544000 audit[2516]: AVC avc: denied { mac_admin } for pid=2516 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:48.550879 kernel: audit: type=1400 audit(1747442328.544:776): avc: denied { mac_admin } for pid=2516 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:48.544000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" May 17 00:38:48.557326 kernel: audit: type=1401 audit(1747442328.544:776): op=setxattr invalid_context="system_u:object_r:container_file_t:s0" May 17 00:38:48.557752 kubelet[2516]: E0517 00:38:48.557728 2516 kubelet.go:2460] "Skipping pod synchronization" err="container runtime status check may not have completed yet" May 17 00:38:48.544000 audit[2516]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c001057c20 a1=c001095680 a2=c001057bf0 a3=25 items=0 ppid=1 pid=2516 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:38:48.544000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 May 17 00:38:48.558264 kubelet[2516]: E0517 00:38:48.558031 2516 server.go:94] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/device-plugins/: invalid argument" path="/var/lib/kubelet/device-plugins/" May 17 00:38:48.558264 kubelet[2516]: I0517 00:38:48.558228 2516 eviction_manager.go:189] "Eviction manager: starting control loop" May 17 00:38:48.560392 kubelet[2516]: I0517 00:38:48.558250 2516 container_log_manager.go:189] "Initializing container log rotate workers" workers=1 monitorPeriod="10s" May 17 00:38:48.560392 kubelet[2516]: I0517 00:38:48.560065 2516 plugin_manager.go:118] "Starting Kubelet Plugin Manager" May 17 00:38:48.563193 kubelet[2516]: E0517 00:38:48.563171 2516 eviction_manager.go:267] "eviction manager: failed to check if we have separate container filesystem. Ignoring." err="no imagefs label for configured runtime" May 17 00:38:48.667406 kubelet[2516]: I0517 00:38:48.667318 2516 kubelet_node_status.go:75] "Attempting to register node" node="ip-172-31-30-240" May 17 00:38:48.676235 kubelet[2516]: I0517 00:38:48.676200 2516 kubelet_node_status.go:124] "Node was previously registered" node="ip-172-31-30-240" May 17 00:38:48.676404 kubelet[2516]: I0517 00:38:48.676334 2516 kubelet_node_status.go:78] "Successfully registered node" node="ip-172-31-30-240" May 17 00:38:48.759355 kubelet[2516]: I0517 00:38:48.759330 2516 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-scheduler-ip-172-31-30-240" May 17 00:38:48.759587 kubelet[2516]: I0517 00:38:48.759567 2516 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-controller-manager-ip-172-31-30-240" May 17 00:38:48.759759 kubelet[2516]: I0517 00:38:48.759449 2516 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-apiserver-ip-172-31-30-240" May 17 00:38:48.801551 kubelet[2516]: I0517 00:38:48.801517 2516 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/9a0f07f34260120a2430eccefa9b32ed-k8s-certs\") pod \"kube-apiserver-ip-172-31-30-240\" (UID: \"9a0f07f34260120a2430eccefa9b32ed\") " pod="kube-system/kube-apiserver-ip-172-31-30-240" May 17 00:38:48.801765 kubelet[2516]: I0517 00:38:48.801750 2516 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/9a0f07f34260120a2430eccefa9b32ed-usr-share-ca-certificates\") pod \"kube-apiserver-ip-172-31-30-240\" (UID: \"9a0f07f34260120a2430eccefa9b32ed\") " pod="kube-system/kube-apiserver-ip-172-31-30-240" May 17 00:38:48.801948 kubelet[2516]: I0517 00:38:48.801933 2516 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/f93a1c7e886b7fc4a0eb1c29e6545cdb-flexvolume-dir\") pod \"kube-controller-manager-ip-172-31-30-240\" (UID: \"f93a1c7e886b7fc4a0eb1c29e6545cdb\") " pod="kube-system/kube-controller-manager-ip-172-31-30-240" May 17 00:38:48.802062 kubelet[2516]: I0517 00:38:48.802032 2516 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/f93a1c7e886b7fc4a0eb1c29e6545cdb-kubeconfig\") pod \"kube-controller-manager-ip-172-31-30-240\" (UID: \"f93a1c7e886b7fc4a0eb1c29e6545cdb\") " pod="kube-system/kube-controller-manager-ip-172-31-30-240" May 17 00:38:48.802062 kubelet[2516]: I0517 00:38:48.802055 2516 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/9a0f07f34260120a2430eccefa9b32ed-ca-certs\") pod \"kube-apiserver-ip-172-31-30-240\" (UID: \"9a0f07f34260120a2430eccefa9b32ed\") " pod="kube-system/kube-apiserver-ip-172-31-30-240" May 17 00:38:48.802200 kubelet[2516]: I0517 00:38:48.802075 2516 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/f93a1c7e886b7fc4a0eb1c29e6545cdb-ca-certs\") pod \"kube-controller-manager-ip-172-31-30-240\" (UID: \"f93a1c7e886b7fc4a0eb1c29e6545cdb\") " pod="kube-system/kube-controller-manager-ip-172-31-30-240" May 17 00:38:48.802200 kubelet[2516]: I0517 00:38:48.802098 2516 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/f93a1c7e886b7fc4a0eb1c29e6545cdb-k8s-certs\") pod \"kube-controller-manager-ip-172-31-30-240\" (UID: \"f93a1c7e886b7fc4a0eb1c29e6545cdb\") " pod="kube-system/kube-controller-manager-ip-172-31-30-240" May 17 00:38:48.802200 kubelet[2516]: I0517 00:38:48.802115 2516 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/f93a1c7e886b7fc4a0eb1c29e6545cdb-usr-share-ca-certificates\") pod \"kube-controller-manager-ip-172-31-30-240\" (UID: \"f93a1c7e886b7fc4a0eb1c29e6545cdb\") " pod="kube-system/kube-controller-manager-ip-172-31-30-240" May 17 00:38:48.802200 kubelet[2516]: I0517 00:38:48.802134 2516 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/a6bb00d3083d3b8c0a54ce654e44c7ab-kubeconfig\") pod \"kube-scheduler-ip-172-31-30-240\" (UID: \"a6bb00d3083d3b8c0a54ce654e44c7ab\") " pod="kube-system/kube-scheduler-ip-172-31-30-240" May 17 00:38:49.326134 kubelet[2516]: I0517 00:38:49.326092 2516 apiserver.go:52] "Watching apiserver" May 17 00:38:49.399869 kubelet[2516]: I0517 00:38:49.399822 2516 desired_state_of_world_populator.go:158] "Finished populating initial desired state of world" May 17 00:38:49.418221 kubelet[2516]: I0517 00:38:49.418143 2516 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-scheduler-ip-172-31-30-240" podStartSLOduration=1.418129335 podStartE2EDuration="1.418129335s" podCreationTimestamp="2025-05-17 00:38:48 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-05-17 00:38:49.416577013 +0000 UTC m=+1.286838227" watchObservedRunningTime="2025-05-17 00:38:49.418129335 +0000 UTC m=+1.288390542" May 17 00:38:49.446589 kubelet[2516]: I0517 00:38:49.446538 2516 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-apiserver-ip-172-31-30-240" podStartSLOduration=1.446513245 podStartE2EDuration="1.446513245s" podCreationTimestamp="2025-05-17 00:38:48 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-05-17 00:38:49.429086932 +0000 UTC m=+1.299348149" watchObservedRunningTime="2025-05-17 00:38:49.446513245 +0000 UTC m=+1.316774444" May 17 00:38:49.446851 kubelet[2516]: I0517 00:38:49.446651 2516 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-controller-manager-ip-172-31-30-240" podStartSLOduration=1.44664728 podStartE2EDuration="1.44664728s" podCreationTimestamp="2025-05-17 00:38:48 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-05-17 00:38:49.444950731 +0000 UTC m=+1.315211949" watchObservedRunningTime="2025-05-17 00:38:49.44664728 +0000 UTC m=+1.316908493" May 17 00:38:50.944229 kubelet[2516]: I0517 00:38:50.944185 2516 kuberuntime_manager.go:1746] "Updating runtime config through cri with podcidr" CIDR="192.168.0.0/24" May 17 00:38:50.944963 env[1634]: time="2025-05-17T00:38:50.944924899Z" level=info msg="No cni config template is specified, wait for other system components to drop the config." May 17 00:38:50.945654 kubelet[2516]: I0517 00:38:50.945634 2516 kubelet_network.go:61] "Updating Pod CIDR" originalPodCIDR="" newPodCIDR="192.168.0.0/24" May 17 00:38:51.574306 systemd[1]: Created slice kubepods-besteffort-podd88cafd7_0f02_48b8_9f1e_0b3ba716e539.slice. May 17 00:38:51.619046 kubelet[2516]: I0517 00:38:51.619000 2516 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/d88cafd7-0f02-48b8-9f1e-0b3ba716e539-lib-modules\") pod \"kube-proxy-z6g9v\" (UID: \"d88cafd7-0f02-48b8-9f1e-0b3ba716e539\") " pod="kube-system/kube-proxy-z6g9v" May 17 00:38:51.619046 kubelet[2516]: I0517 00:38:51.619047 2516 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-ht9rv\" (UniqueName: \"kubernetes.io/projected/d88cafd7-0f02-48b8-9f1e-0b3ba716e539-kube-api-access-ht9rv\") pod \"kube-proxy-z6g9v\" (UID: \"d88cafd7-0f02-48b8-9f1e-0b3ba716e539\") " pod="kube-system/kube-proxy-z6g9v" May 17 00:38:51.619265 kubelet[2516]: I0517 00:38:51.619084 2516 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-proxy\" (UniqueName: \"kubernetes.io/configmap/d88cafd7-0f02-48b8-9f1e-0b3ba716e539-kube-proxy\") pod \"kube-proxy-z6g9v\" (UID: \"d88cafd7-0f02-48b8-9f1e-0b3ba716e539\") " pod="kube-system/kube-proxy-z6g9v" May 17 00:38:51.619265 kubelet[2516]: I0517 00:38:51.619100 2516 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/d88cafd7-0f02-48b8-9f1e-0b3ba716e539-xtables-lock\") pod \"kube-proxy-z6g9v\" (UID: \"d88cafd7-0f02-48b8-9f1e-0b3ba716e539\") " pod="kube-system/kube-proxy-z6g9v" May 17 00:38:51.725064 kubelet[2516]: E0517 00:38:51.725026 2516 projected.go:289] Couldn't get configMap kube-system/kube-root-ca.crt: configmap "kube-root-ca.crt" not found May 17 00:38:51.725064 kubelet[2516]: E0517 00:38:51.725065 2516 projected.go:194] Error preparing data for projected volume kube-api-access-ht9rv for pod kube-system/kube-proxy-z6g9v: configmap "kube-root-ca.crt" not found May 17 00:38:51.725265 kubelet[2516]: E0517 00:38:51.725128 2516 nestedpendingoperations.go:348] Operation for "{volumeName:kubernetes.io/projected/d88cafd7-0f02-48b8-9f1e-0b3ba716e539-kube-api-access-ht9rv podName:d88cafd7-0f02-48b8-9f1e-0b3ba716e539 nodeName:}" failed. No retries permitted until 2025-05-17 00:38:52.225107717 +0000 UTC m=+4.095368925 (durationBeforeRetry 500ms). Error: MountVolume.SetUp failed for volume "kube-api-access-ht9rv" (UniqueName: "kubernetes.io/projected/d88cafd7-0f02-48b8-9f1e-0b3ba716e539-kube-api-access-ht9rv") pod "kube-proxy-z6g9v" (UID: "d88cafd7-0f02-48b8-9f1e-0b3ba716e539") : configmap "kube-root-ca.crt" not found May 17 00:38:52.248089 systemd[1]: Created slice kubepods-besteffort-podf068bd1b_193a_44f0_aa54_140294162060.slice. May 17 00:38:52.322606 kubelet[2516]: I0517 00:38:52.322560 2516 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/f068bd1b-193a-44f0-aa54-140294162060-var-lib-calico\") pod \"tigera-operator-844669ff44-ksvbv\" (UID: \"f068bd1b-193a-44f0-aa54-140294162060\") " pod="tigera-operator/tigera-operator-844669ff44-ksvbv" May 17 00:38:52.322606 kubelet[2516]: I0517 00:38:52.322609 2516 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-4f8fp\" (UniqueName: \"kubernetes.io/projected/f068bd1b-193a-44f0-aa54-140294162060-kube-api-access-4f8fp\") pod \"tigera-operator-844669ff44-ksvbv\" (UID: \"f068bd1b-193a-44f0-aa54-140294162060\") " pod="tigera-operator/tigera-operator-844669ff44-ksvbv" May 17 00:38:52.323894 kubelet[2516]: I0517 00:38:52.323596 2516 swap_util.go:74] "error creating dir to test if tmpfs noswap is enabled. Assuming not supported" mount path="" error="stat /var/lib/kubelet/plugins/kubernetes.io/empty-dir: no such file or directory" May 17 00:38:52.480596 env[1634]: time="2025-05-17T00:38:52.480551290Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-z6g9v,Uid:d88cafd7-0f02-48b8-9f1e-0b3ba716e539,Namespace:kube-system,Attempt:0,}" May 17 00:38:52.516024 env[1634]: time="2025-05-17T00:38:52.515172859Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 May 17 00:38:52.516024 env[1634]: time="2025-05-17T00:38:52.515247563Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 May 17 00:38:52.516024 env[1634]: time="2025-05-17T00:38:52.515265791Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 May 17 00:38:52.516024 env[1634]: time="2025-05-17T00:38:52.515474592Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/5e61e3198025cc59a3997596bff05842519bc65d4b5fd1004c49a1c9e5d11a5a pid=2573 runtime=io.containerd.runc.v2 May 17 00:38:52.545618 systemd[1]: Started cri-containerd-5e61e3198025cc59a3997596bff05842519bc65d4b5fd1004c49a1c9e5d11a5a.scope. May 17 00:38:52.559580 env[1634]: time="2025-05-17T00:38:52.559530821Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-844669ff44-ksvbv,Uid:f068bd1b-193a-44f0-aa54-140294162060,Namespace:tigera-operator,Attempt:0,}" May 17 00:38:52.577000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:52.577000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:52.577000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:52.577000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:52.577000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:52.577000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:52.577000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:52.577000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:52.577000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:52.577000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:52.577000 audit: BPF prog-id=112 op=LOAD May 17 00:38:52.578000 audit[2583]: AVC avc: denied { bpf } for pid=2583 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:52.578000 audit[2583]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00011fc48 a2=10 a3=1c items=0 ppid=2573 pid=2583 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:38:52.578000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3565363165333139383032356363353961333939373539366266663035 May 17 00:38:52.578000 audit[2583]: AVC avc: denied { perfmon } for pid=2583 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:52.578000 audit[2583]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00011f6b0 a2=3c a3=c items=0 ppid=2573 pid=2583 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:38:52.578000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3565363165333139383032356363353961333939373539366266663035 May 17 00:38:52.578000 audit[2583]: AVC avc: denied { bpf } for pid=2583 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:52.578000 audit[2583]: AVC avc: denied { bpf } for pid=2583 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:52.578000 audit[2583]: AVC avc: denied { bpf } for pid=2583 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:52.578000 audit[2583]: AVC avc: denied { perfmon } for pid=2583 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:52.578000 audit[2583]: AVC avc: denied { perfmon } for pid=2583 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:52.578000 audit[2583]: AVC avc: denied { perfmon } for pid=2583 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:52.578000 audit[2583]: AVC avc: denied { perfmon } for pid=2583 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:52.578000 audit[2583]: AVC avc: denied { perfmon } for pid=2583 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:52.578000 audit[2583]: AVC avc: denied { bpf } for pid=2583 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:52.578000 audit[2583]: AVC avc: denied { bpf } for pid=2583 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:52.578000 audit: BPF prog-id=113 op=LOAD May 17 00:38:52.578000 audit[2583]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00011f9d8 a2=78 a3=c000325b70 items=0 ppid=2573 pid=2583 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:38:52.578000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3565363165333139383032356363353961333939373539366266663035 May 17 00:38:52.578000 audit[2583]: AVC avc: denied { bpf } for pid=2583 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:52.578000 audit[2583]: AVC avc: denied { bpf } for pid=2583 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:52.578000 audit[2583]: AVC avc: denied { perfmon } for pid=2583 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:52.578000 audit[2583]: AVC avc: denied { perfmon } for pid=2583 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:52.578000 audit[2583]: AVC avc: denied { perfmon } for pid=2583 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:52.578000 audit[2583]: AVC avc: denied { perfmon } for pid=2583 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:52.578000 audit[2583]: AVC avc: denied { perfmon } for pid=2583 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:52.578000 audit[2583]: AVC avc: denied { bpf } for pid=2583 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:52.578000 audit[2583]: AVC avc: denied { bpf } for pid=2583 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:52.578000 audit: BPF prog-id=114 op=LOAD May 17 00:38:52.578000 audit[2583]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00011f770 a2=78 a3=c000325bb8 items=0 ppid=2573 pid=2583 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:38:52.578000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3565363165333139383032356363353961333939373539366266663035 May 17 00:38:52.578000 audit: BPF prog-id=114 op=UNLOAD May 17 00:38:52.578000 audit: BPF prog-id=113 op=UNLOAD May 17 00:38:52.578000 audit[2583]: AVC avc: denied { bpf } for pid=2583 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:52.578000 audit[2583]: AVC avc: denied { bpf } for pid=2583 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:52.578000 audit[2583]: AVC avc: denied { bpf } for pid=2583 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:52.578000 audit[2583]: AVC avc: denied { perfmon } for pid=2583 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:52.578000 audit[2583]: AVC avc: denied { perfmon } for pid=2583 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:52.578000 audit[2583]: AVC avc: denied { perfmon } for pid=2583 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:52.578000 audit[2583]: AVC avc: denied { perfmon } for pid=2583 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:52.578000 audit[2583]: AVC avc: denied { perfmon } for pid=2583 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:52.578000 audit[2583]: AVC avc: denied { bpf } for pid=2583 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:52.578000 audit[2583]: AVC avc: denied { bpf } for pid=2583 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:52.578000 audit: BPF prog-id=115 op=LOAD May 17 00:38:52.578000 audit[2583]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00011fc30 a2=78 a3=c000325fc8 items=0 ppid=2573 pid=2583 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:38:52.578000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3565363165333139383032356363353961333939373539366266663035 May 17 00:38:52.597640 env[1634]: time="2025-05-17T00:38:52.597590241Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-z6g9v,Uid:d88cafd7-0f02-48b8-9f1e-0b3ba716e539,Namespace:kube-system,Attempt:0,} returns sandbox id \"5e61e3198025cc59a3997596bff05842519bc65d4b5fd1004c49a1c9e5d11a5a\"" May 17 00:38:52.607061 env[1634]: time="2025-05-17T00:38:52.607011096Z" level=info msg="CreateContainer within sandbox \"5e61e3198025cc59a3997596bff05842519bc65d4b5fd1004c49a1c9e5d11a5a\" for container &ContainerMetadata{Name:kube-proxy,Attempt:0,}" May 17 00:38:52.612059 env[1634]: time="2025-05-17T00:38:52.611976755Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 May 17 00:38:52.612245 env[1634]: time="2025-05-17T00:38:52.612058877Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 May 17 00:38:52.612245 env[1634]: time="2025-05-17T00:38:52.612088106Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 May 17 00:38:52.612729 env[1634]: time="2025-05-17T00:38:52.612679969Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/756081b9066e92973707e8c91d18afbf2b0fadbecc3a0b84a5b7300a84c5a587 pid=2615 runtime=io.containerd.runc.v2 May 17 00:38:52.627357 systemd[1]: Started cri-containerd-756081b9066e92973707e8c91d18afbf2b0fadbecc3a0b84a5b7300a84c5a587.scope. May 17 00:38:52.646116 env[1634]: time="2025-05-17T00:38:52.646063246Z" level=info msg="CreateContainer within sandbox \"5e61e3198025cc59a3997596bff05842519bc65d4b5fd1004c49a1c9e5d11a5a\" for &ContainerMetadata{Name:kube-proxy,Attempt:0,} returns container id \"94c1b62e37ffe034be27560971f1cde3fe988cd68c22dc7b60b26de88af2bc02\"" May 17 00:38:52.648107 env[1634]: time="2025-05-17T00:38:52.647040208Z" level=info msg="StartContainer for \"94c1b62e37ffe034be27560971f1cde3fe988cd68c22dc7b60b26de88af2bc02\"" May 17 00:38:52.651000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:52.651000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:52.651000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:52.651000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:52.651000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:52.651000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:52.651000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:52.651000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:52.651000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:52.651000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:52.651000 audit: BPF prog-id=116 op=LOAD May 17 00:38:52.652000 audit[2623]: AVC avc: denied { bpf } for pid=2623 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:52.652000 audit[2623]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bdc48 a2=10 a3=1c items=0 ppid=2615 pid=2623 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:38:52.652000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3735363038316239303636653932393733373037653863393164313861 May 17 00:38:52.652000 audit[2623]: AVC avc: denied { perfmon } for pid=2623 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:52.652000 audit[2623]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001bd6b0 a2=3c a3=c items=0 ppid=2615 pid=2623 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:38:52.652000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3735363038316239303636653932393733373037653863393164313861 May 17 00:38:52.652000 audit[2623]: AVC avc: denied { bpf } for pid=2623 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:52.652000 audit[2623]: AVC avc: denied { bpf } for pid=2623 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:52.652000 audit[2623]: AVC avc: denied { bpf } for pid=2623 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:52.652000 audit[2623]: AVC avc: denied { perfmon } for pid=2623 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:52.652000 audit[2623]: AVC avc: denied { perfmon } for pid=2623 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:52.652000 audit[2623]: AVC avc: denied { perfmon } for pid=2623 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:52.652000 audit[2623]: AVC avc: denied { perfmon } for pid=2623 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:52.652000 audit[2623]: AVC avc: denied { perfmon } for pid=2623 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:52.652000 audit[2623]: AVC avc: denied { bpf } for pid=2623 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:52.652000 audit[2623]: AVC avc: denied { bpf } for pid=2623 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:52.652000 audit: BPF prog-id=117 op=LOAD May 17 00:38:52.652000 audit[2623]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bd9d8 a2=78 a3=c0002340a0 items=0 ppid=2615 pid=2623 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:38:52.652000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3735363038316239303636653932393733373037653863393164313861 May 17 00:38:52.652000 audit[2623]: AVC avc: denied { bpf } for pid=2623 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:52.652000 audit[2623]: AVC avc: denied { bpf } for pid=2623 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:52.652000 audit[2623]: AVC avc: denied { perfmon } for pid=2623 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:52.652000 audit[2623]: AVC avc: denied { perfmon } for pid=2623 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:52.652000 audit[2623]: AVC avc: denied { perfmon } for pid=2623 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:52.652000 audit[2623]: AVC avc: denied { perfmon } for pid=2623 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:52.652000 audit[2623]: AVC avc: denied { perfmon } for pid=2623 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:52.652000 audit[2623]: AVC avc: denied { bpf } for pid=2623 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:52.652000 audit[2623]: AVC avc: denied { bpf } for pid=2623 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:52.652000 audit: BPF prog-id=118 op=LOAD May 17 00:38:52.652000 audit[2623]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bd770 a2=78 a3=c0002340e8 items=0 ppid=2615 pid=2623 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:38:52.652000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3735363038316239303636653932393733373037653863393164313861 May 17 00:38:52.652000 audit: BPF prog-id=118 op=UNLOAD May 17 00:38:52.652000 audit: BPF prog-id=117 op=UNLOAD May 17 00:38:52.652000 audit[2623]: AVC avc: denied { bpf } for pid=2623 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:52.652000 audit[2623]: AVC avc: denied { bpf } for pid=2623 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:52.652000 audit[2623]: AVC avc: denied { bpf } for pid=2623 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:52.652000 audit[2623]: AVC avc: denied { perfmon } for pid=2623 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:52.652000 audit[2623]: AVC avc: denied { perfmon } for pid=2623 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:52.652000 audit[2623]: AVC avc: denied { perfmon } for pid=2623 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:52.652000 audit[2623]: AVC avc: denied { perfmon } for pid=2623 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:52.652000 audit[2623]: AVC avc: denied { perfmon } for pid=2623 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:52.652000 audit[2623]: AVC avc: denied { bpf } for pid=2623 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:52.652000 audit[2623]: AVC avc: denied { bpf } for pid=2623 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:52.652000 audit: BPF prog-id=119 op=LOAD May 17 00:38:52.652000 audit[2623]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bdc30 a2=78 a3=c0002344f8 items=0 ppid=2615 pid=2623 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:38:52.652000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3735363038316239303636653932393733373037653863393164313861 May 17 00:38:52.671889 systemd[1]: Started cri-containerd-94c1b62e37ffe034be27560971f1cde3fe988cd68c22dc7b60b26de88af2bc02.scope. May 17 00:38:52.693179 env[1634]: time="2025-05-17T00:38:52.693138628Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-844669ff44-ksvbv,Uid:f068bd1b-193a-44f0-aa54-140294162060,Namespace:tigera-operator,Attempt:0,} returns sandbox id \"756081b9066e92973707e8c91d18afbf2b0fadbecc3a0b84a5b7300a84c5a587\"" May 17 00:38:52.696174 env[1634]: time="2025-05-17T00:38:52.696138451Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.38.0\"" May 17 00:38:52.699000 audit[2646]: AVC avc: denied { perfmon } for pid=2646 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:52.699000 audit[2646]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=7f0b27eecb38 items=0 ppid=2573 pid=2646 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:38:52.699000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3934633162363265333766666530333462653237353630393731663163 May 17 00:38:52.699000 audit[2646]: AVC avc: denied { bpf } for pid=2646 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:52.699000 audit[2646]: AVC avc: denied { bpf } for pid=2646 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:52.699000 audit[2646]: AVC avc: denied { bpf } for pid=2646 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:52.699000 audit[2646]: AVC avc: denied { perfmon } for pid=2646 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:52.699000 audit[2646]: AVC avc: denied { perfmon } for pid=2646 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:52.699000 audit[2646]: AVC avc: denied { perfmon } for pid=2646 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:52.699000 audit[2646]: AVC avc: denied { perfmon } for pid=2646 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:52.699000 audit[2646]: AVC avc: denied { perfmon } for pid=2646 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:52.699000 audit[2646]: AVC avc: denied { bpf } for pid=2646 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:52.699000 audit[2646]: AVC avc: denied { bpf } for pid=2646 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:52.699000 audit: BPF prog-id=120 op=LOAD May 17 00:38:52.699000 audit[2646]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001979d8 a2=78 a3=c0000ddb88 items=0 ppid=2573 pid=2646 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:38:52.699000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3934633162363265333766666530333462653237353630393731663163 May 17 00:38:52.700000 audit[2646]: AVC avc: denied { bpf } for pid=2646 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:52.700000 audit[2646]: AVC avc: denied { bpf } for pid=2646 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:52.700000 audit[2646]: AVC avc: denied { perfmon } for pid=2646 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:52.700000 audit[2646]: AVC avc: denied { perfmon } for pid=2646 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:52.700000 audit[2646]: AVC avc: denied { perfmon } for pid=2646 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:52.700000 audit[2646]: AVC avc: denied { perfmon } for pid=2646 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:52.700000 audit[2646]: AVC avc: denied { perfmon } for pid=2646 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:52.700000 audit[2646]: AVC avc: denied { bpf } for pid=2646 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:52.700000 audit[2646]: AVC avc: denied { bpf } for pid=2646 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:52.700000 audit: BPF prog-id=121 op=LOAD May 17 00:38:52.700000 audit[2646]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000197770 a2=78 a3=c0000ddbd8 items=0 ppid=2573 pid=2646 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:38:52.700000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3934633162363265333766666530333462653237353630393731663163 May 17 00:38:52.700000 audit: BPF prog-id=121 op=UNLOAD May 17 00:38:52.700000 audit: BPF prog-id=120 op=UNLOAD May 17 00:38:52.700000 audit[2646]: AVC avc: denied { bpf } for pid=2646 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:52.700000 audit[2646]: AVC avc: denied { bpf } for pid=2646 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:52.700000 audit[2646]: AVC avc: denied { bpf } for pid=2646 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:52.700000 audit[2646]: AVC avc: denied { perfmon } for pid=2646 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:52.700000 audit[2646]: AVC avc: denied { perfmon } for pid=2646 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:52.700000 audit[2646]: AVC avc: denied { perfmon } for pid=2646 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:52.700000 audit[2646]: AVC avc: denied { perfmon } for pid=2646 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:52.700000 audit[2646]: AVC avc: denied { perfmon } for pid=2646 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:52.700000 audit[2646]: AVC avc: denied { bpf } for pid=2646 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:52.700000 audit[2646]: AVC avc: denied { bpf } for pid=2646 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:52.700000 audit: BPF prog-id=122 op=LOAD May 17 00:38:52.700000 audit[2646]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000197c30 a2=78 a3=c0000ddc68 items=0 ppid=2573 pid=2646 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:38:52.700000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3934633162363265333766666530333462653237353630393731663163 May 17 00:38:52.718171 env[1634]: time="2025-05-17T00:38:52.718113549Z" level=info msg="StartContainer for \"94c1b62e37ffe034be27560971f1cde3fe988cd68c22dc7b60b26de88af2bc02\" returns successfully" May 17 00:38:53.387903 kernel: kauditd_printk_skb: 159 callbacks suppressed May 17 00:38:53.388069 kernel: audit: type=1325 audit(1747442333.381:819): table=mangle:38 family=2 entries=1 op=nft_register_chain pid=2717 subj=system_u:system_r:kernel_t:s0 comm="iptables" May 17 00:38:53.381000 audit[2717]: NETFILTER_CFG table=mangle:38 family=2 entries=1 op=nft_register_chain pid=2717 subj=system_u:system_r:kernel_t:s0 comm="iptables" May 17 00:38:53.398038 kernel: audit: type=1300 audit(1747442333.381:819): arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffe8d7e4d50 a2=0 a3=7ffe8d7e4d3c items=0 ppid=2660 pid=2717 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:38:53.381000 audit[2717]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffe8d7e4d50 a2=0 a3=7ffe8d7e4d3c items=0 ppid=2660 pid=2717 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:38:53.402940 kernel: audit: type=1327 audit(1747442333.381:819): proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 May 17 00:38:53.381000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 May 17 00:38:53.407878 kernel: audit: type=1325 audit(1747442333.387:820): table=nat:39 family=2 entries=1 op=nft_register_chain pid=2719 subj=system_u:system_r:kernel_t:s0 comm="iptables" May 17 00:38:53.387000 audit[2719]: NETFILTER_CFG table=nat:39 family=2 entries=1 op=nft_register_chain pid=2719 subj=system_u:system_r:kernel_t:s0 comm="iptables" May 17 00:38:53.417196 kernel: audit: type=1300 audit(1747442333.387:820): arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffedca796d0 a2=0 a3=7ffedca796bc items=0 ppid=2660 pid=2719 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:38:53.387000 audit[2719]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffedca796d0 a2=0 a3=7ffedca796bc items=0 ppid=2660 pid=2719 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:38:53.422121 kernel: audit: type=1327 audit(1747442333.387:820): proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 May 17 00:38:53.387000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 May 17 00:38:53.426997 kernel: audit: type=1325 audit(1747442333.393:821): table=filter:40 family=2 entries=1 op=nft_register_chain pid=2721 subj=system_u:system_r:kernel_t:s0 comm="iptables" May 17 00:38:53.393000 audit[2721]: NETFILTER_CFG table=filter:40 family=2 entries=1 op=nft_register_chain pid=2721 subj=system_u:system_r:kernel_t:s0 comm="iptables" May 17 00:38:53.436517 kernel: audit: type=1300 audit(1747442333.393:821): arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffc3f9071d0 a2=0 a3=7ffc3f9071bc items=0 ppid=2660 pid=2721 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:38:53.393000 audit[2721]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffc3f9071d0 a2=0 a3=7ffc3f9071bc items=0 ppid=2660 pid=2721 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:38:53.393000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 May 17 00:38:53.393000 audit[2722]: NETFILTER_CFG table=mangle:41 family=10 entries=1 op=nft_register_chain pid=2722 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" May 17 00:38:53.446528 kernel: audit: type=1327 audit(1747442333.393:821): proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 May 17 00:38:53.446603 kernel: audit: type=1325 audit(1747442333.393:822): table=mangle:41 family=10 entries=1 op=nft_register_chain pid=2722 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" May 17 00:38:53.393000 audit[2722]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffe5bec8740 a2=0 a3=7ffe5bec872c items=0 ppid=2660 pid=2722 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:38:53.393000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 May 17 00:38:53.421000 audit[2723]: NETFILTER_CFG table=nat:42 family=10 entries=1 op=nft_register_chain pid=2723 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" May 17 00:38:53.421000 audit[2723]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffe74ee2960 a2=0 a3=7ffe74ee294c items=0 ppid=2660 pid=2723 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:38:53.421000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 May 17 00:38:53.421000 audit[2724]: NETFILTER_CFG table=filter:43 family=10 entries=1 op=nft_register_chain pid=2724 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" May 17 00:38:53.421000 audit[2724]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffe8f769210 a2=0 a3=7ffe8f7691fc items=0 ppid=2660 pid=2724 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:38:53.421000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 May 17 00:38:53.494000 audit[2725]: NETFILTER_CFG table=filter:44 family=2 entries=1 op=nft_register_chain pid=2725 subj=system_u:system_r:kernel_t:s0 comm="iptables" May 17 00:38:53.494000 audit[2725]: SYSCALL arch=c000003e syscall=46 success=yes exit=108 a0=3 a1=7fffe44c1350 a2=0 a3=7fffe44c133c items=0 ppid=2660 pid=2725 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:38:53.494000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 May 17 00:38:53.499000 audit[2727]: NETFILTER_CFG table=filter:45 family=2 entries=1 op=nft_register_rule pid=2727 subj=system_u:system_r:kernel_t:s0 comm="iptables" May 17 00:38:53.499000 audit[2727]: SYSCALL arch=c000003e syscall=46 success=yes exit=752 a0=3 a1=7ffeb26f9f40 a2=0 a3=7ffeb26f9f2c items=0 ppid=2660 pid=2727 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:38:53.499000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276696365 May 17 00:38:53.503000 audit[2730]: NETFILTER_CFG table=filter:46 family=2 entries=1 op=nft_register_rule pid=2730 subj=system_u:system_r:kernel_t:s0 comm="iptables" May 17 00:38:53.503000 audit[2730]: SYSCALL arch=c000003e syscall=46 success=yes exit=752 a0=3 a1=7ffe14afa370 a2=0 a3=7ffe14afa35c items=0 ppid=2660 pid=2730 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:38:53.503000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C65207365727669 May 17 00:38:53.504000 audit[2731]: NETFILTER_CFG table=filter:47 family=2 entries=1 op=nft_register_chain pid=2731 subj=system_u:system_r:kernel_t:s0 comm="iptables" May 17 00:38:53.504000 audit[2731]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffed83f2190 a2=0 a3=7ffed83f217c items=0 ppid=2660 pid=2731 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:38:53.504000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 May 17 00:38:53.507000 audit[2733]: NETFILTER_CFG table=filter:48 family=2 entries=1 op=nft_register_rule pid=2733 subj=system_u:system_r:kernel_t:s0 comm="iptables" May 17 00:38:53.507000 audit[2733]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffc453d0100 a2=0 a3=7ffc453d00ec items=0 ppid=2660 pid=2733 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:38:53.507000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 May 17 00:38:53.508000 audit[2734]: NETFILTER_CFG table=filter:49 family=2 entries=1 op=nft_register_chain pid=2734 subj=system_u:system_r:kernel_t:s0 comm="iptables" May 17 00:38:53.508000 audit[2734]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffe1b0175a0 a2=0 a3=7ffe1b01758c items=0 ppid=2660 pid=2734 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:38:53.508000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 May 17 00:38:53.512000 audit[2736]: NETFILTER_CFG table=filter:50 family=2 entries=1 op=nft_register_rule pid=2736 subj=system_u:system_r:kernel_t:s0 comm="iptables" May 17 00:38:53.512000 audit[2736]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7ffed06dca20 a2=0 a3=7ffed06dca0c items=0 ppid=2660 pid=2736 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:38:53.512000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D May 17 00:38:53.516000 audit[2739]: NETFILTER_CFG table=filter:51 family=2 entries=1 op=nft_register_rule pid=2739 subj=system_u:system_r:kernel_t:s0 comm="iptables" May 17 00:38:53.516000 audit[2739]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7ffd73a6c320 a2=0 a3=7ffd73a6c30c items=0 ppid=2660 pid=2739 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:38:53.516000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D53 May 17 00:38:53.517000 audit[2740]: NETFILTER_CFG table=filter:52 family=2 entries=1 op=nft_register_chain pid=2740 subj=system_u:system_r:kernel_t:s0 comm="iptables" May 17 00:38:53.517000 audit[2740]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffc5bbab260 a2=0 a3=7ffc5bbab24c items=0 ppid=2660 pid=2740 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:38:53.517000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 May 17 00:38:53.520000 audit[2742]: NETFILTER_CFG table=filter:53 family=2 entries=1 op=nft_register_rule pid=2742 subj=system_u:system_r:kernel_t:s0 comm="iptables" May 17 00:38:53.520000 audit[2742]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffccc99f080 a2=0 a3=7ffccc99f06c items=0 ppid=2660 pid=2742 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:38:53.520000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 May 17 00:38:53.522000 audit[2743]: NETFILTER_CFG table=filter:54 family=2 entries=1 op=nft_register_chain pid=2743 subj=system_u:system_r:kernel_t:s0 comm="iptables" May 17 00:38:53.522000 audit[2743]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffd8b80a410 a2=0 a3=7ffd8b80a3fc items=0 ppid=2660 pid=2743 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:38:53.522000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 May 17 00:38:53.524000 audit[2745]: NETFILTER_CFG table=filter:55 family=2 entries=1 op=nft_register_rule pid=2745 subj=system_u:system_r:kernel_t:s0 comm="iptables" May 17 00:38:53.524000 audit[2745]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffc6b012c00 a2=0 a3=7ffc6b012bec items=0 ppid=2660 pid=2745 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:38:53.524000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A May 17 00:38:53.529000 audit[2748]: NETFILTER_CFG table=filter:56 family=2 entries=1 op=nft_register_rule pid=2748 subj=system_u:system_r:kernel_t:s0 comm="iptables" May 17 00:38:53.529000 audit[2748]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffc013992d0 a2=0 a3=7ffc013992bc items=0 ppid=2660 pid=2748 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:38:53.529000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A May 17 00:38:53.533000 audit[2751]: NETFILTER_CFG table=filter:57 family=2 entries=1 op=nft_register_rule pid=2751 subj=system_u:system_r:kernel_t:s0 comm="iptables" May 17 00:38:53.533000 audit[2751]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7fff1a81b510 a2=0 a3=7fff1a81b4fc items=0 ppid=2660 pid=2751 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:38:53.533000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D May 17 00:38:53.534000 audit[2752]: NETFILTER_CFG table=nat:58 family=2 entries=1 op=nft_register_chain pid=2752 subj=system_u:system_r:kernel_t:s0 comm="iptables" May 17 00:38:53.534000 audit[2752]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7fff0c8b7c70 a2=0 a3=7fff0c8b7c5c items=0 ppid=2660 pid=2752 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:38:53.534000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 May 17 00:38:53.539000 audit[2754]: NETFILTER_CFG table=nat:59 family=2 entries=1 op=nft_register_rule pid=2754 subj=system_u:system_r:kernel_t:s0 comm="iptables" May 17 00:38:53.539000 audit[2754]: SYSCALL arch=c000003e syscall=46 success=yes exit=524 a0=3 a1=7ffe71203870 a2=0 a3=7ffe7120385c items=0 ppid=2660 pid=2754 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:38:53.539000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 May 17 00:38:53.544000 audit[2757]: NETFILTER_CFG table=nat:60 family=2 entries=1 op=nft_register_rule pid=2757 subj=system_u:system_r:kernel_t:s0 comm="iptables" May 17 00:38:53.544000 audit[2757]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffd2ad6ee00 a2=0 a3=7ffd2ad6edec items=0 ppid=2660 pid=2757 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:38:53.544000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 May 17 00:38:53.546000 audit[2758]: NETFILTER_CFG table=nat:61 family=2 entries=1 op=nft_register_chain pid=2758 subj=system_u:system_r:kernel_t:s0 comm="iptables" May 17 00:38:53.546000 audit[2758]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffd6b167580 a2=0 a3=7ffd6b16756c items=0 ppid=2660 pid=2758 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:38:53.546000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 May 17 00:38:53.549000 audit[2760]: NETFILTER_CFG table=nat:62 family=2 entries=1 op=nft_register_rule pid=2760 subj=system_u:system_r:kernel_t:s0 comm="iptables" May 17 00:38:53.549000 audit[2760]: SYSCALL arch=c000003e syscall=46 success=yes exit=532 a0=3 a1=7ffd43cb88d0 a2=0 a3=7ffd43cb88bc items=0 ppid=2660 pid=2760 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:38:53.549000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 May 17 00:38:53.579000 audit[2766]: NETFILTER_CFG table=filter:63 family=2 entries=8 op=nft_register_rule pid=2766 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" May 17 00:38:53.579000 audit[2766]: SYSCALL arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7ffffe4d80e0 a2=0 a3=7ffffe4d80cc items=0 ppid=2660 pid=2766 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:38:53.579000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 May 17 00:38:53.589000 audit[2766]: NETFILTER_CFG table=nat:64 family=2 entries=14 op=nft_register_chain pid=2766 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" May 17 00:38:53.589000 audit[2766]: SYSCALL arch=c000003e syscall=46 success=yes exit=5508 a0=3 a1=7ffffe4d80e0 a2=0 a3=7ffffe4d80cc items=0 ppid=2660 pid=2766 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:38:53.589000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 May 17 00:38:53.591000 audit[2771]: NETFILTER_CFG table=filter:65 family=10 entries=1 op=nft_register_chain pid=2771 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" May 17 00:38:53.591000 audit[2771]: SYSCALL arch=c000003e syscall=46 success=yes exit=108 a0=3 a1=7ffd07ef94e0 a2=0 a3=7ffd07ef94cc items=0 ppid=2660 pid=2771 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:38:53.591000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 May 17 00:38:53.593000 audit[2773]: NETFILTER_CFG table=filter:66 family=10 entries=2 op=nft_register_chain pid=2773 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" May 17 00:38:53.593000 audit[2773]: SYSCALL arch=c000003e syscall=46 success=yes exit=836 a0=3 a1=7fffc4c6f830 a2=0 a3=7fffc4c6f81c items=0 ppid=2660 pid=2773 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:38:53.593000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C6520736572766963 May 17 00:38:53.598000 audit[2776]: NETFILTER_CFG table=filter:67 family=10 entries=2 op=nft_register_chain pid=2776 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" May 17 00:38:53.598000 audit[2776]: SYSCALL arch=c000003e syscall=46 success=yes exit=836 a0=3 a1=7fffb33dbf00 a2=0 a3=7fffb33dbeec items=0 ppid=2660 pid=2776 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:38:53.598000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276 May 17 00:38:53.600000 audit[2777]: NETFILTER_CFG table=filter:68 family=10 entries=1 op=nft_register_chain pid=2777 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" May 17 00:38:53.600000 audit[2777]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fff8196bab0 a2=0 a3=7fff8196ba9c items=0 ppid=2660 pid=2777 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:38:53.600000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 May 17 00:38:53.602000 audit[2779]: NETFILTER_CFG table=filter:69 family=10 entries=1 op=nft_register_rule pid=2779 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" May 17 00:38:53.602000 audit[2779]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7fffc1ad4f70 a2=0 a3=7fffc1ad4f5c items=0 ppid=2660 pid=2779 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:38:53.602000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 May 17 00:38:53.604000 audit[2780]: NETFILTER_CFG table=filter:70 family=10 entries=1 op=nft_register_chain pid=2780 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" May 17 00:38:53.604000 audit[2780]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffdd7ca2f80 a2=0 a3=7ffdd7ca2f6c items=0 ppid=2660 pid=2780 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:38:53.604000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 May 17 00:38:53.607000 audit[2782]: NETFILTER_CFG table=filter:71 family=10 entries=1 op=nft_register_rule pid=2782 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" May 17 00:38:53.607000 audit[2782]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7fffd0cc8aa0 a2=0 a3=7fffd0cc8a8c items=0 ppid=2660 pid=2782 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:38:53.607000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B554245 May 17 00:38:53.611000 audit[2785]: NETFILTER_CFG table=filter:72 family=10 entries=2 op=nft_register_chain pid=2785 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" May 17 00:38:53.611000 audit[2785]: SYSCALL arch=c000003e syscall=46 success=yes exit=828 a0=3 a1=7ffe9a468440 a2=0 a3=7ffe9a46842c items=0 ppid=2660 pid=2785 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:38:53.611000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D May 17 00:38:53.612000 audit[2786]: NETFILTER_CFG table=filter:73 family=10 entries=1 op=nft_register_chain pid=2786 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" May 17 00:38:53.612000 audit[2786]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fffff9f48c0 a2=0 a3=7fffff9f48ac items=0 ppid=2660 pid=2786 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:38:53.612000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 May 17 00:38:53.615000 audit[2788]: NETFILTER_CFG table=filter:74 family=10 entries=1 op=nft_register_rule pid=2788 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" May 17 00:38:53.615000 audit[2788]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffd995de580 a2=0 a3=7ffd995de56c items=0 ppid=2660 pid=2788 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:38:53.615000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 May 17 00:38:53.616000 audit[2789]: NETFILTER_CFG table=filter:75 family=10 entries=1 op=nft_register_chain pid=2789 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" May 17 00:38:53.616000 audit[2789]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffc78a1b280 a2=0 a3=7ffc78a1b26c items=0 ppid=2660 pid=2789 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:38:53.616000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 May 17 00:38:53.619000 audit[2791]: NETFILTER_CFG table=filter:76 family=10 entries=1 op=nft_register_rule pid=2791 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" May 17 00:38:53.619000 audit[2791]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffd8aed54e0 a2=0 a3=7ffd8aed54cc items=0 ppid=2660 pid=2791 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:38:53.619000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A May 17 00:38:53.624000 audit[2794]: NETFILTER_CFG table=filter:77 family=10 entries=1 op=nft_register_rule pid=2794 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" May 17 00:38:53.624000 audit[2794]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffd7bc6d620 a2=0 a3=7ffd7bc6d60c items=0 ppid=2660 pid=2794 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:38:53.624000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D May 17 00:38:53.628000 audit[2797]: NETFILTER_CFG table=filter:78 family=10 entries=1 op=nft_register_rule pid=2797 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" May 17 00:38:53.628000 audit[2797]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffd5cb27c00 a2=0 a3=7ffd5cb27bec items=0 ppid=2660 pid=2797 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:38:53.628000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C May 17 00:38:53.629000 audit[2798]: NETFILTER_CFG table=nat:79 family=10 entries=1 op=nft_register_chain pid=2798 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" May 17 00:38:53.629000 audit[2798]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffe9e6dfff0 a2=0 a3=7ffe9e6dffdc items=0 ppid=2660 pid=2798 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:38:53.629000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 May 17 00:38:53.633000 audit[2800]: NETFILTER_CFG table=nat:80 family=10 entries=2 op=nft_register_chain pid=2800 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" May 17 00:38:53.633000 audit[2800]: SYSCALL arch=c000003e syscall=46 success=yes exit=600 a0=3 a1=7ffccc6e26e0 a2=0 a3=7ffccc6e26cc items=0 ppid=2660 pid=2800 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:38:53.633000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 May 17 00:38:53.637000 audit[2803]: NETFILTER_CFG table=nat:81 family=10 entries=2 op=nft_register_chain pid=2803 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" May 17 00:38:53.637000 audit[2803]: SYSCALL arch=c000003e syscall=46 success=yes exit=608 a0=3 a1=7fffa3064a20 a2=0 a3=7fffa3064a0c items=0 ppid=2660 pid=2803 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:38:53.637000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 May 17 00:38:53.639000 audit[2804]: NETFILTER_CFG table=nat:82 family=10 entries=1 op=nft_register_chain pid=2804 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" May 17 00:38:53.639000 audit[2804]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffdcd07a2e0 a2=0 a3=7ffdcd07a2cc items=0 ppid=2660 pid=2804 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:38:53.639000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 May 17 00:38:53.643000 audit[2806]: NETFILTER_CFG table=nat:83 family=10 entries=2 op=nft_register_chain pid=2806 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" May 17 00:38:53.643000 audit[2806]: SYSCALL arch=c000003e syscall=46 success=yes exit=612 a0=3 a1=7ffd64e629c0 a2=0 a3=7ffd64e629ac items=0 ppid=2660 pid=2806 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:38:53.643000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 May 17 00:38:53.644000 audit[2807]: NETFILTER_CFG table=filter:84 family=10 entries=1 op=nft_register_chain pid=2807 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" May 17 00:38:53.644000 audit[2807]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffd8c133f10 a2=0 a3=7ffd8c133efc items=0 ppid=2660 pid=2807 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:38:53.644000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 May 17 00:38:53.647000 audit[2809]: NETFILTER_CFG table=filter:85 family=10 entries=1 op=nft_register_rule pid=2809 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" May 17 00:38:53.647000 audit[2809]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7fffbb906c80 a2=0 a3=7fffbb906c6c items=0 ppid=2660 pid=2809 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:38:53.647000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C May 17 00:38:53.651000 audit[2812]: NETFILTER_CFG table=filter:86 family=10 entries=1 op=nft_register_rule pid=2812 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" May 17 00:38:53.651000 audit[2812]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffd71dead70 a2=0 a3=7ffd71dead5c items=0 ppid=2660 pid=2812 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:38:53.651000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C May 17 00:38:53.655000 audit[2814]: NETFILTER_CFG table=filter:87 family=10 entries=3 op=nft_register_rule pid=2814 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" May 17 00:38:53.655000 audit[2814]: SYSCALL arch=c000003e syscall=46 success=yes exit=2088 a0=3 a1=7ffcfbe909d0 a2=0 a3=7ffcfbe909bc items=0 ppid=2660 pid=2814 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:38:53.655000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 May 17 00:38:53.655000 audit[2814]: NETFILTER_CFG table=nat:88 family=10 entries=7 op=nft_register_chain pid=2814 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" May 17 00:38:53.655000 audit[2814]: SYSCALL arch=c000003e syscall=46 success=yes exit=2056 a0=3 a1=7ffcfbe909d0 a2=0 a3=7ffcfbe909bc items=0 ppid=2660 pid=2814 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:38:53.655000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 May 17 00:38:54.287939 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2265521064.mount: Deactivated successfully. May 17 00:38:55.148988 env[1634]: time="2025-05-17T00:38:55.148931590Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator:v1.38.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" May 17 00:38:55.154893 env[1634]: time="2025-05-17T00:38:55.154853308Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:5e43c1322619406528ff596056dfeb70cb8d20c5c00439feb752a7725302e033,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" May 17 00:38:55.156941 env[1634]: time="2025-05-17T00:38:55.156899576Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/tigera/operator:v1.38.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" May 17 00:38:55.159865 env[1634]: time="2025-05-17T00:38:55.159827435Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator@sha256:e0a34b265aebce1a2db906d8dad99190706e8bf3910cae626b9c2eb6bbb21775,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" May 17 00:38:55.160414 env[1634]: time="2025-05-17T00:38:55.160378470Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.38.0\" returns image reference \"sha256:5e43c1322619406528ff596056dfeb70cb8d20c5c00439feb752a7725302e033\"" May 17 00:38:55.166313 env[1634]: time="2025-05-17T00:38:55.166268916Z" level=info msg="CreateContainer within sandbox \"756081b9066e92973707e8c91d18afbf2b0fadbecc3a0b84a5b7300a84c5a587\" for container &ContainerMetadata{Name:tigera-operator,Attempt:0,}" May 17 00:38:55.185826 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1796536461.mount: Deactivated successfully. May 17 00:38:55.192151 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount335312170.mount: Deactivated successfully. May 17 00:38:55.200414 env[1634]: time="2025-05-17T00:38:55.200359544Z" level=info msg="CreateContainer within sandbox \"756081b9066e92973707e8c91d18afbf2b0fadbecc3a0b84a5b7300a84c5a587\" for &ContainerMetadata{Name:tigera-operator,Attempt:0,} returns container id \"d548ee2acb0d393fd88c84e29843adc15c60d3b441b9951623712d26ed93a845\"" May 17 00:38:55.202209 env[1634]: time="2025-05-17T00:38:55.201067962Z" level=info msg="StartContainer for \"d548ee2acb0d393fd88c84e29843adc15c60d3b441b9951623712d26ed93a845\"" May 17 00:38:55.232061 systemd[1]: Started cri-containerd-d548ee2acb0d393fd88c84e29843adc15c60d3b441b9951623712d26ed93a845.scope. May 17 00:38:55.252000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:55.252000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:55.252000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:55.252000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:55.252000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:55.252000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:55.252000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:55.252000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:55.252000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:55.253000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:55.253000 audit: BPF prog-id=123 op=LOAD May 17 00:38:55.253000 audit[2821]: AVC avc: denied { bpf } for pid=2821 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:55.253000 audit[2821]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=2615 pid=2821 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:38:55.253000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6435343865653261636230643339336664383863383465323938343361 May 17 00:38:55.253000 audit[2821]: AVC avc: denied { perfmon } for pid=2821 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:55.253000 audit[2821]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=2615 pid=2821 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:38:55.253000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6435343865653261636230643339336664383863383465323938343361 May 17 00:38:55.253000 audit[2821]: AVC avc: denied { bpf } for pid=2821 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:55.253000 audit[2821]: AVC avc: denied { bpf } for pid=2821 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:55.253000 audit[2821]: AVC avc: denied { bpf } for pid=2821 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:55.253000 audit[2821]: AVC avc: denied { perfmon } for pid=2821 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:55.253000 audit[2821]: AVC avc: denied { perfmon } for pid=2821 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:55.253000 audit[2821]: AVC avc: denied { perfmon } for pid=2821 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:55.253000 audit[2821]: AVC avc: denied { perfmon } for pid=2821 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:55.253000 audit[2821]: AVC avc: denied { perfmon } for pid=2821 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:55.253000 audit[2821]: AVC avc: denied { bpf } for pid=2821 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:55.253000 audit[2821]: AVC avc: denied { bpf } for pid=2821 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:55.253000 audit: BPF prog-id=124 op=LOAD May 17 00:38:55.253000 audit[2821]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0000a0d60 items=0 ppid=2615 pid=2821 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:38:55.253000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6435343865653261636230643339336664383863383465323938343361 May 17 00:38:55.253000 audit[2821]: AVC avc: denied { bpf } for pid=2821 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:55.253000 audit[2821]: AVC avc: denied { bpf } for pid=2821 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:55.253000 audit[2821]: AVC avc: denied { perfmon } for pid=2821 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:55.253000 audit[2821]: AVC avc: denied { perfmon } for pid=2821 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:55.253000 audit[2821]: AVC avc: denied { perfmon } for pid=2821 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:55.253000 audit[2821]: AVC avc: denied { perfmon } for pid=2821 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:55.253000 audit[2821]: AVC avc: denied { perfmon } for pid=2821 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:55.253000 audit[2821]: AVC avc: denied { bpf } for pid=2821 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:55.253000 audit[2821]: AVC avc: denied { bpf } for pid=2821 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:55.253000 audit: BPF prog-id=125 op=LOAD May 17 00:38:55.253000 audit[2821]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0000a0da8 items=0 ppid=2615 pid=2821 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:38:55.253000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6435343865653261636230643339336664383863383465323938343361 May 17 00:38:55.253000 audit: BPF prog-id=125 op=UNLOAD May 17 00:38:55.253000 audit: BPF prog-id=124 op=UNLOAD May 17 00:38:55.253000 audit[2821]: AVC avc: denied { bpf } for pid=2821 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:55.253000 audit[2821]: AVC avc: denied { bpf } for pid=2821 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:55.253000 audit[2821]: AVC avc: denied { bpf } for pid=2821 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:55.253000 audit[2821]: AVC avc: denied { perfmon } for pid=2821 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:55.253000 audit[2821]: AVC avc: denied { perfmon } for pid=2821 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:55.253000 audit[2821]: AVC avc: denied { perfmon } for pid=2821 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:55.253000 audit[2821]: AVC avc: denied { perfmon } for pid=2821 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:55.253000 audit[2821]: AVC avc: denied { perfmon } for pid=2821 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:55.253000 audit[2821]: AVC avc: denied { bpf } for pid=2821 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:55.253000 audit[2821]: AVC avc: denied { bpf } for pid=2821 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:38:55.253000 audit: BPF prog-id=126 op=LOAD May 17 00:38:55.253000 audit[2821]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0000a11b8 items=0 ppid=2615 pid=2821 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:38:55.253000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6435343865653261636230643339336664383863383465323938343361 May 17 00:38:55.276646 env[1634]: time="2025-05-17T00:38:55.276591595Z" level=info msg="StartContainer for \"d548ee2acb0d393fd88c84e29843adc15c60d3b441b9951623712d26ed93a845\" returns successfully" May 17 00:38:55.533384 kubelet[2516]: I0517 00:38:55.533139 2516 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-proxy-z6g9v" podStartSLOduration=4.533117322 podStartE2EDuration="4.533117322s" podCreationTimestamp="2025-05-17 00:38:51 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-05-17 00:38:53.537680437 +0000 UTC m=+5.407941646" watchObservedRunningTime="2025-05-17 00:38:55.533117322 +0000 UTC m=+7.403378538" May 17 00:38:58.098757 kubelet[2516]: I0517 00:38:58.098671 2516 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="tigera-operator/tigera-operator-844669ff44-ksvbv" podStartSLOduration=3.631659236 podStartE2EDuration="6.098647739s" podCreationTimestamp="2025-05-17 00:38:52 +0000 UTC" firstStartedPulling="2025-05-17 00:38:52.6942564 +0000 UTC m=+4.564517595" lastFinishedPulling="2025-05-17 00:38:55.161244903 +0000 UTC m=+7.031506098" observedRunningTime="2025-05-17 00:38:55.535114284 +0000 UTC m=+7.405375500" watchObservedRunningTime="2025-05-17 00:38:58.098647739 +0000 UTC m=+9.968908957" May 17 00:38:59.026576 amazon-ssm-agent[1712]: 2025-05-17 00:38:59 INFO [MessagingDeliveryService] [Association] Schedule manager refreshed with 0 associations, 0 new associations associated May 17 00:38:59.805292 update_engine[1623]: I0517 00:38:59.805238 1623 update_attempter.cc:509] Updating boot flags... May 17 00:39:02.662328 sudo[1899]: pam_unix(sudo:session): session closed for user root May 17 00:39:02.674715 kernel: kauditd_printk_skb: 200 callbacks suppressed May 17 00:39:02.675027 kernel: audit: type=1106 audit(1747442342.660:888): pid=1899 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' May 17 00:39:02.660000 audit[1899]: USER_END pid=1899 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' May 17 00:39:02.660000 audit[1899]: CRED_DISP pid=1899 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' May 17 00:39:02.692793 kernel: audit: type=1104 audit(1747442342.660:889): pid=1899 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' May 17 00:39:02.723213 sshd[1896]: pam_unix(sshd:session): session closed for user core May 17 00:39:02.724000 audit[1896]: USER_END pid=1896 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' May 17 00:39:02.736795 kernel: audit: type=1106 audit(1747442342.724:890): pid=1896 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' May 17 00:39:02.725000 audit[1896]: CRED_DISP pid=1896 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' May 17 00:39:02.749799 kernel: audit: type=1104 audit(1747442342.725:891): pid=1896 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' May 17 00:39:02.752212 systemd[1]: sshd@6-172.31.30.240:22-139.178.68.195:49484.service: Deactivated successfully. May 17 00:39:02.750000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-172.31.30.240:22-139.178.68.195:49484 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:39:02.753844 systemd[1]: session-7.scope: Deactivated successfully. May 17 00:39:02.754031 systemd[1]: session-7.scope: Consumed 6.150s CPU time. May 17 00:39:02.754981 systemd-logind[1620]: Session 7 logged out. Waiting for processes to exit. May 17 00:39:02.762893 kernel: audit: type=1131 audit(1747442342.750:892): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-172.31.30.240:22-139.178.68.195:49484 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:39:02.763085 systemd-logind[1620]: Removed session 7. May 17 00:39:04.114000 audit[2995]: NETFILTER_CFG table=filter:89 family=2 entries=15 op=nft_register_rule pid=2995 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" May 17 00:39:04.114000 audit[2995]: SYSCALL arch=c000003e syscall=46 success=yes exit=5992 a0=3 a1=7fff574aee40 a2=0 a3=7fff574aee2c items=0 ppid=2660 pid=2995 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:04.130989 kernel: audit: type=1325 audit(1747442344.114:893): table=filter:89 family=2 entries=15 op=nft_register_rule pid=2995 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" May 17 00:39:04.131156 kernel: audit: type=1300 audit(1747442344.114:893): arch=c000003e syscall=46 success=yes exit=5992 a0=3 a1=7fff574aee40 a2=0 a3=7fff574aee2c items=0 ppid=2660 pid=2995 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:04.114000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 May 17 00:39:04.134000 audit[2995]: NETFILTER_CFG table=nat:90 family=2 entries=12 op=nft_register_rule pid=2995 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" May 17 00:39:04.144381 kernel: audit: type=1327 audit(1747442344.114:893): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 May 17 00:39:04.144540 kernel: audit: type=1325 audit(1747442344.134:894): table=nat:90 family=2 entries=12 op=nft_register_rule pid=2995 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" May 17 00:39:04.134000 audit[2995]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7fff574aee40 a2=0 a3=0 items=0 ppid=2660 pid=2995 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:04.156811 kernel: audit: type=1300 audit(1747442344.134:894): arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7fff574aee40 a2=0 a3=0 items=0 ppid=2660 pid=2995 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:04.134000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 May 17 00:39:04.164000 audit[2997]: NETFILTER_CFG table=filter:91 family=2 entries=16 op=nft_register_rule pid=2997 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" May 17 00:39:04.164000 audit[2997]: SYSCALL arch=c000003e syscall=46 success=yes exit=5992 a0=3 a1=7ffc27eef2f0 a2=0 a3=7ffc27eef2dc items=0 ppid=2660 pid=2997 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:04.164000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 May 17 00:39:04.169000 audit[2997]: NETFILTER_CFG table=nat:92 family=2 entries=12 op=nft_register_rule pid=2997 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" May 17 00:39:04.169000 audit[2997]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffc27eef2f0 a2=0 a3=0 items=0 ppid=2660 pid=2997 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:04.169000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 May 17 00:39:07.130000 audit[2999]: NETFILTER_CFG table=filter:93 family=2 entries=17 op=nft_register_rule pid=2999 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" May 17 00:39:07.130000 audit[2999]: SYSCALL arch=c000003e syscall=46 success=yes exit=6736 a0=3 a1=7ffc96f3d240 a2=0 a3=7ffc96f3d22c items=0 ppid=2660 pid=2999 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:07.130000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 May 17 00:39:07.138000 audit[2999]: NETFILTER_CFG table=nat:94 family=2 entries=12 op=nft_register_rule pid=2999 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" May 17 00:39:07.138000 audit[2999]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffc96f3d240 a2=0 a3=0 items=0 ppid=2660 pid=2999 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:07.138000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 May 17 00:39:07.164000 audit[3001]: NETFILTER_CFG table=filter:95 family=2 entries=18 op=nft_register_rule pid=3001 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" May 17 00:39:07.164000 audit[3001]: SYSCALL arch=c000003e syscall=46 success=yes exit=6736 a0=3 a1=7ffeabd12060 a2=0 a3=7ffeabd1204c items=0 ppid=2660 pid=3001 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:07.164000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 May 17 00:39:07.171000 audit[3001]: NETFILTER_CFG table=nat:96 family=2 entries=12 op=nft_register_rule pid=3001 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" May 17 00:39:07.171000 audit[3001]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffeabd12060 a2=0 a3=0 items=0 ppid=2660 pid=3001 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:07.171000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 May 17 00:39:07.617681 systemd[1]: Created slice kubepods-besteffort-pod15ed03fe_dccb_4977_a266_68cf310ea086.slice. May 17 00:39:07.745067 kubelet[2516]: I0517 00:39:07.744915 2516 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"typha-certs\" (UniqueName: \"kubernetes.io/secret/15ed03fe-dccb-4977-a266-68cf310ea086-typha-certs\") pod \"calico-typha-5d6ffc544f-krtwj\" (UID: \"15ed03fe-dccb-4977-a266-68cf310ea086\") " pod="calico-system/calico-typha-5d6ffc544f-krtwj" May 17 00:39:07.745532 kubelet[2516]: I0517 00:39:07.745153 2516 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-jv7xb\" (UniqueName: \"kubernetes.io/projected/15ed03fe-dccb-4977-a266-68cf310ea086-kube-api-access-jv7xb\") pod \"calico-typha-5d6ffc544f-krtwj\" (UID: \"15ed03fe-dccb-4977-a266-68cf310ea086\") " pod="calico-system/calico-typha-5d6ffc544f-krtwj" May 17 00:39:07.745532 kubelet[2516]: I0517 00:39:07.745216 2516 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/15ed03fe-dccb-4977-a266-68cf310ea086-tigera-ca-bundle\") pod \"calico-typha-5d6ffc544f-krtwj\" (UID: \"15ed03fe-dccb-4977-a266-68cf310ea086\") " pod="calico-system/calico-typha-5d6ffc544f-krtwj" May 17 00:39:07.836365 systemd[1]: Created slice kubepods-besteffort-podbcf936ab_217e_475c_a93a_9272b5225174.slice. May 17 00:39:07.845670 kubelet[2516]: I0517 00:39:07.845604 2516 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/bcf936ab-217e-475c-a93a-9272b5225174-tigera-ca-bundle\") pod \"calico-node-8x4d4\" (UID: \"bcf936ab-217e-475c-a93a-9272b5225174\") " pod="calico-system/calico-node-8x4d4" May 17 00:39:07.845841 kubelet[2516]: I0517 00:39:07.845681 2516 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-run-calico\" (UniqueName: \"kubernetes.io/host-path/bcf936ab-217e-475c-a93a-9272b5225174-var-run-calico\") pod \"calico-node-8x4d4\" (UID: \"bcf936ab-217e-475c-a93a-9272b5225174\") " pod="calico-system/calico-node-8x4d4" May 17 00:39:07.845841 kubelet[2516]: I0517 00:39:07.845717 2516 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/bcf936ab-217e-475c-a93a-9272b5225174-xtables-lock\") pod \"calico-node-8x4d4\" (UID: \"bcf936ab-217e-475c-a93a-9272b5225174\") " pod="calico-system/calico-node-8x4d4" May 17 00:39:07.845841 kubelet[2516]: I0517 00:39:07.845733 2516 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-gqgnf\" (UniqueName: \"kubernetes.io/projected/bcf936ab-217e-475c-a93a-9272b5225174-kube-api-access-gqgnf\") pod \"calico-node-8x4d4\" (UID: \"bcf936ab-217e-475c-a93a-9272b5225174\") " pod="calico-system/calico-node-8x4d4" May 17 00:39:07.846203 kubelet[2516]: I0517 00:39:07.846185 2516 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-log-dir\" (UniqueName: \"kubernetes.io/host-path/bcf936ab-217e-475c-a93a-9272b5225174-cni-log-dir\") pod \"calico-node-8x4d4\" (UID: \"bcf936ab-217e-475c-a93a-9272b5225174\") " pod="calico-system/calico-node-8x4d4" May 17 00:39:07.846250 kubelet[2516]: I0517 00:39:07.846212 2516 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvol-driver-host\" (UniqueName: \"kubernetes.io/host-path/bcf936ab-217e-475c-a93a-9272b5225174-flexvol-driver-host\") pod \"calico-node-8x4d4\" (UID: \"bcf936ab-217e-475c-a93a-9272b5225174\") " pod="calico-system/calico-node-8x4d4" May 17 00:39:07.846283 kubelet[2516]: I0517 00:39:07.846259 2516 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-net-dir\" (UniqueName: \"kubernetes.io/host-path/bcf936ab-217e-475c-a93a-9272b5225174-cni-net-dir\") pod \"calico-node-8x4d4\" (UID: \"bcf936ab-217e-475c-a93a-9272b5225174\") " pod="calico-system/calico-node-8x4d4" May 17 00:39:07.846283 kubelet[2516]: I0517 00:39:07.846274 2516 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"policysync\" (UniqueName: \"kubernetes.io/host-path/bcf936ab-217e-475c-a93a-9272b5225174-policysync\") pod \"calico-node-8x4d4\" (UID: \"bcf936ab-217e-475c-a93a-9272b5225174\") " pod="calico-system/calico-node-8x4d4" May 17 00:39:07.846336 kubelet[2516]: I0517 00:39:07.846309 2516 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-bin-dir\" (UniqueName: \"kubernetes.io/host-path/bcf936ab-217e-475c-a93a-9272b5225174-cni-bin-dir\") pod \"calico-node-8x4d4\" (UID: \"bcf936ab-217e-475c-a93a-9272b5225174\") " pod="calico-system/calico-node-8x4d4" May 17 00:39:07.846336 kubelet[2516]: I0517 00:39:07.846323 2516 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"node-certs\" (UniqueName: \"kubernetes.io/secret/bcf936ab-217e-475c-a93a-9272b5225174-node-certs\") pod \"calico-node-8x4d4\" (UID: \"bcf936ab-217e-475c-a93a-9272b5225174\") " pod="calico-system/calico-node-8x4d4" May 17 00:39:07.846396 kubelet[2516]: I0517 00:39:07.846345 2516 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/bcf936ab-217e-475c-a93a-9272b5225174-lib-modules\") pod \"calico-node-8x4d4\" (UID: \"bcf936ab-217e-475c-a93a-9272b5225174\") " pod="calico-system/calico-node-8x4d4" May 17 00:39:07.846396 kubelet[2516]: I0517 00:39:07.846358 2516 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/bcf936ab-217e-475c-a93a-9272b5225174-var-lib-calico\") pod \"calico-node-8x4d4\" (UID: \"bcf936ab-217e-475c-a93a-9272b5225174\") " pod="calico-system/calico-node-8x4d4" May 17 00:39:07.929610 env[1634]: time="2025-05-17T00:39:07.929484623Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-5d6ffc544f-krtwj,Uid:15ed03fe-dccb-4977-a266-68cf310ea086,Namespace:calico-system,Attempt:0,}" May 17 00:39:07.957472 kubelet[2516]: E0517 00:39:07.957445 2516 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input May 17 00:39:07.957628 kubelet[2516]: W0517 00:39:07.957612 2516 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" May 17 00:39:07.959361 kubelet[2516]: E0517 00:39:07.959033 2516 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" May 17 00:39:07.961818 kubelet[2516]: E0517 00:39:07.961796 2516 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input May 17 00:39:07.961988 kubelet[2516]: W0517 00:39:07.961972 2516 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" May 17 00:39:07.962076 kubelet[2516]: E0517 00:39:07.962063 2516 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" May 17 00:39:07.962435 kubelet[2516]: E0517 00:39:07.962421 2516 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input May 17 00:39:07.962540 kubelet[2516]: W0517 00:39:07.962528 2516 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" May 17 00:39:07.962615 kubelet[2516]: E0517 00:39:07.962604 2516 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" May 17 00:39:07.962984 kubelet[2516]: E0517 00:39:07.962970 2516 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input May 17 00:39:07.963082 kubelet[2516]: W0517 00:39:07.963069 2516 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" May 17 00:39:07.963278 kubelet[2516]: E0517 00:39:07.963250 2516 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" May 17 00:39:07.963616 kubelet[2516]: E0517 00:39:07.963601 2516 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input May 17 00:39:07.963709 kubelet[2516]: W0517 00:39:07.963695 2516 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" May 17 00:39:07.963825 kubelet[2516]: E0517 00:39:07.963811 2516 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" May 17 00:39:07.964149 kubelet[2516]: E0517 00:39:07.964135 2516 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input May 17 00:39:07.964243 kubelet[2516]: W0517 00:39:07.964229 2516 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" May 17 00:39:07.964331 kubelet[2516]: E0517 00:39:07.964319 2516 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" May 17 00:39:07.964648 kubelet[2516]: E0517 00:39:07.964634 2516 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input May 17 00:39:07.964747 kubelet[2516]: W0517 00:39:07.964734 2516 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" May 17 00:39:07.964852 kubelet[2516]: E0517 00:39:07.964840 2516 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" May 17 00:39:07.965147 kubelet[2516]: E0517 00:39:07.965137 2516 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input May 17 00:39:07.965233 kubelet[2516]: W0517 00:39:07.965222 2516 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" May 17 00:39:07.965372 kubelet[2516]: E0517 00:39:07.965359 2516 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" May 17 00:39:07.965679 kubelet[2516]: E0517 00:39:07.965668 2516 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input May 17 00:39:07.965800 kubelet[2516]: W0517 00:39:07.965762 2516 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" May 17 00:39:07.965900 kubelet[2516]: E0517 00:39:07.965886 2516 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" May 17 00:39:07.966207 kubelet[2516]: E0517 00:39:07.966193 2516 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input May 17 00:39:07.966316 kubelet[2516]: W0517 00:39:07.966303 2516 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" May 17 00:39:07.966401 kubelet[2516]: E0517 00:39:07.966389 2516 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" May 17 00:39:07.971666 kubelet[2516]: E0517 00:39:07.971644 2516 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input May 17 00:39:07.971837 kubelet[2516]: W0517 00:39:07.971815 2516 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" May 17 00:39:07.971959 kubelet[2516]: E0517 00:39:07.971945 2516 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" May 17 00:39:07.982790 kubelet[2516]: E0517 00:39:07.982735 2516 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input May 17 00:39:07.982959 kubelet[2516]: W0517 00:39:07.982938 2516 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" May 17 00:39:07.983068 kubelet[2516]: E0517 00:39:07.983054 2516 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" May 17 00:39:07.983992 env[1634]: time="2025-05-17T00:39:07.980876174Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 May 17 00:39:07.983992 env[1634]: time="2025-05-17T00:39:07.980935281Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 May 17 00:39:07.983992 env[1634]: time="2025-05-17T00:39:07.980951499Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 May 17 00:39:07.983992 env[1634]: time="2025-05-17T00:39:07.981145544Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/d3d4401c536f19d6722232d6790e709d3e0ddb8b0c7f7c77e5e5e1c9b86a5750 pid=3027 runtime=io.containerd.runc.v2 May 17 00:39:07.988256 kubelet[2516]: E0517 00:39:07.986956 2516 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input May 17 00:39:07.988256 kubelet[2516]: W0517 00:39:07.986973 2516 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" May 17 00:39:07.988256 kubelet[2516]: E0517 00:39:07.987019 2516 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" May 17 00:39:07.988404 kubelet[2516]: E0517 00:39:07.988387 2516 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input May 17 00:39:07.988447 kubelet[2516]: W0517 00:39:07.988406 2516 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" May 17 00:39:07.988447 kubelet[2516]: E0517 00:39:07.988430 2516 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" May 17 00:39:07.990601 kubelet[2516]: E0517 00:39:07.988731 2516 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input May 17 00:39:07.990601 kubelet[2516]: W0517 00:39:07.988746 2516 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" May 17 00:39:07.990601 kubelet[2516]: E0517 00:39:07.988762 2516 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" May 17 00:39:07.990601 kubelet[2516]: E0517 00:39:07.989030 2516 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input May 17 00:39:07.990601 kubelet[2516]: W0517 00:39:07.989042 2516 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" May 17 00:39:07.990601 kubelet[2516]: E0517 00:39:07.989056 2516 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" May 17 00:39:07.990601 kubelet[2516]: E0517 00:39:07.989466 2516 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input May 17 00:39:07.990601 kubelet[2516]: W0517 00:39:07.989480 2516 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" May 17 00:39:07.990601 kubelet[2516]: E0517 00:39:07.989678 2516 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" May 17 00:39:07.990601 kubelet[2516]: E0517 00:39:07.990079 2516 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input May 17 00:39:07.991398 kubelet[2516]: W0517 00:39:07.990091 2516 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" May 17 00:39:07.991398 kubelet[2516]: E0517 00:39:07.990123 2516 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" May 17 00:39:07.991398 kubelet[2516]: E0517 00:39:07.990557 2516 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input May 17 00:39:07.991398 kubelet[2516]: W0517 00:39:07.990585 2516 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" May 17 00:39:07.991398 kubelet[2516]: E0517 00:39:07.990601 2516 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" May 17 00:39:07.991398 kubelet[2516]: E0517 00:39:07.990898 2516 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input May 17 00:39:07.991398 kubelet[2516]: W0517 00:39:07.990909 2516 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" May 17 00:39:07.991398 kubelet[2516]: E0517 00:39:07.990922 2516 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" May 17 00:39:07.991398 kubelet[2516]: E0517 00:39:07.991184 2516 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input May 17 00:39:07.991398 kubelet[2516]: W0517 00:39:07.991195 2516 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" May 17 00:39:07.991908 kubelet[2516]: E0517 00:39:07.991209 2516 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" May 17 00:39:07.991908 kubelet[2516]: E0517 00:39:07.991525 2516 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input May 17 00:39:07.991908 kubelet[2516]: W0517 00:39:07.991536 2516 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" May 17 00:39:07.991908 kubelet[2516]: E0517 00:39:07.991549 2516 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" May 17 00:39:07.991908 kubelet[2516]: E0517 00:39:07.991853 2516 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input May 17 00:39:07.991908 kubelet[2516]: W0517 00:39:07.991864 2516 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" May 17 00:39:07.991908 kubelet[2516]: E0517 00:39:07.991876 2516 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" May 17 00:39:08.006223 systemd[1]: Started cri-containerd-d3d4401c536f19d6722232d6790e709d3e0ddb8b0c7f7c77e5e5e1c9b86a5750.scope. May 17 00:39:08.037513 kernel: kauditd_printk_skb: 19 callbacks suppressed May 17 00:39:08.037643 kernel: audit: type=1400 audit(1747442348.027:901): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:08.027000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:08.027000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:08.044862 kernel: audit: type=1400 audit(1747442348.027:902): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:08.027000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:08.055801 kernel: audit: type=1400 audit(1747442348.027:903): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:08.027000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:08.068799 kernel: audit: type=1400 audit(1747442348.027:904): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:08.027000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:08.075799 kernel: audit: type=1400 audit(1747442348.027:905): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:08.027000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:08.086793 kernel: audit: type=1400 audit(1747442348.027:906): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:08.027000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:08.097804 kernel: audit: type=1400 audit(1747442348.027:907): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:08.027000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:08.116660 kernel: audit: type=1400 audit(1747442348.027:908): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:08.116833 kernel: audit: type=1400 audit(1747442348.027:909): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:08.027000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:08.116952 env[1634]: time="2025-05-17T00:39:08.111324011Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-5d6ffc544f-krtwj,Uid:15ed03fe-dccb-4977-a266-68cf310ea086,Namespace:calico-system,Attempt:0,} returns sandbox id \"d3d4401c536f19d6722232d6790e709d3e0ddb8b0c7f7c77e5e5e1c9b86a5750\"" May 17 00:39:08.035000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:08.123875 kernel: audit: type=1400 audit(1747442348.035:910): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:08.127081 env[1634]: time="2025-05-17T00:39:08.127022765Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.30.0\"" May 17 00:39:08.035000 audit: BPF prog-id=127 op=LOAD May 17 00:39:08.036000 audit[3048]: AVC avc: denied { bpf } for pid=3048 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:08.036000 audit[3048]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000199c48 a2=10 a3=1c items=0 ppid=3027 pid=3048 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:08.036000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6433643434303163353336663139643637323232333264363739306537 May 17 00:39:08.036000 audit[3048]: AVC avc: denied { perfmon } for pid=3048 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:08.036000 audit[3048]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001996b0 a2=3c a3=c items=0 ppid=3027 pid=3048 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:08.036000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6433643434303163353336663139643637323232333264363739306537 May 17 00:39:08.036000 audit[3048]: AVC avc: denied { bpf } for pid=3048 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:08.036000 audit[3048]: AVC avc: denied { bpf } for pid=3048 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:08.036000 audit[3048]: AVC avc: denied { bpf } for pid=3048 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:08.036000 audit[3048]: AVC avc: denied { perfmon } for pid=3048 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:08.036000 audit[3048]: AVC avc: denied { perfmon } for pid=3048 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:08.036000 audit[3048]: AVC avc: denied { perfmon } for pid=3048 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:08.036000 audit[3048]: AVC avc: denied { perfmon } for pid=3048 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:08.036000 audit[3048]: AVC avc: denied { perfmon } for pid=3048 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:08.036000 audit[3048]: AVC avc: denied { bpf } for pid=3048 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:08.036000 audit[3048]: AVC avc: denied { bpf } for pid=3048 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:08.036000 audit: BPF prog-id=128 op=LOAD May 17 00:39:08.036000 audit[3048]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001999d8 a2=78 a3=c000219050 items=0 ppid=3027 pid=3048 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:08.036000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6433643434303163353336663139643637323232333264363739306537 May 17 00:39:08.043000 audit[3048]: AVC avc: denied { bpf } for pid=3048 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:08.043000 audit[3048]: AVC avc: denied { bpf } for pid=3048 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:08.043000 audit[3048]: AVC avc: denied { perfmon } for pid=3048 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:08.043000 audit[3048]: AVC avc: denied { perfmon } for pid=3048 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:08.043000 audit[3048]: AVC avc: denied { perfmon } for pid=3048 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:08.043000 audit[3048]: AVC avc: denied { perfmon } for pid=3048 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:08.043000 audit[3048]: AVC avc: denied { perfmon } for pid=3048 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:08.043000 audit[3048]: AVC avc: denied { bpf } for pid=3048 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:08.043000 audit[3048]: AVC avc: denied { bpf } for pid=3048 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:08.043000 audit: BPF prog-id=129 op=LOAD May 17 00:39:08.043000 audit[3048]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000199770 a2=78 a3=c000219098 items=0 ppid=3027 pid=3048 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:08.043000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6433643434303163353336663139643637323232333264363739306537 May 17 00:39:08.043000 audit: BPF prog-id=129 op=UNLOAD May 17 00:39:08.043000 audit: BPF prog-id=128 op=UNLOAD May 17 00:39:08.043000 audit[3048]: AVC avc: denied { bpf } for pid=3048 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:08.043000 audit[3048]: AVC avc: denied { bpf } for pid=3048 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:08.043000 audit[3048]: AVC avc: denied { bpf } for pid=3048 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:08.043000 audit[3048]: AVC avc: denied { perfmon } for pid=3048 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:08.043000 audit[3048]: AVC avc: denied { perfmon } for pid=3048 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:08.043000 audit[3048]: AVC avc: denied { perfmon } for pid=3048 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:08.043000 audit[3048]: AVC avc: denied { perfmon } for pid=3048 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:08.043000 audit[3048]: AVC avc: denied { perfmon } for pid=3048 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:08.043000 audit[3048]: AVC avc: denied { bpf } for pid=3048 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:08.043000 audit[3048]: AVC avc: denied { bpf } for pid=3048 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:08.043000 audit: BPF prog-id=130 op=LOAD May 17 00:39:08.043000 audit[3048]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000199c30 a2=78 a3=c0002194a8 items=0 ppid=3027 pid=3048 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:08.043000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6433643434303163353336663139643637323232333264363739306537 May 17 00:39:08.140524 env[1634]: time="2025-05-17T00:39:08.140049763Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-8x4d4,Uid:bcf936ab-217e-475c-a93a-9272b5225174,Namespace:calico-system,Attempt:0,}" May 17 00:39:08.178562 env[1634]: time="2025-05-17T00:39:08.178472120Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 May 17 00:39:08.178741 env[1634]: time="2025-05-17T00:39:08.178585522Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 May 17 00:39:08.178741 env[1634]: time="2025-05-17T00:39:08.178618863Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 May 17 00:39:08.178860 env[1634]: time="2025-05-17T00:39:08.178828408Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/1cf5fca20aad918de71d2fda89c2b52db15831aa913a77f3c60be4eea02709a6 pid=3078 runtime=io.containerd.runc.v2 May 17 00:39:08.195000 audit[3095]: NETFILTER_CFG table=filter:97 family=2 entries=20 op=nft_register_rule pid=3095 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" May 17 00:39:08.195000 audit[3095]: SYSCALL arch=c000003e syscall=46 success=yes exit=8224 a0=3 a1=7ffd2bb832c0 a2=0 a3=7ffd2bb832ac items=0 ppid=2660 pid=3095 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:08.195000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 May 17 00:39:08.202312 kubelet[2516]: E0517 00:39:08.195228 2516 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-g8dpg" podUID="ccf5c16c-a554-4978-bf48-ec245cb3b696" May 17 00:39:08.206000 audit[3095]: NETFILTER_CFG table=nat:98 family=2 entries=12 op=nft_register_rule pid=3095 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" May 17 00:39:08.206000 audit[3095]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffd2bb832c0 a2=0 a3=0 items=0 ppid=2660 pid=3095 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:08.206000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 May 17 00:39:08.218677 systemd[1]: Started cri-containerd-1cf5fca20aad918de71d2fda89c2b52db15831aa913a77f3c60be4eea02709a6.scope. May 17 00:39:08.248966 kubelet[2516]: E0517 00:39:08.248928 2516 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input May 17 00:39:08.248966 kubelet[2516]: W0517 00:39:08.248961 2516 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" May 17 00:39:08.249183 kubelet[2516]: E0517 00:39:08.248992 2516 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" May 17 00:39:08.249235 kubelet[2516]: E0517 00:39:08.249227 2516 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input May 17 00:39:08.249299 kubelet[2516]: W0517 00:39:08.249239 2516 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" May 17 00:39:08.249299 kubelet[2516]: E0517 00:39:08.249253 2516 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" May 17 00:39:08.249488 kubelet[2516]: E0517 00:39:08.249469 2516 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input May 17 00:39:08.249488 kubelet[2516]: W0517 00:39:08.249486 2516 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" May 17 00:39:08.249604 kubelet[2516]: E0517 00:39:08.249500 2516 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" May 17 00:39:08.249784 kubelet[2516]: E0517 00:39:08.249758 2516 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input May 17 00:39:08.249864 kubelet[2516]: W0517 00:39:08.249784 2516 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" May 17 00:39:08.249864 kubelet[2516]: E0517 00:39:08.249798 2516 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" May 17 00:39:08.250096 kubelet[2516]: E0517 00:39:08.250072 2516 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input May 17 00:39:08.250096 kubelet[2516]: W0517 00:39:08.250088 2516 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" May 17 00:39:08.250231 kubelet[2516]: E0517 00:39:08.250102 2516 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" May 17 00:39:08.250317 kubelet[2516]: E0517 00:39:08.250302 2516 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input May 17 00:39:08.250390 kubelet[2516]: W0517 00:39:08.250317 2516 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" May 17 00:39:08.250390 kubelet[2516]: E0517 00:39:08.250330 2516 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" May 17 00:39:08.250592 kubelet[2516]: E0517 00:39:08.250520 2516 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input May 17 00:39:08.250592 kubelet[2516]: W0517 00:39:08.250531 2516 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" May 17 00:39:08.250592 kubelet[2516]: E0517 00:39:08.250543 2516 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" May 17 00:39:08.250795 kubelet[2516]: E0517 00:39:08.250734 2516 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input May 17 00:39:08.250795 kubelet[2516]: W0517 00:39:08.250744 2516 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" May 17 00:39:08.250795 kubelet[2516]: E0517 00:39:08.250758 2516 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" May 17 00:39:08.251047 kubelet[2516]: E0517 00:39:08.251014 2516 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input May 17 00:39:08.251047 kubelet[2516]: W0517 00:39:08.251027 2516 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" May 17 00:39:08.251047 kubelet[2516]: E0517 00:39:08.251040 2516 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" May 17 00:39:08.252122 kubelet[2516]: E0517 00:39:08.251246 2516 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input May 17 00:39:08.252122 kubelet[2516]: W0517 00:39:08.251258 2516 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" May 17 00:39:08.252122 kubelet[2516]: E0517 00:39:08.251270 2516 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" May 17 00:39:08.252122 kubelet[2516]: E0517 00:39:08.251458 2516 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input May 17 00:39:08.252122 kubelet[2516]: W0517 00:39:08.251468 2516 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" May 17 00:39:08.252122 kubelet[2516]: E0517 00:39:08.251479 2516 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" May 17 00:39:08.252122 kubelet[2516]: E0517 00:39:08.251666 2516 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input May 17 00:39:08.252122 kubelet[2516]: W0517 00:39:08.251675 2516 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" May 17 00:39:08.252122 kubelet[2516]: E0517 00:39:08.251686 2516 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" May 17 00:39:08.252122 kubelet[2516]: E0517 00:39:08.251938 2516 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input May 17 00:39:08.252699 kubelet[2516]: W0517 00:39:08.251949 2516 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" May 17 00:39:08.252699 kubelet[2516]: E0517 00:39:08.251961 2516 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" May 17 00:39:08.252699 kubelet[2516]: E0517 00:39:08.252151 2516 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input May 17 00:39:08.252699 kubelet[2516]: W0517 00:39:08.252160 2516 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" May 17 00:39:08.252699 kubelet[2516]: E0517 00:39:08.252171 2516 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" May 17 00:39:08.252699 kubelet[2516]: E0517 00:39:08.252360 2516 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input May 17 00:39:08.252699 kubelet[2516]: W0517 00:39:08.252369 2516 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" May 17 00:39:08.252699 kubelet[2516]: E0517 00:39:08.252381 2516 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" May 17 00:39:08.252699 kubelet[2516]: E0517 00:39:08.252588 2516 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input May 17 00:39:08.252699 kubelet[2516]: W0517 00:39:08.252598 2516 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" May 17 00:39:08.253325 kubelet[2516]: E0517 00:39:08.252610 2516 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" May 17 00:39:08.253325 kubelet[2516]: E0517 00:39:08.252835 2516 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input May 17 00:39:08.253325 kubelet[2516]: W0517 00:39:08.252846 2516 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" May 17 00:39:08.253325 kubelet[2516]: E0517 00:39:08.252857 2516 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" May 17 00:39:08.253325 kubelet[2516]: E0517 00:39:08.253059 2516 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input May 17 00:39:08.253325 kubelet[2516]: W0517 00:39:08.253068 2516 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" May 17 00:39:08.253325 kubelet[2516]: E0517 00:39:08.253079 2516 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" May 17 00:39:08.253325 kubelet[2516]: E0517 00:39:08.253256 2516 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input May 17 00:39:08.253325 kubelet[2516]: W0517 00:39:08.253265 2516 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" May 17 00:39:08.253325 kubelet[2516]: E0517 00:39:08.253278 2516 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" May 17 00:39:08.253814 kubelet[2516]: E0517 00:39:08.253467 2516 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input May 17 00:39:08.253814 kubelet[2516]: W0517 00:39:08.253475 2516 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" May 17 00:39:08.253814 kubelet[2516]: E0517 00:39:08.253486 2516 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" May 17 00:39:08.253952 kubelet[2516]: E0517 00:39:08.253888 2516 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input May 17 00:39:08.253952 kubelet[2516]: W0517 00:39:08.253900 2516 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" May 17 00:39:08.253952 kubelet[2516]: E0517 00:39:08.253912 2516 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" May 17 00:39:08.253952 kubelet[2516]: I0517 00:39:08.253945 2516 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"registration-dir\" (UniqueName: \"kubernetes.io/host-path/ccf5c16c-a554-4978-bf48-ec245cb3b696-registration-dir\") pod \"csi-node-driver-g8dpg\" (UID: \"ccf5c16c-a554-4978-bf48-ec245cb3b696\") " pod="calico-system/csi-node-driver-g8dpg" May 17 00:39:08.256323 kubelet[2516]: E0517 00:39:08.254179 2516 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input May 17 00:39:08.256323 kubelet[2516]: W0517 00:39:08.254192 2516 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" May 17 00:39:08.256323 kubelet[2516]: E0517 00:39:08.254204 2516 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" May 17 00:39:08.256323 kubelet[2516]: I0517 00:39:08.254231 2516 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"varrun\" (UniqueName: \"kubernetes.io/host-path/ccf5c16c-a554-4978-bf48-ec245cb3b696-varrun\") pod \"csi-node-driver-g8dpg\" (UID: \"ccf5c16c-a554-4978-bf48-ec245cb3b696\") " pod="calico-system/csi-node-driver-g8dpg" May 17 00:39:08.256323 kubelet[2516]: E0517 00:39:08.254478 2516 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input May 17 00:39:08.256323 kubelet[2516]: W0517 00:39:08.254490 2516 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" May 17 00:39:08.256323 kubelet[2516]: E0517 00:39:08.254502 2516 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" May 17 00:39:08.256323 kubelet[2516]: I0517 00:39:08.254526 2516 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"socket-dir\" (UniqueName: \"kubernetes.io/host-path/ccf5c16c-a554-4978-bf48-ec245cb3b696-socket-dir\") pod \"csi-node-driver-g8dpg\" (UID: \"ccf5c16c-a554-4978-bf48-ec245cb3b696\") " pod="calico-system/csi-node-driver-g8dpg" May 17 00:39:08.256323 kubelet[2516]: E0517 00:39:08.255910 2516 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input May 17 00:39:08.256891 kubelet[2516]: W0517 00:39:08.255926 2516 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" May 17 00:39:08.256891 kubelet[2516]: E0517 00:39:08.255942 2516 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" May 17 00:39:08.256891 kubelet[2516]: I0517 00:39:08.255972 2516 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubelet-dir\" (UniqueName: \"kubernetes.io/host-path/ccf5c16c-a554-4978-bf48-ec245cb3b696-kubelet-dir\") pod \"csi-node-driver-g8dpg\" (UID: \"ccf5c16c-a554-4978-bf48-ec245cb3b696\") " pod="calico-system/csi-node-driver-g8dpg" May 17 00:39:08.256891 kubelet[2516]: E0517 00:39:08.256278 2516 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input May 17 00:39:08.256891 kubelet[2516]: W0517 00:39:08.256292 2516 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" May 17 00:39:08.256891 kubelet[2516]: E0517 00:39:08.256306 2516 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" May 17 00:39:08.256891 kubelet[2516]: I0517 00:39:08.256421 2516 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-64jwg\" (UniqueName: \"kubernetes.io/projected/ccf5c16c-a554-4978-bf48-ec245cb3b696-kube-api-access-64jwg\") pod \"csi-node-driver-g8dpg\" (UID: \"ccf5c16c-a554-4978-bf48-ec245cb3b696\") " pod="calico-system/csi-node-driver-g8dpg" May 17 00:39:08.256891 kubelet[2516]: E0517 00:39:08.256580 2516 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input May 17 00:39:08.257280 kubelet[2516]: W0517 00:39:08.256589 2516 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" May 17 00:39:08.257280 kubelet[2516]: E0517 00:39:08.256601 2516 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" May 17 00:39:08.257280 kubelet[2516]: E0517 00:39:08.256820 2516 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input May 17 00:39:08.257280 kubelet[2516]: W0517 00:39:08.256830 2516 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" May 17 00:39:08.257280 kubelet[2516]: E0517 00:39:08.256841 2516 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" May 17 00:39:08.257280 kubelet[2516]: E0517 00:39:08.257062 2516 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input May 17 00:39:08.257280 kubelet[2516]: W0517 00:39:08.257072 2516 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" May 17 00:39:08.257280 kubelet[2516]: E0517 00:39:08.257083 2516 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" May 17 00:39:08.257280 kubelet[2516]: E0517 00:39:08.257273 2516 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input May 17 00:39:08.257280 kubelet[2516]: W0517 00:39:08.257284 2516 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" May 17 00:39:08.257728 kubelet[2516]: E0517 00:39:08.257295 2516 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" May 17 00:39:08.257728 kubelet[2516]: E0517 00:39:08.257483 2516 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input May 17 00:39:08.257728 kubelet[2516]: W0517 00:39:08.257492 2516 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" May 17 00:39:08.257728 kubelet[2516]: E0517 00:39:08.257503 2516 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" May 17 00:39:08.257728 kubelet[2516]: E0517 00:39:08.257686 2516 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input May 17 00:39:08.257728 kubelet[2516]: W0517 00:39:08.257694 2516 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" May 17 00:39:08.257728 kubelet[2516]: E0517 00:39:08.257704 2516 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" May 17 00:39:08.258103 kubelet[2516]: E0517 00:39:08.257973 2516 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input May 17 00:39:08.258103 kubelet[2516]: W0517 00:39:08.257983 2516 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" May 17 00:39:08.258103 kubelet[2516]: E0517 00:39:08.257994 2516 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" May 17 00:39:08.258236 kubelet[2516]: E0517 00:39:08.258187 2516 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input May 17 00:39:08.258236 kubelet[2516]: W0517 00:39:08.258195 2516 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" May 17 00:39:08.258236 kubelet[2516]: E0517 00:39:08.258206 2516 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" May 17 00:39:08.261882 kubelet[2516]: E0517 00:39:08.258399 2516 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input May 17 00:39:08.261882 kubelet[2516]: W0517 00:39:08.258417 2516 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" May 17 00:39:08.261882 kubelet[2516]: E0517 00:39:08.258428 2516 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" May 17 00:39:08.261882 kubelet[2516]: E0517 00:39:08.258631 2516 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input May 17 00:39:08.261882 kubelet[2516]: W0517 00:39:08.258641 2516 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" May 17 00:39:08.261882 kubelet[2516]: E0517 00:39:08.258653 2516 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" May 17 00:39:08.268000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:08.268000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:08.269000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:08.269000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:08.269000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:08.269000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:08.269000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:08.269000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:08.269000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:08.269000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:08.269000 audit: BPF prog-id=131 op=LOAD May 17 00:39:08.269000 audit[3091]: AVC avc: denied { bpf } for pid=3091 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:08.269000 audit[3091]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000199c48 a2=10 a3=1c items=0 ppid=3078 pid=3091 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:08.269000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3163663566636132306161643931386465373164326664613839633262 May 17 00:39:08.269000 audit[3091]: AVC avc: denied { perfmon } for pid=3091 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:08.269000 audit[3091]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001996b0 a2=3c a3=c items=0 ppid=3078 pid=3091 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:08.269000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3163663566636132306161643931386465373164326664613839633262 May 17 00:39:08.269000 audit[3091]: AVC avc: denied { bpf } for pid=3091 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:08.269000 audit[3091]: AVC avc: denied { bpf } for pid=3091 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:08.269000 audit[3091]: AVC avc: denied { bpf } for pid=3091 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:08.269000 audit[3091]: AVC avc: denied { perfmon } for pid=3091 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:08.269000 audit[3091]: AVC avc: denied { perfmon } for pid=3091 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:08.269000 audit[3091]: AVC avc: denied { perfmon } for pid=3091 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:08.269000 audit[3091]: AVC avc: denied { perfmon } for pid=3091 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:08.269000 audit[3091]: AVC avc: denied { perfmon } for pid=3091 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:08.269000 audit[3091]: AVC avc: denied { bpf } for pid=3091 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:08.269000 audit[3091]: AVC avc: denied { bpf } for pid=3091 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:08.269000 audit: BPF prog-id=132 op=LOAD May 17 00:39:08.269000 audit[3091]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001999d8 a2=78 a3=c000094ea0 items=0 ppid=3078 pid=3091 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:08.269000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3163663566636132306161643931386465373164326664613839633262 May 17 00:39:08.270000 audit[3091]: AVC avc: denied { bpf } for pid=3091 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:08.270000 audit[3091]: AVC avc: denied { bpf } for pid=3091 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:08.270000 audit[3091]: AVC avc: denied { perfmon } for pid=3091 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:08.270000 audit[3091]: AVC avc: denied { perfmon } for pid=3091 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:08.270000 audit[3091]: AVC avc: denied { perfmon } for pid=3091 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:08.270000 audit[3091]: AVC avc: denied { perfmon } for pid=3091 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:08.270000 audit[3091]: AVC avc: denied { perfmon } for pid=3091 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:08.270000 audit[3091]: AVC avc: denied { bpf } for pid=3091 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:08.270000 audit[3091]: AVC avc: denied { bpf } for pid=3091 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:08.270000 audit: BPF prog-id=133 op=LOAD May 17 00:39:08.270000 audit[3091]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000199770 a2=78 a3=c000094ee8 items=0 ppid=3078 pid=3091 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:08.270000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3163663566636132306161643931386465373164326664613839633262 May 17 00:39:08.270000 audit: BPF prog-id=133 op=UNLOAD May 17 00:39:08.270000 audit: BPF prog-id=132 op=UNLOAD May 17 00:39:08.270000 audit[3091]: AVC avc: denied { bpf } for pid=3091 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:08.270000 audit[3091]: AVC avc: denied { bpf } for pid=3091 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:08.270000 audit[3091]: AVC avc: denied { bpf } for pid=3091 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:08.270000 audit[3091]: AVC avc: denied { perfmon } for pid=3091 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:08.270000 audit[3091]: AVC avc: denied { perfmon } for pid=3091 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:08.270000 audit[3091]: AVC avc: denied { perfmon } for pid=3091 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:08.270000 audit[3091]: AVC avc: denied { perfmon } for pid=3091 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:08.270000 audit[3091]: AVC avc: denied { perfmon } for pid=3091 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:08.270000 audit[3091]: AVC avc: denied { bpf } for pid=3091 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:08.270000 audit[3091]: AVC avc: denied { bpf } for pid=3091 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:08.270000 audit: BPF prog-id=134 op=LOAD May 17 00:39:08.270000 audit[3091]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000199c30 a2=78 a3=c0000952f8 items=0 ppid=3078 pid=3091 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:08.270000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3163663566636132306161643931386465373164326664613839633262 May 17 00:39:08.317752 env[1634]: time="2025-05-17T00:39:08.317705994Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-8x4d4,Uid:bcf936ab-217e-475c-a93a-9272b5225174,Namespace:calico-system,Attempt:0,} returns sandbox id \"1cf5fca20aad918de71d2fda89c2b52db15831aa913a77f3c60be4eea02709a6\"" May 17 00:39:08.357007 kubelet[2516]: E0517 00:39:08.356976 2516 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input May 17 00:39:08.357007 kubelet[2516]: W0517 00:39:08.357002 2516 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" May 17 00:39:08.357007 kubelet[2516]: E0517 00:39:08.357022 2516 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" May 17 00:39:08.357280 kubelet[2516]: E0517 00:39:08.357266 2516 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input May 17 00:39:08.357280 kubelet[2516]: W0517 00:39:08.357279 2516 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" May 17 00:39:08.357356 kubelet[2516]: E0517 00:39:08.357289 2516 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" May 17 00:39:08.357556 kubelet[2516]: E0517 00:39:08.357523 2516 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input May 17 00:39:08.357556 kubelet[2516]: W0517 00:39:08.357545 2516 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" May 17 00:39:08.357637 kubelet[2516]: E0517 00:39:08.357568 2516 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" May 17 00:39:08.357874 kubelet[2516]: E0517 00:39:08.357847 2516 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input May 17 00:39:08.357874 kubelet[2516]: W0517 00:39:08.357862 2516 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" May 17 00:39:08.357874 kubelet[2516]: E0517 00:39:08.357871 2516 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" May 17 00:39:08.358245 kubelet[2516]: E0517 00:39:08.358219 2516 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input May 17 00:39:08.358245 kubelet[2516]: W0517 00:39:08.358243 2516 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" May 17 00:39:08.358375 kubelet[2516]: E0517 00:39:08.358259 2516 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" May 17 00:39:08.358641 kubelet[2516]: E0517 00:39:08.358616 2516 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input May 17 00:39:08.358641 kubelet[2516]: W0517 00:39:08.358632 2516 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" May 17 00:39:08.358781 kubelet[2516]: E0517 00:39:08.358647 2516 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" May 17 00:39:08.358894 kubelet[2516]: E0517 00:39:08.358874 2516 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input May 17 00:39:08.358894 kubelet[2516]: W0517 00:39:08.358888 2516 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" May 17 00:39:08.359007 kubelet[2516]: E0517 00:39:08.358901 2516 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" May 17 00:39:08.359368 kubelet[2516]: E0517 00:39:08.359350 2516 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input May 17 00:39:08.359368 kubelet[2516]: W0517 00:39:08.359367 2516 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" May 17 00:39:08.359368 kubelet[2516]: E0517 00:39:08.359381 2516 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" May 17 00:39:08.359636 kubelet[2516]: E0517 00:39:08.359611 2516 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input May 17 00:39:08.359714 kubelet[2516]: W0517 00:39:08.359636 2516 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" May 17 00:39:08.359714 kubelet[2516]: E0517 00:39:08.359650 2516 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" May 17 00:39:08.359906 kubelet[2516]: E0517 00:39:08.359891 2516 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input May 17 00:39:08.359991 kubelet[2516]: W0517 00:39:08.359909 2516 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" May 17 00:39:08.359991 kubelet[2516]: E0517 00:39:08.359922 2516 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" May 17 00:39:08.360146 kubelet[2516]: E0517 00:39:08.360131 2516 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input May 17 00:39:08.360218 kubelet[2516]: W0517 00:39:08.360146 2516 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" May 17 00:39:08.360218 kubelet[2516]: E0517 00:39:08.360158 2516 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" May 17 00:39:08.360372 kubelet[2516]: E0517 00:39:08.360358 2516 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input May 17 00:39:08.360440 kubelet[2516]: W0517 00:39:08.360373 2516 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" May 17 00:39:08.360440 kubelet[2516]: E0517 00:39:08.360385 2516 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" May 17 00:39:08.360616 kubelet[2516]: E0517 00:39:08.360588 2516 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input May 17 00:39:08.360616 kubelet[2516]: W0517 00:39:08.360603 2516 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" May 17 00:39:08.360616 kubelet[2516]: E0517 00:39:08.360615 2516 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" May 17 00:39:08.360878 kubelet[2516]: E0517 00:39:08.360863 2516 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input May 17 00:39:08.360878 kubelet[2516]: W0517 00:39:08.360878 2516 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" May 17 00:39:08.361002 kubelet[2516]: E0517 00:39:08.360897 2516 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" May 17 00:39:08.361162 kubelet[2516]: E0517 00:39:08.361116 2516 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input May 17 00:39:08.361162 kubelet[2516]: W0517 00:39:08.361128 2516 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" May 17 00:39:08.361162 kubelet[2516]: E0517 00:39:08.361139 2516 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" May 17 00:39:08.361436 kubelet[2516]: E0517 00:39:08.361343 2516 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input May 17 00:39:08.361436 kubelet[2516]: W0517 00:39:08.361354 2516 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" May 17 00:39:08.361436 kubelet[2516]: E0517 00:39:08.361365 2516 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" May 17 00:39:08.361603 kubelet[2516]: E0517 00:39:08.361565 2516 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input May 17 00:39:08.361603 kubelet[2516]: W0517 00:39:08.361574 2516 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" May 17 00:39:08.361603 kubelet[2516]: E0517 00:39:08.361586 2516 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" May 17 00:39:08.362540 kubelet[2516]: E0517 00:39:08.361845 2516 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input May 17 00:39:08.362540 kubelet[2516]: W0517 00:39:08.361857 2516 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" May 17 00:39:08.362540 kubelet[2516]: E0517 00:39:08.361871 2516 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" May 17 00:39:08.362837 kubelet[2516]: E0517 00:39:08.362758 2516 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input May 17 00:39:08.362917 kubelet[2516]: W0517 00:39:08.362893 2516 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" May 17 00:39:08.362917 kubelet[2516]: E0517 00:39:08.362913 2516 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" May 17 00:39:08.363402 kubelet[2516]: E0517 00:39:08.363382 2516 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input May 17 00:39:08.363402 kubelet[2516]: W0517 00:39:08.363397 2516 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" May 17 00:39:08.363515 kubelet[2516]: E0517 00:39:08.363411 2516 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" May 17 00:39:08.364260 kubelet[2516]: E0517 00:39:08.363853 2516 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input May 17 00:39:08.364260 kubelet[2516]: W0517 00:39:08.363868 2516 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" May 17 00:39:08.364260 kubelet[2516]: E0517 00:39:08.363882 2516 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" May 17 00:39:08.364260 kubelet[2516]: E0517 00:39:08.364144 2516 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input May 17 00:39:08.364260 kubelet[2516]: W0517 00:39:08.364152 2516 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" May 17 00:39:08.364260 kubelet[2516]: E0517 00:39:08.364163 2516 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" May 17 00:39:08.364674 kubelet[2516]: E0517 00:39:08.364519 2516 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input May 17 00:39:08.364674 kubelet[2516]: W0517 00:39:08.364529 2516 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" May 17 00:39:08.364674 kubelet[2516]: E0517 00:39:08.364539 2516 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" May 17 00:39:08.366183 kubelet[2516]: E0517 00:39:08.365861 2516 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input May 17 00:39:08.366183 kubelet[2516]: W0517 00:39:08.365876 2516 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" May 17 00:39:08.366183 kubelet[2516]: E0517 00:39:08.365889 2516 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" May 17 00:39:08.366335 kubelet[2516]: E0517 00:39:08.366224 2516 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input May 17 00:39:08.366335 kubelet[2516]: W0517 00:39:08.366235 2516 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" May 17 00:39:08.366335 kubelet[2516]: E0517 00:39:08.366248 2516 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" May 17 00:39:08.376537 kubelet[2516]: E0517 00:39:08.376495 2516 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input May 17 00:39:08.376537 kubelet[2516]: W0517 00:39:08.376532 2516 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" May 17 00:39:08.376745 kubelet[2516]: E0517 00:39:08.376577 2516 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" May 17 00:39:09.455669 kubelet[2516]: E0517 00:39:09.454269 2516 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-g8dpg" podUID="ccf5c16c-a554-4978-bf48-ec245cb3b696" May 17 00:39:09.467866 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1427264623.mount: Deactivated successfully. May 17 00:39:10.473290 env[1634]: time="2025-05-17T00:39:10.473221316Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha:v3.30.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" May 17 00:39:10.475559 env[1634]: time="2025-05-17T00:39:10.475518953Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:71be0570e8645ac646675719e0da6ac33a05810991b31aecc303e7add70933be,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" May 17 00:39:10.478360 env[1634]: time="2025-05-17T00:39:10.478329536Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/typha:v3.30.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" May 17 00:39:10.479452 env[1634]: time="2025-05-17T00:39:10.479421092Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha@sha256:d282f6c773c4631b9dc8379eb093c54ca34c7728d55d6509cb45da5e1f5baf8f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" May 17 00:39:10.480847 env[1634]: time="2025-05-17T00:39:10.480816270Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.30.0\" returns image reference \"sha256:71be0570e8645ac646675719e0da6ac33a05810991b31aecc303e7add70933be\"" May 17 00:39:10.484884 env[1634]: time="2025-05-17T00:39:10.484849934Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.0\"" May 17 00:39:10.506526 env[1634]: time="2025-05-17T00:39:10.506471380Z" level=info msg="CreateContainer within sandbox \"d3d4401c536f19d6722232d6790e709d3e0ddb8b0c7f7c77e5e5e1c9b86a5750\" for container &ContainerMetadata{Name:calico-typha,Attempt:0,}" May 17 00:39:10.526604 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount4118033883.mount: Deactivated successfully. May 17 00:39:10.538173 env[1634]: time="2025-05-17T00:39:10.538110790Z" level=info msg="CreateContainer within sandbox \"d3d4401c536f19d6722232d6790e709d3e0ddb8b0c7f7c77e5e5e1c9b86a5750\" for &ContainerMetadata{Name:calico-typha,Attempt:0,} returns container id \"57b8959ff03a7128604f2dd4dc7b6719bc39e582e98d2679795ccc4745108c78\"" May 17 00:39:10.538697 env[1634]: time="2025-05-17T00:39:10.538662192Z" level=info msg="StartContainer for \"57b8959ff03a7128604f2dd4dc7b6719bc39e582e98d2679795ccc4745108c78\"" May 17 00:39:10.559284 systemd[1]: Started cri-containerd-57b8959ff03a7128604f2dd4dc7b6719bc39e582e98d2679795ccc4745108c78.scope. May 17 00:39:10.574000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:10.574000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:10.574000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:10.574000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:10.574000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:10.574000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:10.574000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:10.574000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:10.574000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:10.575000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:10.575000 audit: BPF prog-id=135 op=LOAD May 17 00:39:10.575000 audit[3187]: AVC avc: denied { bpf } for pid=3187 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:10.575000 audit[3187]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=3027 pid=3187 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:10.575000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3537623839353966663033613731323836303466326464346463376236 May 17 00:39:10.575000 audit[3187]: AVC avc: denied { perfmon } for pid=3187 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:10.575000 audit[3187]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=3027 pid=3187 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:10.575000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3537623839353966663033613731323836303466326464346463376236 May 17 00:39:10.575000 audit[3187]: AVC avc: denied { bpf } for pid=3187 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:10.575000 audit[3187]: AVC avc: denied { bpf } for pid=3187 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:10.575000 audit[3187]: AVC avc: denied { bpf } for pid=3187 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:10.575000 audit[3187]: AVC avc: denied { perfmon } for pid=3187 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:10.575000 audit[3187]: AVC avc: denied { perfmon } for pid=3187 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:10.575000 audit[3187]: AVC avc: denied { perfmon } for pid=3187 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:10.575000 audit[3187]: AVC avc: denied { perfmon } for pid=3187 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:10.575000 audit[3187]: AVC avc: denied { perfmon } for pid=3187 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:10.575000 audit[3187]: AVC avc: denied { bpf } for pid=3187 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:10.575000 audit[3187]: AVC avc: denied { bpf } for pid=3187 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:10.575000 audit: BPF prog-id=136 op=LOAD May 17 00:39:10.575000 audit[3187]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0002c5df0 items=0 ppid=3027 pid=3187 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:10.575000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3537623839353966663033613731323836303466326464346463376236 May 17 00:39:10.575000 audit[3187]: AVC avc: denied { bpf } for pid=3187 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:10.575000 audit[3187]: AVC avc: denied { bpf } for pid=3187 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:10.575000 audit[3187]: AVC avc: denied { perfmon } for pid=3187 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:10.575000 audit[3187]: AVC avc: denied { perfmon } for pid=3187 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:10.575000 audit[3187]: AVC avc: denied { perfmon } for pid=3187 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:10.575000 audit[3187]: AVC avc: denied { perfmon } for pid=3187 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:10.575000 audit[3187]: AVC avc: denied { perfmon } for pid=3187 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:10.575000 audit[3187]: AVC avc: denied { bpf } for pid=3187 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:10.575000 audit[3187]: AVC avc: denied { bpf } for pid=3187 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:10.575000 audit: BPF prog-id=137 op=LOAD May 17 00:39:10.575000 audit[3187]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0002c5e38 items=0 ppid=3027 pid=3187 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:10.575000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3537623839353966663033613731323836303466326464346463376236 May 17 00:39:10.575000 audit: BPF prog-id=137 op=UNLOAD May 17 00:39:10.575000 audit: BPF prog-id=136 op=UNLOAD May 17 00:39:10.575000 audit[3187]: AVC avc: denied { bpf } for pid=3187 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:10.575000 audit[3187]: AVC avc: denied { bpf } for pid=3187 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:10.575000 audit[3187]: AVC avc: denied { bpf } for pid=3187 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:10.575000 audit[3187]: AVC avc: denied { perfmon } for pid=3187 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:10.575000 audit[3187]: AVC avc: denied { perfmon } for pid=3187 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:10.575000 audit[3187]: AVC avc: denied { perfmon } for pid=3187 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:10.575000 audit[3187]: AVC avc: denied { perfmon } for pid=3187 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:10.575000 audit[3187]: AVC avc: denied { perfmon } for pid=3187 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:10.575000 audit[3187]: AVC avc: denied { bpf } for pid=3187 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:10.575000 audit[3187]: AVC avc: denied { bpf } for pid=3187 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:10.575000 audit: BPF prog-id=138 op=LOAD May 17 00:39:10.575000 audit[3187]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0003a4248 items=0 ppid=3027 pid=3187 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:10.575000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3537623839353966663033613731323836303466326464346463376236 May 17 00:39:10.642818 env[1634]: time="2025-05-17T00:39:10.642732746Z" level=info msg="StartContainer for \"57b8959ff03a7128604f2dd4dc7b6719bc39e582e98d2679795ccc4745108c78\" returns successfully" May 17 00:39:11.453687 kubelet[2516]: E0517 00:39:11.453603 2516 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-g8dpg" podUID="ccf5c16c-a554-4978-bf48-ec245cb3b696" May 17 00:39:11.575651 kubelet[2516]: E0517 00:39:11.575612 2516 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input May 17 00:39:11.575651 kubelet[2516]: W0517 00:39:11.575637 2516 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" May 17 00:39:11.575651 kubelet[2516]: E0517 00:39:11.575655 2516 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" May 17 00:39:11.575891 kubelet[2516]: E0517 00:39:11.575839 2516 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input May 17 00:39:11.575891 kubelet[2516]: W0517 00:39:11.575845 2516 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" May 17 00:39:11.575891 kubelet[2516]: E0517 00:39:11.575853 2516 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" May 17 00:39:11.575999 kubelet[2516]: E0517 00:39:11.575986 2516 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input May 17 00:39:11.575999 kubelet[2516]: W0517 00:39:11.575998 2516 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" May 17 00:39:11.576069 kubelet[2516]: E0517 00:39:11.576006 2516 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" May 17 00:39:11.576197 kubelet[2516]: E0517 00:39:11.576185 2516 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input May 17 00:39:11.576197 kubelet[2516]: W0517 00:39:11.576196 2516 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" May 17 00:39:11.576275 kubelet[2516]: E0517 00:39:11.576204 2516 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" May 17 00:39:11.576358 kubelet[2516]: E0517 00:39:11.576347 2516 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input May 17 00:39:11.576358 kubelet[2516]: W0517 00:39:11.576358 2516 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" May 17 00:39:11.576443 kubelet[2516]: E0517 00:39:11.576364 2516 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" May 17 00:39:11.576500 kubelet[2516]: E0517 00:39:11.576490 2516 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input May 17 00:39:11.576500 kubelet[2516]: W0517 00:39:11.576500 2516 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" May 17 00:39:11.576568 kubelet[2516]: E0517 00:39:11.576506 2516 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" May 17 00:39:11.576653 kubelet[2516]: E0517 00:39:11.576642 2516 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input May 17 00:39:11.576747 kubelet[2516]: W0517 00:39:11.576654 2516 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" May 17 00:39:11.576747 kubelet[2516]: E0517 00:39:11.576660 2516 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" May 17 00:39:11.576826 kubelet[2516]: E0517 00:39:11.576809 2516 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input May 17 00:39:11.576826 kubelet[2516]: W0517 00:39:11.576814 2516 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" May 17 00:39:11.576826 kubelet[2516]: E0517 00:39:11.576821 2516 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" May 17 00:39:11.576972 kubelet[2516]: E0517 00:39:11.576959 2516 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input May 17 00:39:11.576972 kubelet[2516]: W0517 00:39:11.576970 2516 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" May 17 00:39:11.577046 kubelet[2516]: E0517 00:39:11.576977 2516 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" May 17 00:39:11.577111 kubelet[2516]: E0517 00:39:11.577100 2516 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input May 17 00:39:11.577111 kubelet[2516]: W0517 00:39:11.577110 2516 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" May 17 00:39:11.577177 kubelet[2516]: E0517 00:39:11.577117 2516 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" May 17 00:39:11.577255 kubelet[2516]: E0517 00:39:11.577243 2516 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input May 17 00:39:11.577255 kubelet[2516]: W0517 00:39:11.577254 2516 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" May 17 00:39:11.577329 kubelet[2516]: E0517 00:39:11.577261 2516 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" May 17 00:39:11.577396 kubelet[2516]: E0517 00:39:11.577386 2516 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input May 17 00:39:11.577396 kubelet[2516]: W0517 00:39:11.577396 2516 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" May 17 00:39:11.577463 kubelet[2516]: E0517 00:39:11.577402 2516 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" May 17 00:39:11.577547 kubelet[2516]: E0517 00:39:11.577536 2516 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input May 17 00:39:11.577547 kubelet[2516]: W0517 00:39:11.577547 2516 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" May 17 00:39:11.577619 kubelet[2516]: E0517 00:39:11.577553 2516 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" May 17 00:39:11.577691 kubelet[2516]: E0517 00:39:11.577680 2516 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input May 17 00:39:11.577691 kubelet[2516]: W0517 00:39:11.577690 2516 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" May 17 00:39:11.577791 kubelet[2516]: E0517 00:39:11.577696 2516 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" May 17 00:39:11.577878 kubelet[2516]: E0517 00:39:11.577859 2516 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input May 17 00:39:11.577878 kubelet[2516]: W0517 00:39:11.577877 2516 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" May 17 00:39:11.577950 kubelet[2516]: E0517 00:39:11.577887 2516 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" May 17 00:39:11.585973 kubelet[2516]: E0517 00:39:11.585933 2516 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input May 17 00:39:11.585973 kubelet[2516]: W0517 00:39:11.585968 2516 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" May 17 00:39:11.586141 kubelet[2516]: E0517 00:39:11.585989 2516 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" May 17 00:39:11.586231 kubelet[2516]: E0517 00:39:11.586219 2516 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input May 17 00:39:11.586231 kubelet[2516]: W0517 00:39:11.586231 2516 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" May 17 00:39:11.586301 kubelet[2516]: E0517 00:39:11.586239 2516 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" May 17 00:39:11.586448 kubelet[2516]: E0517 00:39:11.586436 2516 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input May 17 00:39:11.586483 kubelet[2516]: W0517 00:39:11.586448 2516 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" May 17 00:39:11.586483 kubelet[2516]: E0517 00:39:11.586456 2516 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" May 17 00:39:11.586645 kubelet[2516]: E0517 00:39:11.586635 2516 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input May 17 00:39:11.586687 kubelet[2516]: W0517 00:39:11.586645 2516 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" May 17 00:39:11.586687 kubelet[2516]: E0517 00:39:11.586653 2516 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" May 17 00:39:11.586867 kubelet[2516]: E0517 00:39:11.586854 2516 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input May 17 00:39:11.586867 kubelet[2516]: W0517 00:39:11.586866 2516 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" May 17 00:39:11.586935 kubelet[2516]: E0517 00:39:11.586874 2516 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" May 17 00:39:11.587043 kubelet[2516]: E0517 00:39:11.587033 2516 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input May 17 00:39:11.587078 kubelet[2516]: W0517 00:39:11.587043 2516 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" May 17 00:39:11.587078 kubelet[2516]: E0517 00:39:11.587051 2516 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" May 17 00:39:11.587438 kubelet[2516]: E0517 00:39:11.587425 2516 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input May 17 00:39:11.587481 kubelet[2516]: W0517 00:39:11.587439 2516 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" May 17 00:39:11.587481 kubelet[2516]: E0517 00:39:11.587457 2516 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" May 17 00:39:11.587846 kubelet[2516]: E0517 00:39:11.587833 2516 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input May 17 00:39:11.587846 kubelet[2516]: W0517 00:39:11.587846 2516 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" May 17 00:39:11.587921 kubelet[2516]: E0517 00:39:11.587854 2516 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" May 17 00:39:11.588032 kubelet[2516]: E0517 00:39:11.588022 2516 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input May 17 00:39:11.588061 kubelet[2516]: W0517 00:39:11.588033 2516 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" May 17 00:39:11.588061 kubelet[2516]: E0517 00:39:11.588040 2516 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" May 17 00:39:11.588301 kubelet[2516]: E0517 00:39:11.588290 2516 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input May 17 00:39:11.588301 kubelet[2516]: W0517 00:39:11.588300 2516 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" May 17 00:39:11.588392 kubelet[2516]: E0517 00:39:11.588309 2516 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" May 17 00:39:11.588477 kubelet[2516]: E0517 00:39:11.588467 2516 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input May 17 00:39:11.588477 kubelet[2516]: W0517 00:39:11.588476 2516 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" May 17 00:39:11.588536 kubelet[2516]: E0517 00:39:11.588483 2516 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" May 17 00:39:11.588649 kubelet[2516]: E0517 00:39:11.588638 2516 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input May 17 00:39:11.588649 kubelet[2516]: W0517 00:39:11.588648 2516 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" May 17 00:39:11.588716 kubelet[2516]: E0517 00:39:11.588654 2516 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" May 17 00:39:11.589231 kubelet[2516]: E0517 00:39:11.589102 2516 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input May 17 00:39:11.589231 kubelet[2516]: W0517 00:39:11.589111 2516 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" May 17 00:39:11.589231 kubelet[2516]: E0517 00:39:11.589120 2516 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" May 17 00:39:11.589913 kubelet[2516]: E0517 00:39:11.589899 2516 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input May 17 00:39:11.589913 kubelet[2516]: W0517 00:39:11.589912 2516 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" May 17 00:39:11.590006 kubelet[2516]: E0517 00:39:11.589923 2516 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" May 17 00:39:11.590376 kubelet[2516]: E0517 00:39:11.590090 2516 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input May 17 00:39:11.590376 kubelet[2516]: W0517 00:39:11.590098 2516 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" May 17 00:39:11.590376 kubelet[2516]: E0517 00:39:11.590105 2516 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" May 17 00:39:11.590553 kubelet[2516]: E0517 00:39:11.590397 2516 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input May 17 00:39:11.590553 kubelet[2516]: W0517 00:39:11.590404 2516 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" May 17 00:39:11.590553 kubelet[2516]: E0517 00:39:11.590411 2516 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" May 17 00:39:11.595378 kubelet[2516]: I0517 00:39:11.595330 2516 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-typha-5d6ffc544f-krtwj" podStartSLOduration=2.237726744 podStartE2EDuration="4.595316916s" podCreationTimestamp="2025-05-17 00:39:07 +0000 UTC" firstStartedPulling="2025-05-17 00:39:08.126345563 +0000 UTC m=+19.996606778" lastFinishedPulling="2025-05-17 00:39:10.483935755 +0000 UTC m=+22.354196950" observedRunningTime="2025-05-17 00:39:11.595000267 +0000 UTC m=+23.465261484" watchObservedRunningTime="2025-05-17 00:39:11.595316916 +0000 UTC m=+23.465578132" May 17 00:39:11.596822 kubelet[2516]: E0517 00:39:11.596376 2516 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input May 17 00:39:11.596822 kubelet[2516]: W0517 00:39:11.596395 2516 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" May 17 00:39:11.596822 kubelet[2516]: E0517 00:39:11.596413 2516 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" May 17 00:39:11.597615 kubelet[2516]: E0517 00:39:11.597597 2516 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input May 17 00:39:11.597658 kubelet[2516]: W0517 00:39:11.597616 2516 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" May 17 00:39:11.597658 kubelet[2516]: E0517 00:39:11.597649 2516 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" May 17 00:39:11.710269 env[1634]: time="2025-05-17T00:39:11.708876881Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" May 17 00:39:11.713090 env[1634]: time="2025-05-17T00:39:11.713038255Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:c53606cea03e59dcbfa981dc43a55dff05952895f72576b8389fa00be09ab676,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" May 17 00:39:11.715875 env[1634]: time="2025-05-17T00:39:11.715834769Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" May 17 00:39:11.718760 env[1634]: time="2025-05-17T00:39:11.718710410Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol@sha256:ce76dd87f11d3fd0054c35ad2e0e9f833748d007f77a9bfe859d0ddcb66fcb2c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" May 17 00:39:11.719550 env[1634]: time="2025-05-17T00:39:11.719494131Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.0\" returns image reference \"sha256:c53606cea03e59dcbfa981dc43a55dff05952895f72576b8389fa00be09ab676\"" May 17 00:39:11.732929 env[1634]: time="2025-05-17T00:39:11.732880854Z" level=info msg="CreateContainer within sandbox \"1cf5fca20aad918de71d2fda89c2b52db15831aa913a77f3c60be4eea02709a6\" for container &ContainerMetadata{Name:flexvol-driver,Attempt:0,}" May 17 00:39:11.766379 env[1634]: time="2025-05-17T00:39:11.766315178Z" level=info msg="CreateContainer within sandbox \"1cf5fca20aad918de71d2fda89c2b52db15831aa913a77f3c60be4eea02709a6\" for &ContainerMetadata{Name:flexvol-driver,Attempt:0,} returns container id \"bb3902abec175c41c5166238c83666ca89412328353b944a56b30cec91edce75\"" May 17 00:39:11.767116 env[1634]: time="2025-05-17T00:39:11.767080120Z" level=info msg="StartContainer for \"bb3902abec175c41c5166238c83666ca89412328353b944a56b30cec91edce75\"" May 17 00:39:11.791284 systemd[1]: run-containerd-runc-k8s.io-bb3902abec175c41c5166238c83666ca89412328353b944a56b30cec91edce75-runc.Jqpt11.mount: Deactivated successfully. May 17 00:39:11.795015 systemd[1]: Started cri-containerd-bb3902abec175c41c5166238c83666ca89412328353b944a56b30cec91edce75.scope. May 17 00:39:11.811000 audit[3260]: AVC avc: denied { perfmon } for pid=3260 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:11.811000 audit[3260]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001456b0 a2=3c a3=7f8e5d02e518 items=0 ppid=3078 pid=3260 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:11.811000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6262333930326162656331373563343163353136363233386338333636 May 17 00:39:11.811000 audit[3260]: AVC avc: denied { bpf } for pid=3260 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:11.811000 audit[3260]: AVC avc: denied { bpf } for pid=3260 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:11.811000 audit[3260]: AVC avc: denied { bpf } for pid=3260 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:11.811000 audit[3260]: AVC avc: denied { perfmon } for pid=3260 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:11.811000 audit[3260]: AVC avc: denied { perfmon } for pid=3260 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:11.811000 audit[3260]: AVC avc: denied { perfmon } for pid=3260 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:11.811000 audit[3260]: AVC avc: denied { perfmon } for pid=3260 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:11.811000 audit[3260]: AVC avc: denied { perfmon } for pid=3260 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:11.811000 audit[3260]: AVC avc: denied { bpf } for pid=3260 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:11.811000 audit[3260]: AVC avc: denied { bpf } for pid=3260 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:11.811000 audit: BPF prog-id=139 op=LOAD May 17 00:39:11.811000 audit[3260]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001459d8 a2=78 a3=c000259ba8 items=0 ppid=3078 pid=3260 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:11.811000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6262333930326162656331373563343163353136363233386338333636 May 17 00:39:11.811000 audit[3260]: AVC avc: denied { bpf } for pid=3260 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:11.811000 audit[3260]: AVC avc: denied { bpf } for pid=3260 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:11.811000 audit[3260]: AVC avc: denied { perfmon } for pid=3260 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:11.811000 audit[3260]: AVC avc: denied { perfmon } for pid=3260 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:11.811000 audit[3260]: AVC avc: denied { perfmon } for pid=3260 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:11.811000 audit[3260]: AVC avc: denied { perfmon } for pid=3260 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:11.811000 audit[3260]: AVC avc: denied { perfmon } for pid=3260 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:11.811000 audit[3260]: AVC avc: denied { bpf } for pid=3260 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:11.811000 audit[3260]: AVC avc: denied { bpf } for pid=3260 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:11.811000 audit: BPF prog-id=140 op=LOAD May 17 00:39:11.811000 audit[3260]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000145770 a2=78 a3=c000259bf8 items=0 ppid=3078 pid=3260 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:11.811000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6262333930326162656331373563343163353136363233386338333636 May 17 00:39:11.811000 audit: BPF prog-id=140 op=UNLOAD May 17 00:39:11.811000 audit: BPF prog-id=139 op=UNLOAD May 17 00:39:11.811000 audit[3260]: AVC avc: denied { bpf } for pid=3260 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:11.811000 audit[3260]: AVC avc: denied { bpf } for pid=3260 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:11.811000 audit[3260]: AVC avc: denied { bpf } for pid=3260 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:11.811000 audit[3260]: AVC avc: denied { perfmon } for pid=3260 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:11.811000 audit[3260]: AVC avc: denied { perfmon } for pid=3260 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:11.811000 audit[3260]: AVC avc: denied { perfmon } for pid=3260 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:11.811000 audit[3260]: AVC avc: denied { perfmon } for pid=3260 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:11.811000 audit[3260]: AVC avc: denied { perfmon } for pid=3260 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:11.811000 audit[3260]: AVC avc: denied { bpf } for pid=3260 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:11.811000 audit[3260]: AVC avc: denied { bpf } for pid=3260 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:11.811000 audit: BPF prog-id=141 op=LOAD May 17 00:39:11.811000 audit[3260]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000145c30 a2=78 a3=c000259c88 items=0 ppid=3078 pid=3260 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:11.811000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6262333930326162656331373563343163353136363233386338333636 May 17 00:39:11.831570 env[1634]: time="2025-05-17T00:39:11.827992813Z" level=info msg="StartContainer for \"bb3902abec175c41c5166238c83666ca89412328353b944a56b30cec91edce75\" returns successfully" May 17 00:39:11.840284 systemd[1]: cri-containerd-bb3902abec175c41c5166238c83666ca89412328353b944a56b30cec91edce75.scope: Deactivated successfully. May 17 00:39:11.843000 audit: BPF prog-id=141 op=UNLOAD May 17 00:39:11.976217 env[1634]: time="2025-05-17T00:39:11.976091132Z" level=info msg="shim disconnected" id=bb3902abec175c41c5166238c83666ca89412328353b944a56b30cec91edce75 May 17 00:39:11.976217 env[1634]: time="2025-05-17T00:39:11.976136354Z" level=warning msg="cleaning up after shim disconnected" id=bb3902abec175c41c5166238c83666ca89412328353b944a56b30cec91edce75 namespace=k8s.io May 17 00:39:11.976217 env[1634]: time="2025-05-17T00:39:11.976145663Z" level=info msg="cleaning up dead shim" May 17 00:39:11.985762 env[1634]: time="2025-05-17T00:39:11.985702509Z" level=warning msg="cleanup warnings time=\"2025-05-17T00:39:11Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3298 runtime=io.containerd.runc.v2\n" May 17 00:39:12.492318 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-bb3902abec175c41c5166238c83666ca89412328353b944a56b30cec91edce75-rootfs.mount: Deactivated successfully. May 17 00:39:12.574596 kubelet[2516]: I0517 00:39:12.574566 2516 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" May 17 00:39:12.576464 env[1634]: time="2025-05-17T00:39:12.576426303Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.30.0\"" May 17 00:39:13.453574 kubelet[2516]: E0517 00:39:13.453515 2516 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-g8dpg" podUID="ccf5c16c-a554-4978-bf48-ec245cb3b696" May 17 00:39:14.848185 amazon-ssm-agent[1712]: 2025-05-17 00:39:14 INFO [HealthCheck] HealthCheck reporting agent health. May 17 00:39:15.454096 kubelet[2516]: E0517 00:39:15.453982 2516 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-g8dpg" podUID="ccf5c16c-a554-4978-bf48-ec245cb3b696" May 17 00:39:17.454568 kubelet[2516]: E0517 00:39:17.454056 2516 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-g8dpg" podUID="ccf5c16c-a554-4978-bf48-ec245cb3b696" May 17 00:39:18.739224 env[1634]: time="2025-05-17T00:39:18.739107075Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni:v3.30.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" May 17 00:39:18.741272 env[1634]: time="2025-05-17T00:39:18.741232935Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:15f996c472622f23047ea38b2d72940e8c34d0996b8a2e12a1f255c1d7083185,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" May 17 00:39:18.743295 env[1634]: time="2025-05-17T00:39:18.743128505Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/cni:v3.30.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" May 17 00:39:18.745320 env[1634]: time="2025-05-17T00:39:18.745292322Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni@sha256:3dd06656abdc03fbd51782d5f6fe4d70e6825a1c0c5bce2a165bbd2ff9e0f7df,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" May 17 00:39:18.745913 env[1634]: time="2025-05-17T00:39:18.745882730Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.30.0\" returns image reference \"sha256:15f996c472622f23047ea38b2d72940e8c34d0996b8a2e12a1f255c1d7083185\"" May 17 00:39:18.751689 env[1634]: time="2025-05-17T00:39:18.751616715Z" level=info msg="CreateContainer within sandbox \"1cf5fca20aad918de71d2fda89c2b52db15831aa913a77f3c60be4eea02709a6\" for container &ContainerMetadata{Name:install-cni,Attempt:0,}" May 17 00:39:18.769732 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2485105713.mount: Deactivated successfully. May 17 00:39:18.779949 env[1634]: time="2025-05-17T00:39:18.779866421Z" level=info msg="CreateContainer within sandbox \"1cf5fca20aad918de71d2fda89c2b52db15831aa913a77f3c60be4eea02709a6\" for &ContainerMetadata{Name:install-cni,Attempt:0,} returns container id \"b0264f4640f8713a72a44c36378dcab22382e0305d55534061b4a7897df64069\"" May 17 00:39:18.780943 env[1634]: time="2025-05-17T00:39:18.780904683Z" level=info msg="StartContainer for \"b0264f4640f8713a72a44c36378dcab22382e0305d55534061b4a7897df64069\"" May 17 00:39:18.821110 systemd[1]: Started cri-containerd-b0264f4640f8713a72a44c36378dcab22382e0305d55534061b4a7897df64069.scope. May 17 00:39:18.854159 kernel: kauditd_printk_skb: 211 callbacks suppressed May 17 00:39:18.854329 kernel: audit: type=1400 audit(1747442358.844:964): avc: denied { perfmon } for pid=3327 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:18.854384 kernel: audit: type=1300 audit(1747442358.844:964): arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c00014d6b0 a2=3c a3=7f7b982e03c8 items=0 ppid=3078 pid=3327 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:18.844000 audit[3327]: AVC avc: denied { perfmon } for pid=3327 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:18.844000 audit[3327]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c00014d6b0 a2=3c a3=7f7b982e03c8 items=0 ppid=3078 pid=3327 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:18.872311 kernel: audit: type=1327 audit(1747442358.844:964): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6230323634663436343066383731336137326134346333363337386463 May 17 00:39:18.844000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6230323634663436343066383731336137326134346333363337386463 May 17 00:39:18.879035 kernel: audit: type=1400 audit(1747442358.844:965): avc: denied { bpf } for pid=3327 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:18.844000 audit[3327]: AVC avc: denied { bpf } for pid=3327 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:18.844000 audit[3327]: AVC avc: denied { bpf } for pid=3327 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:18.885315 kernel: audit: type=1400 audit(1747442358.844:965): avc: denied { bpf } for pid=3327 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:18.844000 audit[3327]: AVC avc: denied { bpf } for pid=3327 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:18.892804 kernel: audit: type=1400 audit(1747442358.844:965): avc: denied { bpf } for pid=3327 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:18.844000 audit[3327]: AVC avc: denied { perfmon } for pid=3327 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:18.844000 audit[3327]: AVC avc: denied { perfmon } for pid=3327 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:18.906865 kernel: audit: type=1400 audit(1747442358.844:965): avc: denied { perfmon } for pid=3327 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:18.907019 kernel: audit: type=1400 audit(1747442358.844:965): avc: denied { perfmon } for pid=3327 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:18.844000 audit[3327]: AVC avc: denied { perfmon } for pid=3327 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:18.913057 kernel: audit: type=1400 audit(1747442358.844:965): avc: denied { perfmon } for pid=3327 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:18.844000 audit[3327]: AVC avc: denied { perfmon } for pid=3327 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:18.844000 audit[3327]: AVC avc: denied { perfmon } for pid=3327 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:18.921914 kernel: audit: type=1400 audit(1747442358.844:965): avc: denied { perfmon } for pid=3327 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:18.844000 audit[3327]: AVC avc: denied { bpf } for pid=3327 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:18.844000 audit[3327]: AVC avc: denied { bpf } for pid=3327 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:18.844000 audit: BPF prog-id=142 op=LOAD May 17 00:39:18.844000 audit[3327]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c00014d9d8 a2=78 a3=c0003561e8 items=0 ppid=3078 pid=3327 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:18.844000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6230323634663436343066383731336137326134346333363337386463 May 17 00:39:18.861000 audit[3327]: AVC avc: denied { bpf } for pid=3327 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:18.861000 audit[3327]: AVC avc: denied { bpf } for pid=3327 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:18.861000 audit[3327]: AVC avc: denied { perfmon } for pid=3327 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:18.861000 audit[3327]: AVC avc: denied { perfmon } for pid=3327 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:18.861000 audit[3327]: AVC avc: denied { perfmon } for pid=3327 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:18.861000 audit[3327]: AVC avc: denied { perfmon } for pid=3327 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:18.861000 audit[3327]: AVC avc: denied { perfmon } for pid=3327 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:18.861000 audit[3327]: AVC avc: denied { bpf } for pid=3327 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:18.861000 audit[3327]: AVC avc: denied { bpf } for pid=3327 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:18.861000 audit: BPF prog-id=143 op=LOAD May 17 00:39:18.861000 audit[3327]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c00014d770 a2=78 a3=c000356238 items=0 ppid=3078 pid=3327 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:18.861000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6230323634663436343066383731336137326134346333363337386463 May 17 00:39:18.870000 audit: BPF prog-id=143 op=UNLOAD May 17 00:39:18.870000 audit: BPF prog-id=142 op=UNLOAD May 17 00:39:18.870000 audit[3327]: AVC avc: denied { bpf } for pid=3327 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:18.870000 audit[3327]: AVC avc: denied { bpf } for pid=3327 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:18.870000 audit[3327]: AVC avc: denied { bpf } for pid=3327 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:18.870000 audit[3327]: AVC avc: denied { perfmon } for pid=3327 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:18.870000 audit[3327]: AVC avc: denied { perfmon } for pid=3327 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:18.870000 audit[3327]: AVC avc: denied { perfmon } for pid=3327 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:18.870000 audit[3327]: AVC avc: denied { perfmon } for pid=3327 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:18.870000 audit[3327]: AVC avc: denied { perfmon } for pid=3327 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:18.870000 audit[3327]: AVC avc: denied { bpf } for pid=3327 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:18.870000 audit[3327]: AVC avc: denied { bpf } for pid=3327 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:18.870000 audit: BPF prog-id=144 op=LOAD May 17 00:39:18.870000 audit[3327]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c00014dc30 a2=78 a3=c0003562c8 items=0 ppid=3078 pid=3327 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:18.870000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6230323634663436343066383731336137326134346333363337386463 May 17 00:39:18.926037 env[1634]: time="2025-05-17T00:39:18.925985669Z" level=info msg="StartContainer for \"b0264f4640f8713a72a44c36378dcab22382e0305d55534061b4a7897df64069\" returns successfully" May 17 00:39:19.453783 kubelet[2516]: E0517 00:39:19.453698 2516 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-g8dpg" podUID="ccf5c16c-a554-4978-bf48-ec245cb3b696" May 17 00:39:20.026295 env[1634]: time="2025-05-17T00:39:20.026221357Z" level=error msg="failed to reload cni configuration after receiving fs change event(\"/etc/cni/net.d/calico-kubeconfig\": WRITE)" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" May 17 00:39:20.030405 systemd[1]: cri-containerd-b0264f4640f8713a72a44c36378dcab22382e0305d55534061b4a7897df64069.scope: Deactivated successfully. May 17 00:39:20.032000 audit: BPF prog-id=144 op=UNLOAD May 17 00:39:20.054648 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-b0264f4640f8713a72a44c36378dcab22382e0305d55534061b4a7897df64069-rootfs.mount: Deactivated successfully. May 17 00:39:20.064673 kubelet[2516]: I0517 00:39:20.064641 2516 kubelet_node_status.go:501] "Fast updating node status as it just became ready" May 17 00:39:20.070270 env[1634]: time="2025-05-17T00:39:20.070210827Z" level=info msg="shim disconnected" id=b0264f4640f8713a72a44c36378dcab22382e0305d55534061b4a7897df64069 May 17 00:39:20.070270 env[1634]: time="2025-05-17T00:39:20.070262125Z" level=warning msg="cleaning up after shim disconnected" id=b0264f4640f8713a72a44c36378dcab22382e0305d55534061b4a7897df64069 namespace=k8s.io May 17 00:39:20.070270 env[1634]: time="2025-05-17T00:39:20.070275721Z" level=info msg="cleaning up dead shim" May 17 00:39:20.086110 env[1634]: time="2025-05-17T00:39:20.086062609Z" level=warning msg="cleanup warnings time=\"2025-05-17T00:39:20Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3368 runtime=io.containerd.runc.v2\n" May 17 00:39:20.137085 systemd[1]: Created slice kubepods-besteffort-pod71c21642_e990_4107_bf6c_cc0ea6307b30.slice. May 17 00:39:20.145654 kubelet[2516]: I0517 00:39:20.145612 2516 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-2scl4\" (UniqueName: \"kubernetes.io/projected/118f3b5b-8621-4b7e-aceb-6cf8623494e9-kube-api-access-2scl4\") pod \"coredns-674b8bbfcf-mnzbk\" (UID: \"118f3b5b-8621-4b7e-aceb-6cf8623494e9\") " pod="kube-system/coredns-674b8bbfcf-mnzbk" May 17 00:39:20.145838 kubelet[2516]: I0517 00:39:20.145661 2516 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/dddc5262-e1f3-4b01-bd21-570d31a85d68-calico-apiserver-certs\") pod \"calico-apiserver-755c444ff4-j2rw2\" (UID: \"dddc5262-e1f3-4b01-bd21-570d31a85d68\") " pod="calico-apiserver/calico-apiserver-755c444ff4-j2rw2" May 17 00:39:20.145838 kubelet[2516]: I0517 00:39:20.145688 2516 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-zkl85\" (UniqueName: \"kubernetes.io/projected/dddc5262-e1f3-4b01-bd21-570d31a85d68-kube-api-access-zkl85\") pod \"calico-apiserver-755c444ff4-j2rw2\" (UID: \"dddc5262-e1f3-4b01-bd21-570d31a85d68\") " pod="calico-apiserver/calico-apiserver-755c444ff4-j2rw2" May 17 00:39:20.145838 kubelet[2516]: I0517 00:39:20.145710 2516 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-zn644\" (UniqueName: \"kubernetes.io/projected/127d3909-e9a9-4f5a-ade7-8eda212d791f-kube-api-access-zn644\") pod \"calico-apiserver-755c444ff4-vrn79\" (UID: \"127d3909-e9a9-4f5a-ade7-8eda212d791f\") " pod="calico-apiserver/calico-apiserver-755c444ff4-vrn79" May 17 00:39:20.145838 kubelet[2516]: I0517 00:39:20.145737 2516 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/71c21642-e990-4107-bf6c-cc0ea6307b30-tigera-ca-bundle\") pod \"calico-kube-controllers-557b5c79c9-mhmhq\" (UID: \"71c21642-e990-4107-bf6c-cc0ea6307b30\") " pod="calico-system/calico-kube-controllers-557b5c79c9-mhmhq" May 17 00:39:20.145838 kubelet[2516]: I0517 00:39:20.145764 2516 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-bjdts\" (UniqueName: \"kubernetes.io/projected/71c21642-e990-4107-bf6c-cc0ea6307b30-kube-api-access-bjdts\") pod \"calico-kube-controllers-557b5c79c9-mhmhq\" (UID: \"71c21642-e990-4107-bf6c-cc0ea6307b30\") " pod="calico-system/calico-kube-controllers-557b5c79c9-mhmhq" May 17 00:39:20.146090 kubelet[2516]: I0517 00:39:20.145856 2516 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-2wn8d\" (UniqueName: \"kubernetes.io/projected/16d78791-e942-48bb-9e38-9ea0ea348207-kube-api-access-2wn8d\") pod \"coredns-674b8bbfcf-57lkx\" (UID: \"16d78791-e942-48bb-9e38-9ea0ea348207\") " pod="kube-system/coredns-674b8bbfcf-57lkx" May 17 00:39:20.146090 kubelet[2516]: I0517 00:39:20.145896 2516 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/127d3909-e9a9-4f5a-ade7-8eda212d791f-calico-apiserver-certs\") pod \"calico-apiserver-755c444ff4-vrn79\" (UID: \"127d3909-e9a9-4f5a-ade7-8eda212d791f\") " pod="calico-apiserver/calico-apiserver-755c444ff4-vrn79" May 17 00:39:20.146090 kubelet[2516]: I0517 00:39:20.145921 2516 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/118f3b5b-8621-4b7e-aceb-6cf8623494e9-config-volume\") pod \"coredns-674b8bbfcf-mnzbk\" (UID: \"118f3b5b-8621-4b7e-aceb-6cf8623494e9\") " pod="kube-system/coredns-674b8bbfcf-mnzbk" May 17 00:39:20.146090 kubelet[2516]: I0517 00:39:20.145945 2516 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/16d78791-e942-48bb-9e38-9ea0ea348207-config-volume\") pod \"coredns-674b8bbfcf-57lkx\" (UID: \"16d78791-e942-48bb-9e38-9ea0ea348207\") " pod="kube-system/coredns-674b8bbfcf-57lkx" May 17 00:39:20.150721 systemd[1]: Created slice kubepods-burstable-pod16d78791_e942_48bb_9e38_9ea0ea348207.slice. May 17 00:39:20.161088 systemd[1]: Created slice kubepods-burstable-pod118f3b5b_8621_4b7e_aceb_6cf8623494e9.slice. May 17 00:39:20.169508 systemd[1]: Created slice kubepods-besteffort-poddddc5262_e1f3_4b01_bd21_570d31a85d68.slice. May 17 00:39:20.179160 systemd[1]: Created slice kubepods-besteffort-pod3ebcad15_5d11_4ed3_b1bb_3bd7f1c5d1af.slice. May 17 00:39:20.194464 systemd[1]: Created slice kubepods-besteffort-pod127d3909_e9a9_4f5a_ade7_8eda212d791f.slice. May 17 00:39:20.200144 systemd[1]: Created slice kubepods-besteffort-pod615ec9ce_9289_40d8_8d73_6e876ad8cb0e.slice. May 17 00:39:20.348995 kubelet[2516]: I0517 00:39:20.348883 2516 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-z9qmg\" (UniqueName: \"kubernetes.io/projected/615ec9ce-9289-40d8-8d73-6e876ad8cb0e-kube-api-access-z9qmg\") pod \"whisker-5478b65bdc-b722m\" (UID: \"615ec9ce-9289-40d8-8d73-6e876ad8cb0e\") " pod="calico-system/whisker-5478b65bdc-b722m" May 17 00:39:20.349208 kubelet[2516]: I0517 00:39:20.349169 2516 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config\" (UniqueName: \"kubernetes.io/configmap/3ebcad15-5d11-4ed3-b1bb-3bd7f1c5d1af-config\") pod \"goldmane-78d55f7ddc-d97gj\" (UID: \"3ebcad15-5d11-4ed3-b1bb-3bd7f1c5d1af\") " pod="calico-system/goldmane-78d55f7ddc-d97gj" May 17 00:39:20.349208 kubelet[2516]: I0517 00:39:20.349212 2516 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-lklcj\" (UniqueName: \"kubernetes.io/projected/3ebcad15-5d11-4ed3-b1bb-3bd7f1c5d1af-kube-api-access-lklcj\") pod \"goldmane-78d55f7ddc-d97gj\" (UID: \"3ebcad15-5d11-4ed3-b1bb-3bd7f1c5d1af\") " pod="calico-system/goldmane-78d55f7ddc-d97gj" May 17 00:39:20.349345 kubelet[2516]: I0517 00:39:20.349229 2516 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/615ec9ce-9289-40d8-8d73-6e876ad8cb0e-whisker-backend-key-pair\") pod \"whisker-5478b65bdc-b722m\" (UID: \"615ec9ce-9289-40d8-8d73-6e876ad8cb0e\") " pod="calico-system/whisker-5478b65bdc-b722m" May 17 00:39:20.349345 kubelet[2516]: I0517 00:39:20.349264 2516 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"goldmane-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/3ebcad15-5d11-4ed3-b1bb-3bd7f1c5d1af-goldmane-ca-bundle\") pod \"goldmane-78d55f7ddc-d97gj\" (UID: \"3ebcad15-5d11-4ed3-b1bb-3bd7f1c5d1af\") " pod="calico-system/goldmane-78d55f7ddc-d97gj" May 17 00:39:20.349345 kubelet[2516]: I0517 00:39:20.349288 2516 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"goldmane-key-pair\" (UniqueName: \"kubernetes.io/secret/3ebcad15-5d11-4ed3-b1bb-3bd7f1c5d1af-goldmane-key-pair\") pod \"goldmane-78d55f7ddc-d97gj\" (UID: \"3ebcad15-5d11-4ed3-b1bb-3bd7f1c5d1af\") " pod="calico-system/goldmane-78d55f7ddc-d97gj" May 17 00:39:20.349345 kubelet[2516]: I0517 00:39:20.349308 2516 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/615ec9ce-9289-40d8-8d73-6e876ad8cb0e-whisker-ca-bundle\") pod \"whisker-5478b65bdc-b722m\" (UID: \"615ec9ce-9289-40d8-8d73-6e876ad8cb0e\") " pod="calico-system/whisker-5478b65bdc-b722m" May 17 00:39:20.449364 env[1634]: time="2025-05-17T00:39:20.449319978Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-557b5c79c9-mhmhq,Uid:71c21642-e990-4107-bf6c-cc0ea6307b30,Namespace:calico-system,Attempt:0,}" May 17 00:39:20.466292 env[1634]: time="2025-05-17T00:39:20.466239861Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-57lkx,Uid:16d78791-e942-48bb-9e38-9ea0ea348207,Namespace:kube-system,Attempt:0,}" May 17 00:39:20.472474 env[1634]: time="2025-05-17T00:39:20.472228432Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-mnzbk,Uid:118f3b5b-8621-4b7e-aceb-6cf8623494e9,Namespace:kube-system,Attempt:0,}" May 17 00:39:20.476831 env[1634]: time="2025-05-17T00:39:20.476502750Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-755c444ff4-j2rw2,Uid:dddc5262-e1f3-4b01-bd21-570d31a85d68,Namespace:calico-apiserver,Attempt:0,}" May 17 00:39:20.488013 env[1634]: time="2025-05-17T00:39:20.487955747Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-78d55f7ddc-d97gj,Uid:3ebcad15-5d11-4ed3-b1bb-3bd7f1c5d1af,Namespace:calico-system,Attempt:0,}" May 17 00:39:20.499844 env[1634]: time="2025-05-17T00:39:20.499806102Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-755c444ff4-vrn79,Uid:127d3909-e9a9-4f5a-ade7-8eda212d791f,Namespace:calico-apiserver,Attempt:0,}" May 17 00:39:20.504137 env[1634]: time="2025-05-17T00:39:20.504102668Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-5478b65bdc-b722m,Uid:615ec9ce-9289-40d8-8d73-6e876ad8cb0e,Namespace:calico-system,Attempt:0,}" May 17 00:39:20.617477 env[1634]: time="2025-05-17T00:39:20.617430269Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.30.0\"" May 17 00:39:20.813187 env[1634]: time="2025-05-17T00:39:20.813127123Z" level=error msg="Failed to destroy network for sandbox \"4a05250ffa992278cc3fa91d87356f3ce410516402be12593c6b89807bd78a09\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" May 17 00:39:20.813705 env[1634]: time="2025-05-17T00:39:20.813662720Z" level=error msg="encountered an error cleaning up failed sandbox \"4a05250ffa992278cc3fa91d87356f3ce410516402be12593c6b89807bd78a09\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" May 17 00:39:20.814348 env[1634]: time="2025-05-17T00:39:20.813721048Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-5478b65bdc-b722m,Uid:615ec9ce-9289-40d8-8d73-6e876ad8cb0e,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"4a05250ffa992278cc3fa91d87356f3ce410516402be12593c6b89807bd78a09\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" May 17 00:39:20.814439 kubelet[2516]: E0517 00:39:20.813941 2516 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"4a05250ffa992278cc3fa91d87356f3ce410516402be12593c6b89807bd78a09\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" May 17 00:39:20.817295 kubelet[2516]: E0517 00:39:20.817253 2516 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"4a05250ffa992278cc3fa91d87356f3ce410516402be12593c6b89807bd78a09\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/whisker-5478b65bdc-b722m" May 17 00:39:20.817427 kubelet[2516]: E0517 00:39:20.817301 2516 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"4a05250ffa992278cc3fa91d87356f3ce410516402be12593c6b89807bd78a09\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/whisker-5478b65bdc-b722m" May 17 00:39:20.817427 kubelet[2516]: E0517 00:39:20.817365 2516 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"whisker-5478b65bdc-b722m_calico-system(615ec9ce-9289-40d8-8d73-6e876ad8cb0e)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"whisker-5478b65bdc-b722m_calico-system(615ec9ce-9289-40d8-8d73-6e876ad8cb0e)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"4a05250ffa992278cc3fa91d87356f3ce410516402be12593c6b89807bd78a09\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/whisker-5478b65bdc-b722m" podUID="615ec9ce-9289-40d8-8d73-6e876ad8cb0e" May 17 00:39:20.863470 env[1634]: time="2025-05-17T00:39:20.863420369Z" level=error msg="Failed to destroy network for sandbox \"bc2d658c0ed39ff320fda459439b61564ebcebc82e64082742176c054dda74e2\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" May 17 00:39:20.864070 env[1634]: time="2025-05-17T00:39:20.864037397Z" level=error msg="encountered an error cleaning up failed sandbox \"bc2d658c0ed39ff320fda459439b61564ebcebc82e64082742176c054dda74e2\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" May 17 00:39:20.864213 env[1634]: time="2025-05-17T00:39:20.864189420Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-557b5c79c9-mhmhq,Uid:71c21642-e990-4107-bf6c-cc0ea6307b30,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"bc2d658c0ed39ff320fda459439b61564ebcebc82e64082742176c054dda74e2\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" May 17 00:39:20.865383 kubelet[2516]: E0517 00:39:20.864502 2516 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"bc2d658c0ed39ff320fda459439b61564ebcebc82e64082742176c054dda74e2\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" May 17 00:39:20.865383 kubelet[2516]: E0517 00:39:20.864563 2516 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"bc2d658c0ed39ff320fda459439b61564ebcebc82e64082742176c054dda74e2\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-557b5c79c9-mhmhq" May 17 00:39:20.865383 kubelet[2516]: E0517 00:39:20.864582 2516 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"bc2d658c0ed39ff320fda459439b61564ebcebc82e64082742176c054dda74e2\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-557b5c79c9-mhmhq" May 17 00:39:20.865553 kubelet[2516]: E0517 00:39:20.864631 2516 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-kube-controllers-557b5c79c9-mhmhq_calico-system(71c21642-e990-4107-bf6c-cc0ea6307b30)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-kube-controllers-557b5c79c9-mhmhq_calico-system(71c21642-e990-4107-bf6c-cc0ea6307b30)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"bc2d658c0ed39ff320fda459439b61564ebcebc82e64082742176c054dda74e2\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-557b5c79c9-mhmhq" podUID="71c21642-e990-4107-bf6c-cc0ea6307b30" May 17 00:39:20.879356 env[1634]: time="2025-05-17T00:39:20.878939905Z" level=error msg="Failed to destroy network for sandbox \"2d982bb0c54d82a0eb9ac6679458b41ef0396c928f4b44e6521a8bc4eddb39ff\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" May 17 00:39:20.879496 env[1634]: time="2025-05-17T00:39:20.879454605Z" level=error msg="encountered an error cleaning up failed sandbox \"2d982bb0c54d82a0eb9ac6679458b41ef0396c928f4b44e6521a8bc4eddb39ff\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" May 17 00:39:20.879536 env[1634]: time="2025-05-17T00:39:20.879513265Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-78d55f7ddc-d97gj,Uid:3ebcad15-5d11-4ed3-b1bb-3bd7f1c5d1af,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"2d982bb0c54d82a0eb9ac6679458b41ef0396c928f4b44e6521a8bc4eddb39ff\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" May 17 00:39:20.881993 kubelet[2516]: E0517 00:39:20.880263 2516 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"2d982bb0c54d82a0eb9ac6679458b41ef0396c928f4b44e6521a8bc4eddb39ff\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" May 17 00:39:20.881993 kubelet[2516]: E0517 00:39:20.880335 2516 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"2d982bb0c54d82a0eb9ac6679458b41ef0396c928f4b44e6521a8bc4eddb39ff\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/goldmane-78d55f7ddc-d97gj" May 17 00:39:20.881993 kubelet[2516]: E0517 00:39:20.880364 2516 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"2d982bb0c54d82a0eb9ac6679458b41ef0396c928f4b44e6521a8bc4eddb39ff\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/goldmane-78d55f7ddc-d97gj" May 17 00:39:20.882187 kubelet[2516]: E0517 00:39:20.880441 2516 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"goldmane-78d55f7ddc-d97gj_calico-system(3ebcad15-5d11-4ed3-b1bb-3bd7f1c5d1af)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"goldmane-78d55f7ddc-d97gj_calico-system(3ebcad15-5d11-4ed3-b1bb-3bd7f1c5d1af)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"2d982bb0c54d82a0eb9ac6679458b41ef0396c928f4b44e6521a8bc4eddb39ff\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/goldmane-78d55f7ddc-d97gj" podUID="3ebcad15-5d11-4ed3-b1bb-3bd7f1c5d1af" May 17 00:39:20.900116 env[1634]: time="2025-05-17T00:39:20.900056461Z" level=error msg="Failed to destroy network for sandbox \"b63403821bb98f1a36e09917744185b1e1d620311f3eecdcf84978e46e4c2d4a\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" May 17 00:39:20.900411 env[1634]: time="2025-05-17T00:39:20.900380732Z" level=error msg="encountered an error cleaning up failed sandbox \"b63403821bb98f1a36e09917744185b1e1d620311f3eecdcf84978e46e4c2d4a\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" May 17 00:39:20.900475 env[1634]: time="2025-05-17T00:39:20.900434056Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-755c444ff4-vrn79,Uid:127d3909-e9a9-4f5a-ade7-8eda212d791f,Namespace:calico-apiserver,Attempt:0,} failed, error" error="failed to setup network for sandbox \"b63403821bb98f1a36e09917744185b1e1d620311f3eecdcf84978e46e4c2d4a\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" May 17 00:39:20.900669 kubelet[2516]: E0517 00:39:20.900622 2516 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"b63403821bb98f1a36e09917744185b1e1d620311f3eecdcf84978e46e4c2d4a\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" May 17 00:39:20.900745 kubelet[2516]: E0517 00:39:20.900693 2516 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"b63403821bb98f1a36e09917744185b1e1d620311f3eecdcf84978e46e4c2d4a\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-755c444ff4-vrn79" May 17 00:39:20.900745 kubelet[2516]: E0517 00:39:20.900714 2516 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"b63403821bb98f1a36e09917744185b1e1d620311f3eecdcf84978e46e4c2d4a\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-755c444ff4-vrn79" May 17 00:39:20.900841 kubelet[2516]: E0517 00:39:20.900762 2516 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-apiserver-755c444ff4-vrn79_calico-apiserver(127d3909-e9a9-4f5a-ade7-8eda212d791f)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-apiserver-755c444ff4-vrn79_calico-apiserver(127d3909-e9a9-4f5a-ade7-8eda212d791f)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"b63403821bb98f1a36e09917744185b1e1d620311f3eecdcf84978e46e4c2d4a\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-755c444ff4-vrn79" podUID="127d3909-e9a9-4f5a-ade7-8eda212d791f" May 17 00:39:20.910507 env[1634]: time="2025-05-17T00:39:20.910428912Z" level=error msg="Failed to destroy network for sandbox \"b0890c17061eccdf80ef3fdf6412a91f358237a85c6749e31cb054f4fa012ffd\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" May 17 00:39:20.911122 env[1634]: time="2025-05-17T00:39:20.911084826Z" level=error msg="encountered an error cleaning up failed sandbox \"b0890c17061eccdf80ef3fdf6412a91f358237a85c6749e31cb054f4fa012ffd\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" May 17 00:39:20.911421 env[1634]: time="2025-05-17T00:39:20.911390606Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-mnzbk,Uid:118f3b5b-8621-4b7e-aceb-6cf8623494e9,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"b0890c17061eccdf80ef3fdf6412a91f358237a85c6749e31cb054f4fa012ffd\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" May 17 00:39:20.911750 kubelet[2516]: E0517 00:39:20.911707 2516 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"b0890c17061eccdf80ef3fdf6412a91f358237a85c6749e31cb054f4fa012ffd\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" May 17 00:39:20.911854 kubelet[2516]: E0517 00:39:20.911774 2516 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"b0890c17061eccdf80ef3fdf6412a91f358237a85c6749e31cb054f4fa012ffd\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-674b8bbfcf-mnzbk" May 17 00:39:20.911854 kubelet[2516]: E0517 00:39:20.911800 2516 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"b0890c17061eccdf80ef3fdf6412a91f358237a85c6749e31cb054f4fa012ffd\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-674b8bbfcf-mnzbk" May 17 00:39:20.911922 kubelet[2516]: E0517 00:39:20.911852 2516 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-674b8bbfcf-mnzbk_kube-system(118f3b5b-8621-4b7e-aceb-6cf8623494e9)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-674b8bbfcf-mnzbk_kube-system(118f3b5b-8621-4b7e-aceb-6cf8623494e9)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"b0890c17061eccdf80ef3fdf6412a91f358237a85c6749e31cb054f4fa012ffd\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-674b8bbfcf-mnzbk" podUID="118f3b5b-8621-4b7e-aceb-6cf8623494e9" May 17 00:39:20.919998 env[1634]: time="2025-05-17T00:39:20.919886904Z" level=error msg="Failed to destroy network for sandbox \"1a626d650958c81e04f69095e4a8fff83ff1db2e2f084819d7ce4818043c475a\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" May 17 00:39:20.920247 env[1634]: time="2025-05-17T00:39:20.920216533Z" level=error msg="encountered an error cleaning up failed sandbox \"1a626d650958c81e04f69095e4a8fff83ff1db2e2f084819d7ce4818043c475a\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" May 17 00:39:20.920303 env[1634]: time="2025-05-17T00:39:20.920268468Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-57lkx,Uid:16d78791-e942-48bb-9e38-9ea0ea348207,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"1a626d650958c81e04f69095e4a8fff83ff1db2e2f084819d7ce4818043c475a\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" May 17 00:39:20.920538 kubelet[2516]: E0517 00:39:20.920466 2516 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"1a626d650958c81e04f69095e4a8fff83ff1db2e2f084819d7ce4818043c475a\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" May 17 00:39:20.920538 kubelet[2516]: E0517 00:39:20.920526 2516 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"1a626d650958c81e04f69095e4a8fff83ff1db2e2f084819d7ce4818043c475a\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-674b8bbfcf-57lkx" May 17 00:39:20.920745 kubelet[2516]: E0517 00:39:20.920546 2516 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"1a626d650958c81e04f69095e4a8fff83ff1db2e2f084819d7ce4818043c475a\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-674b8bbfcf-57lkx" May 17 00:39:20.920745 kubelet[2516]: E0517 00:39:20.920609 2516 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-674b8bbfcf-57lkx_kube-system(16d78791-e942-48bb-9e38-9ea0ea348207)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-674b8bbfcf-57lkx_kube-system(16d78791-e942-48bb-9e38-9ea0ea348207)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"1a626d650958c81e04f69095e4a8fff83ff1db2e2f084819d7ce4818043c475a\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-674b8bbfcf-57lkx" podUID="16d78791-e942-48bb-9e38-9ea0ea348207" May 17 00:39:20.925691 env[1634]: time="2025-05-17T00:39:20.925638003Z" level=error msg="Failed to destroy network for sandbox \"f72c29400ab7dcac47b5302348818191b393dad721d5927699a51057264f8d9b\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" May 17 00:39:20.926060 env[1634]: time="2025-05-17T00:39:20.926009029Z" level=error msg="encountered an error cleaning up failed sandbox \"f72c29400ab7dcac47b5302348818191b393dad721d5927699a51057264f8d9b\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" May 17 00:39:20.926162 env[1634]: time="2025-05-17T00:39:20.926084070Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-755c444ff4-j2rw2,Uid:dddc5262-e1f3-4b01-bd21-570d31a85d68,Namespace:calico-apiserver,Attempt:0,} failed, error" error="failed to setup network for sandbox \"f72c29400ab7dcac47b5302348818191b393dad721d5927699a51057264f8d9b\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" May 17 00:39:20.926390 kubelet[2516]: E0517 00:39:20.926352 2516 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"f72c29400ab7dcac47b5302348818191b393dad721d5927699a51057264f8d9b\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" May 17 00:39:20.926504 kubelet[2516]: E0517 00:39:20.926406 2516 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"f72c29400ab7dcac47b5302348818191b393dad721d5927699a51057264f8d9b\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-755c444ff4-j2rw2" May 17 00:39:20.926504 kubelet[2516]: E0517 00:39:20.926434 2516 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"f72c29400ab7dcac47b5302348818191b393dad721d5927699a51057264f8d9b\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-755c444ff4-j2rw2" May 17 00:39:20.926504 kubelet[2516]: E0517 00:39:20.926485 2516 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-apiserver-755c444ff4-j2rw2_calico-apiserver(dddc5262-e1f3-4b01-bd21-570d31a85d68)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-apiserver-755c444ff4-j2rw2_calico-apiserver(dddc5262-e1f3-4b01-bd21-570d31a85d68)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"f72c29400ab7dcac47b5302348818191b393dad721d5927699a51057264f8d9b\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-755c444ff4-j2rw2" podUID="dddc5262-e1f3-4b01-bd21-570d31a85d68" May 17 00:39:21.458234 systemd[1]: Created slice kubepods-besteffort-podccf5c16c_a554_4978_bf48_ec245cb3b696.slice. May 17 00:39:21.461086 env[1634]: time="2025-05-17T00:39:21.460981367Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-g8dpg,Uid:ccf5c16c-a554-4978-bf48-ec245cb3b696,Namespace:calico-system,Attempt:0,}" May 17 00:39:21.543989 env[1634]: time="2025-05-17T00:39:21.543928580Z" level=error msg="Failed to destroy network for sandbox \"6a80adfe9ae8a6c3e70d543cb6bf0e438152a46b17a0e937c0e216de0af8c0a1\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" May 17 00:39:21.548893 env[1634]: time="2025-05-17T00:39:21.547807631Z" level=error msg="encountered an error cleaning up failed sandbox \"6a80adfe9ae8a6c3e70d543cb6bf0e438152a46b17a0e937c0e216de0af8c0a1\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" May 17 00:39:21.548893 env[1634]: time="2025-05-17T00:39:21.547886469Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-g8dpg,Uid:ccf5c16c-a554-4978-bf48-ec245cb3b696,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"6a80adfe9ae8a6c3e70d543cb6bf0e438152a46b17a0e937c0e216de0af8c0a1\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" May 17 00:39:21.549901 kubelet[2516]: E0517 00:39:21.548835 2516 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"6a80adfe9ae8a6c3e70d543cb6bf0e438152a46b17a0e937c0e216de0af8c0a1\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" May 17 00:39:21.549901 kubelet[2516]: E0517 00:39:21.548913 2516 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"6a80adfe9ae8a6c3e70d543cb6bf0e438152a46b17a0e937c0e216de0af8c0a1\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-g8dpg" May 17 00:39:21.549901 kubelet[2516]: E0517 00:39:21.548956 2516 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"6a80adfe9ae8a6c3e70d543cb6bf0e438152a46b17a0e937c0e216de0af8c0a1\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-g8dpg" May 17 00:39:21.547099 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-6a80adfe9ae8a6c3e70d543cb6bf0e438152a46b17a0e937c0e216de0af8c0a1-shm.mount: Deactivated successfully. May 17 00:39:21.550204 kubelet[2516]: E0517 00:39:21.549038 2516 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"csi-node-driver-g8dpg_calico-system(ccf5c16c-a554-4978-bf48-ec245cb3b696)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"csi-node-driver-g8dpg_calico-system(ccf5c16c-a554-4978-bf48-ec245cb3b696)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"6a80adfe9ae8a6c3e70d543cb6bf0e438152a46b17a0e937c0e216de0af8c0a1\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-g8dpg" podUID="ccf5c16c-a554-4978-bf48-ec245cb3b696" May 17 00:39:21.598873 kubelet[2516]: I0517 00:39:21.598829 2516 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="b0890c17061eccdf80ef3fdf6412a91f358237a85c6749e31cb054f4fa012ffd" May 17 00:39:21.602348 kubelet[2516]: I0517 00:39:21.602321 2516 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="4a05250ffa992278cc3fa91d87356f3ce410516402be12593c6b89807bd78a09" May 17 00:39:21.607534 kubelet[2516]: I0517 00:39:21.607381 2516 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="bc2d658c0ed39ff320fda459439b61564ebcebc82e64082742176c054dda74e2" May 17 00:39:21.609218 kubelet[2516]: I0517 00:39:21.609048 2516 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="2d982bb0c54d82a0eb9ac6679458b41ef0396c928f4b44e6521a8bc4eddb39ff" May 17 00:39:21.613055 kubelet[2516]: I0517 00:39:21.613026 2516 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="f72c29400ab7dcac47b5302348818191b393dad721d5927699a51057264f8d9b" May 17 00:39:21.614521 env[1634]: time="2025-05-17T00:39:21.614474503Z" level=info msg="StopPodSandbox for \"f72c29400ab7dcac47b5302348818191b393dad721d5927699a51057264f8d9b\"" May 17 00:39:21.616062 env[1634]: time="2025-05-17T00:39:21.615671331Z" level=info msg="StopPodSandbox for \"4a05250ffa992278cc3fa91d87356f3ce410516402be12593c6b89807bd78a09\"" May 17 00:39:21.619435 env[1634]: time="2025-05-17T00:39:21.619394103Z" level=info msg="StopPodSandbox for \"bc2d658c0ed39ff320fda459439b61564ebcebc82e64082742176c054dda74e2\"" May 17 00:39:21.627796 kubelet[2516]: I0517 00:39:21.627549 2516 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="b63403821bb98f1a36e09917744185b1e1d620311f3eecdcf84978e46e4c2d4a" May 17 00:39:21.627954 env[1634]: time="2025-05-17T00:39:21.620497752Z" level=info msg="StopPodSandbox for \"b0890c17061eccdf80ef3fdf6412a91f358237a85c6749e31cb054f4fa012ffd\"" May 17 00:39:21.628404 env[1634]: time="2025-05-17T00:39:21.621904320Z" level=info msg="StopPodSandbox for \"2d982bb0c54d82a0eb9ac6679458b41ef0396c928f4b44e6521a8bc4eddb39ff\"" May 17 00:39:21.634472 env[1634]: time="2025-05-17T00:39:21.634427391Z" level=info msg="StopPodSandbox for \"b63403821bb98f1a36e09917744185b1e1d620311f3eecdcf84978e46e4c2d4a\"" May 17 00:39:21.637192 kubelet[2516]: I0517 00:39:21.637160 2516 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="6a80adfe9ae8a6c3e70d543cb6bf0e438152a46b17a0e937c0e216de0af8c0a1" May 17 00:39:21.640660 env[1634]: time="2025-05-17T00:39:21.640623810Z" level=info msg="StopPodSandbox for \"6a80adfe9ae8a6c3e70d543cb6bf0e438152a46b17a0e937c0e216de0af8c0a1\"" May 17 00:39:21.643486 kubelet[2516]: I0517 00:39:21.643431 2516 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="1a626d650958c81e04f69095e4a8fff83ff1db2e2f084819d7ce4818043c475a" May 17 00:39:21.646740 env[1634]: time="2025-05-17T00:39:21.646701855Z" level=info msg="StopPodSandbox for \"1a626d650958c81e04f69095e4a8fff83ff1db2e2f084819d7ce4818043c475a\"" May 17 00:39:21.736945 env[1634]: time="2025-05-17T00:39:21.736761694Z" level=error msg="StopPodSandbox for \"f72c29400ab7dcac47b5302348818191b393dad721d5927699a51057264f8d9b\" failed" error="failed to destroy network for sandbox \"f72c29400ab7dcac47b5302348818191b393dad721d5927699a51057264f8d9b\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" May 17 00:39:21.738615 kubelet[2516]: E0517 00:39:21.738549 2516 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"f72c29400ab7dcac47b5302348818191b393dad721d5927699a51057264f8d9b\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="f72c29400ab7dcac47b5302348818191b393dad721d5927699a51057264f8d9b" May 17 00:39:21.738788 kubelet[2516]: E0517 00:39:21.738640 2516 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"f72c29400ab7dcac47b5302348818191b393dad721d5927699a51057264f8d9b"} May 17 00:39:21.738788 kubelet[2516]: E0517 00:39:21.738739 2516 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"dddc5262-e1f3-4b01-bd21-570d31a85d68\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"f72c29400ab7dcac47b5302348818191b393dad721d5927699a51057264f8d9b\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" May 17 00:39:21.738949 kubelet[2516]: E0517 00:39:21.738798 2516 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"dddc5262-e1f3-4b01-bd21-570d31a85d68\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"f72c29400ab7dcac47b5302348818191b393dad721d5927699a51057264f8d9b\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-755c444ff4-j2rw2" podUID="dddc5262-e1f3-4b01-bd21-570d31a85d68" May 17 00:39:21.834022 env[1634]: time="2025-05-17T00:39:21.833958322Z" level=error msg="StopPodSandbox for \"4a05250ffa992278cc3fa91d87356f3ce410516402be12593c6b89807bd78a09\" failed" error="failed to destroy network for sandbox \"4a05250ffa992278cc3fa91d87356f3ce410516402be12593c6b89807bd78a09\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" May 17 00:39:21.834553 kubelet[2516]: E0517 00:39:21.834508 2516 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"4a05250ffa992278cc3fa91d87356f3ce410516402be12593c6b89807bd78a09\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="4a05250ffa992278cc3fa91d87356f3ce410516402be12593c6b89807bd78a09" May 17 00:39:21.835008 kubelet[2516]: E0517 00:39:21.834565 2516 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"4a05250ffa992278cc3fa91d87356f3ce410516402be12593c6b89807bd78a09"} May 17 00:39:21.835008 kubelet[2516]: E0517 00:39:21.834608 2516 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"615ec9ce-9289-40d8-8d73-6e876ad8cb0e\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"4a05250ffa992278cc3fa91d87356f3ce410516402be12593c6b89807bd78a09\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" May 17 00:39:21.835008 kubelet[2516]: E0517 00:39:21.834641 2516 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"615ec9ce-9289-40d8-8d73-6e876ad8cb0e\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"4a05250ffa992278cc3fa91d87356f3ce410516402be12593c6b89807bd78a09\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/whisker-5478b65bdc-b722m" podUID="615ec9ce-9289-40d8-8d73-6e876ad8cb0e" May 17 00:39:21.886781 env[1634]: time="2025-05-17T00:39:21.886701031Z" level=error msg="StopPodSandbox for \"bc2d658c0ed39ff320fda459439b61564ebcebc82e64082742176c054dda74e2\" failed" error="failed to destroy network for sandbox \"bc2d658c0ed39ff320fda459439b61564ebcebc82e64082742176c054dda74e2\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" May 17 00:39:21.887268 kubelet[2516]: E0517 00:39:21.887216 2516 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"bc2d658c0ed39ff320fda459439b61564ebcebc82e64082742176c054dda74e2\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="bc2d658c0ed39ff320fda459439b61564ebcebc82e64082742176c054dda74e2" May 17 00:39:21.887399 kubelet[2516]: E0517 00:39:21.887289 2516 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"bc2d658c0ed39ff320fda459439b61564ebcebc82e64082742176c054dda74e2"} May 17 00:39:21.887399 kubelet[2516]: E0517 00:39:21.887338 2516 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"71c21642-e990-4107-bf6c-cc0ea6307b30\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"bc2d658c0ed39ff320fda459439b61564ebcebc82e64082742176c054dda74e2\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" May 17 00:39:21.887399 kubelet[2516]: E0517 00:39:21.887370 2516 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"71c21642-e990-4107-bf6c-cc0ea6307b30\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"bc2d658c0ed39ff320fda459439b61564ebcebc82e64082742176c054dda74e2\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-557b5c79c9-mhmhq" podUID="71c21642-e990-4107-bf6c-cc0ea6307b30" May 17 00:39:21.904457 env[1634]: time="2025-05-17T00:39:21.904398044Z" level=error msg="StopPodSandbox for \"2d982bb0c54d82a0eb9ac6679458b41ef0396c928f4b44e6521a8bc4eddb39ff\" failed" error="failed to destroy network for sandbox \"2d982bb0c54d82a0eb9ac6679458b41ef0396c928f4b44e6521a8bc4eddb39ff\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" May 17 00:39:21.904931 kubelet[2516]: E0517 00:39:21.904886 2516 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"2d982bb0c54d82a0eb9ac6679458b41ef0396c928f4b44e6521a8bc4eddb39ff\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="2d982bb0c54d82a0eb9ac6679458b41ef0396c928f4b44e6521a8bc4eddb39ff" May 17 00:39:21.905063 kubelet[2516]: E0517 00:39:21.904951 2516 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"2d982bb0c54d82a0eb9ac6679458b41ef0396c928f4b44e6521a8bc4eddb39ff"} May 17 00:39:21.905063 kubelet[2516]: E0517 00:39:21.904993 2516 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"3ebcad15-5d11-4ed3-b1bb-3bd7f1c5d1af\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"2d982bb0c54d82a0eb9ac6679458b41ef0396c928f4b44e6521a8bc4eddb39ff\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" May 17 00:39:21.905063 kubelet[2516]: E0517 00:39:21.905026 2516 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"3ebcad15-5d11-4ed3-b1bb-3bd7f1c5d1af\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"2d982bb0c54d82a0eb9ac6679458b41ef0396c928f4b44e6521a8bc4eddb39ff\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/goldmane-78d55f7ddc-d97gj" podUID="3ebcad15-5d11-4ed3-b1bb-3bd7f1c5d1af" May 17 00:39:21.929556 env[1634]: time="2025-05-17T00:39:21.929349958Z" level=error msg="StopPodSandbox for \"b0890c17061eccdf80ef3fdf6412a91f358237a85c6749e31cb054f4fa012ffd\" failed" error="failed to destroy network for sandbox \"b0890c17061eccdf80ef3fdf6412a91f358237a85c6749e31cb054f4fa012ffd\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" May 17 00:39:21.930106 kubelet[2516]: E0517 00:39:21.930050 2516 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"b0890c17061eccdf80ef3fdf6412a91f358237a85c6749e31cb054f4fa012ffd\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="b0890c17061eccdf80ef3fdf6412a91f358237a85c6749e31cb054f4fa012ffd" May 17 00:39:21.930237 kubelet[2516]: E0517 00:39:21.930114 2516 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"b0890c17061eccdf80ef3fdf6412a91f358237a85c6749e31cb054f4fa012ffd"} May 17 00:39:21.930237 kubelet[2516]: E0517 00:39:21.930155 2516 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"118f3b5b-8621-4b7e-aceb-6cf8623494e9\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"b0890c17061eccdf80ef3fdf6412a91f358237a85c6749e31cb054f4fa012ffd\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" May 17 00:39:21.930237 kubelet[2516]: E0517 00:39:21.930196 2516 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"118f3b5b-8621-4b7e-aceb-6cf8623494e9\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"b0890c17061eccdf80ef3fdf6412a91f358237a85c6749e31cb054f4fa012ffd\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-674b8bbfcf-mnzbk" podUID="118f3b5b-8621-4b7e-aceb-6cf8623494e9" May 17 00:39:21.976028 env[1634]: time="2025-05-17T00:39:21.975964658Z" level=error msg="StopPodSandbox for \"6a80adfe9ae8a6c3e70d543cb6bf0e438152a46b17a0e937c0e216de0af8c0a1\" failed" error="failed to destroy network for sandbox \"6a80adfe9ae8a6c3e70d543cb6bf0e438152a46b17a0e937c0e216de0af8c0a1\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" May 17 00:39:21.976747 kubelet[2516]: E0517 00:39:21.976508 2516 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"6a80adfe9ae8a6c3e70d543cb6bf0e438152a46b17a0e937c0e216de0af8c0a1\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="6a80adfe9ae8a6c3e70d543cb6bf0e438152a46b17a0e937c0e216de0af8c0a1" May 17 00:39:21.976747 kubelet[2516]: E0517 00:39:21.976591 2516 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"6a80adfe9ae8a6c3e70d543cb6bf0e438152a46b17a0e937c0e216de0af8c0a1"} May 17 00:39:21.976747 kubelet[2516]: E0517 00:39:21.976637 2516 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"ccf5c16c-a554-4978-bf48-ec245cb3b696\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"6a80adfe9ae8a6c3e70d543cb6bf0e438152a46b17a0e937c0e216de0af8c0a1\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" May 17 00:39:21.976747 kubelet[2516]: E0517 00:39:21.976688 2516 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"ccf5c16c-a554-4978-bf48-ec245cb3b696\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"6a80adfe9ae8a6c3e70d543cb6bf0e438152a46b17a0e937c0e216de0af8c0a1\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-g8dpg" podUID="ccf5c16c-a554-4978-bf48-ec245cb3b696" May 17 00:39:21.989959 env[1634]: time="2025-05-17T00:39:21.988477314Z" level=error msg="StopPodSandbox for \"b63403821bb98f1a36e09917744185b1e1d620311f3eecdcf84978e46e4c2d4a\" failed" error="failed to destroy network for sandbox \"b63403821bb98f1a36e09917744185b1e1d620311f3eecdcf84978e46e4c2d4a\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" May 17 00:39:21.990415 kubelet[2516]: E0517 00:39:21.990361 2516 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"b63403821bb98f1a36e09917744185b1e1d620311f3eecdcf84978e46e4c2d4a\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="b63403821bb98f1a36e09917744185b1e1d620311f3eecdcf84978e46e4c2d4a" May 17 00:39:21.990535 kubelet[2516]: E0517 00:39:21.990427 2516 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"b63403821bb98f1a36e09917744185b1e1d620311f3eecdcf84978e46e4c2d4a"} May 17 00:39:21.990535 kubelet[2516]: E0517 00:39:21.990468 2516 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"127d3909-e9a9-4f5a-ade7-8eda212d791f\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"b63403821bb98f1a36e09917744185b1e1d620311f3eecdcf84978e46e4c2d4a\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" May 17 00:39:21.990535 kubelet[2516]: E0517 00:39:21.990499 2516 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"127d3909-e9a9-4f5a-ade7-8eda212d791f\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"b63403821bb98f1a36e09917744185b1e1d620311f3eecdcf84978e46e4c2d4a\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-755c444ff4-vrn79" podUID="127d3909-e9a9-4f5a-ade7-8eda212d791f" May 17 00:39:21.992666 env[1634]: time="2025-05-17T00:39:21.992608761Z" level=error msg="StopPodSandbox for \"1a626d650958c81e04f69095e4a8fff83ff1db2e2f084819d7ce4818043c475a\" failed" error="failed to destroy network for sandbox \"1a626d650958c81e04f69095e4a8fff83ff1db2e2f084819d7ce4818043c475a\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" May 17 00:39:21.993259 kubelet[2516]: E0517 00:39:21.993065 2516 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"1a626d650958c81e04f69095e4a8fff83ff1db2e2f084819d7ce4818043c475a\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="1a626d650958c81e04f69095e4a8fff83ff1db2e2f084819d7ce4818043c475a" May 17 00:39:21.993259 kubelet[2516]: E0517 00:39:21.993135 2516 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"1a626d650958c81e04f69095e4a8fff83ff1db2e2f084819d7ce4818043c475a"} May 17 00:39:21.993259 kubelet[2516]: E0517 00:39:21.993180 2516 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"16d78791-e942-48bb-9e38-9ea0ea348207\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"1a626d650958c81e04f69095e4a8fff83ff1db2e2f084819d7ce4818043c475a\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" May 17 00:39:21.993259 kubelet[2516]: E0517 00:39:21.993226 2516 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"16d78791-e942-48bb-9e38-9ea0ea348207\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"1a626d650958c81e04f69095e4a8fff83ff1db2e2f084819d7ce4818043c475a\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-674b8bbfcf-57lkx" podUID="16d78791-e942-48bb-9e38-9ea0ea348207" May 17 00:39:27.026941 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2227073731.mount: Deactivated successfully. May 17 00:39:27.065610 env[1634]: time="2025-05-17T00:39:27.065564503Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node:v3.30.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" May 17 00:39:27.069655 env[1634]: time="2025-05-17T00:39:27.069601114Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:d12dae9bc0999225efe30fd5618bcf2195709d54ed2840234f5006aab5f7d721,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" May 17 00:39:27.072137 env[1634]: time="2025-05-17T00:39:27.072101343Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/node:v3.30.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" May 17 00:39:27.074491 env[1634]: time="2025-05-17T00:39:27.074437214Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node@sha256:7cb61ea47ca0a8e6d0526a42da4f1e399b37ccd13339d0776d272465cb7ee012,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" May 17 00:39:27.075104 env[1634]: time="2025-05-17T00:39:27.075075524Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.30.0\" returns image reference \"sha256:d12dae9bc0999225efe30fd5618bcf2195709d54ed2840234f5006aab5f7d721\"" May 17 00:39:27.116896 env[1634]: time="2025-05-17T00:39:27.116848420Z" level=info msg="CreateContainer within sandbox \"1cf5fca20aad918de71d2fda89c2b52db15831aa913a77f3c60be4eea02709a6\" for container &ContainerMetadata{Name:calico-node,Attempt:0,}" May 17 00:39:27.143439 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount4138477349.mount: Deactivated successfully. May 17 00:39:27.151679 env[1634]: time="2025-05-17T00:39:27.151615317Z" level=info msg="CreateContainer within sandbox \"1cf5fca20aad918de71d2fda89c2b52db15831aa913a77f3c60be4eea02709a6\" for &ContainerMetadata{Name:calico-node,Attempt:0,} returns container id \"e777fb60a0010b29124aa0b04a8472137dd90de26b131c07332bc276b5846713\"" May 17 00:39:27.153563 env[1634]: time="2025-05-17T00:39:27.153529946Z" level=info msg="StartContainer for \"e777fb60a0010b29124aa0b04a8472137dd90de26b131c07332bc276b5846713\"" May 17 00:39:27.172793 systemd[1]: Started cri-containerd-e777fb60a0010b29124aa0b04a8472137dd90de26b131c07332bc276b5846713.scope. May 17 00:39:27.200000 audit[3742]: AVC avc: denied { perfmon } for pid=3742 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:27.236077 kernel: kauditd_printk_skb: 34 callbacks suppressed May 17 00:39:27.241300 kernel: audit: type=1400 audit(1747442367.200:971): avc: denied { perfmon } for pid=3742 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:27.247352 kernel: audit: type=1300 audit(1747442367.200:971): arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c00014d6b0 a2=3c a3=7f8c6441dcb8 items=0 ppid=3078 pid=3742 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:27.248526 kernel: audit: type=1327 audit(1747442367.200:971): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6537373766623630613030313062323931323461613062303461383437 May 17 00:39:27.248590 kernel: audit: type=1400 audit(1747442367.200:972): avc: denied { bpf } for pid=3742 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:27.248623 kernel: audit: type=1400 audit(1747442367.200:972): avc: denied { bpf } for pid=3742 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:27.248652 kernel: audit: type=1400 audit(1747442367.200:972): avc: denied { bpf } for pid=3742 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:27.253982 kernel: audit: type=1400 audit(1747442367.200:972): avc: denied { perfmon } for pid=3742 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:27.254187 kernel: audit: type=1400 audit(1747442367.200:972): avc: denied { perfmon } for pid=3742 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:27.200000 audit[3742]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c00014d6b0 a2=3c a3=7f8c6441dcb8 items=0 ppid=3078 pid=3742 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:27.264503 kernel: audit: type=1400 audit(1747442367.200:972): avc: denied { perfmon } for pid=3742 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:27.200000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6537373766623630613030313062323931323461613062303461383437 May 17 00:39:27.200000 audit[3742]: AVC avc: denied { bpf } for pid=3742 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:27.200000 audit[3742]: AVC avc: denied { bpf } for pid=3742 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:27.200000 audit[3742]: AVC avc: denied { bpf } for pid=3742 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:27.200000 audit[3742]: AVC avc: denied { perfmon } for pid=3742 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:27.200000 audit[3742]: AVC avc: denied { perfmon } for pid=3742 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:27.200000 audit[3742]: AVC avc: denied { perfmon } for pid=3742 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:27.200000 audit[3742]: AVC avc: denied { perfmon } for pid=3742 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:27.200000 audit[3742]: AVC avc: denied { perfmon } for pid=3742 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:27.200000 audit[3742]: AVC avc: denied { bpf } for pid=3742 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:27.200000 audit[3742]: AVC avc: denied { bpf } for pid=3742 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:27.200000 audit: BPF prog-id=145 op=LOAD May 17 00:39:27.200000 audit[3742]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c00014d9d8 a2=78 a3=c000314208 items=0 ppid=3078 pid=3742 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:27.276112 kernel: audit: type=1400 audit(1747442367.200:972): avc: denied { perfmon } for pid=3742 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:27.200000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6537373766623630613030313062323931323461613062303461383437 May 17 00:39:27.209000 audit[3742]: AVC avc: denied { bpf } for pid=3742 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:27.209000 audit[3742]: AVC avc: denied { bpf } for pid=3742 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:27.209000 audit[3742]: AVC avc: denied { perfmon } for pid=3742 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:27.209000 audit[3742]: AVC avc: denied { perfmon } for pid=3742 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:27.209000 audit[3742]: AVC avc: denied { perfmon } for pid=3742 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:27.209000 audit[3742]: AVC avc: denied { perfmon } for pid=3742 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:27.209000 audit[3742]: AVC avc: denied { perfmon } for pid=3742 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:27.209000 audit[3742]: AVC avc: denied { bpf } for pid=3742 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:27.209000 audit[3742]: AVC avc: denied { bpf } for pid=3742 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:27.209000 audit: BPF prog-id=146 op=LOAD May 17 00:39:27.209000 audit[3742]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c00014d770 a2=78 a3=c000314258 items=0 ppid=3078 pid=3742 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:27.209000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6537373766623630613030313062323931323461613062303461383437 May 17 00:39:27.233000 audit: BPF prog-id=146 op=UNLOAD May 17 00:39:27.233000 audit: BPF prog-id=145 op=UNLOAD May 17 00:39:27.233000 audit[3742]: AVC avc: denied { bpf } for pid=3742 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:27.233000 audit[3742]: AVC avc: denied { bpf } for pid=3742 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:27.233000 audit[3742]: AVC avc: denied { bpf } for pid=3742 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:27.233000 audit[3742]: AVC avc: denied { perfmon } for pid=3742 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:27.233000 audit[3742]: AVC avc: denied { perfmon } for pid=3742 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:27.233000 audit[3742]: AVC avc: denied { perfmon } for pid=3742 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:27.233000 audit[3742]: AVC avc: denied { perfmon } for pid=3742 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:27.233000 audit[3742]: AVC avc: denied { perfmon } for pid=3742 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:27.233000 audit[3742]: AVC avc: denied { bpf } for pid=3742 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:27.233000 audit[3742]: AVC avc: denied { bpf } for pid=3742 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:27.233000 audit: BPF prog-id=147 op=LOAD May 17 00:39:27.233000 audit[3742]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c00014dc30 a2=78 a3=c0003142e8 items=0 ppid=3078 pid=3742 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:27.233000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6537373766623630613030313062323931323461613062303461383437 May 17 00:39:27.293459 env[1634]: time="2025-05-17T00:39:27.293366454Z" level=info msg="StartContainer for \"e777fb60a0010b29124aa0b04a8472137dd90de26b131c07332bc276b5846713\" returns successfully" May 17 00:39:27.711296 kernel: wireguard: WireGuard 1.0.0 loaded. See www.wireguard.com for information. May 17 00:39:27.711482 kernel: wireguard: Copyright (C) 2015-2019 Jason A. Donenfeld . All Rights Reserved. May 17 00:39:27.719523 kubelet[2516]: I0517 00:39:27.712804 2516 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-node-8x4d4" podStartSLOduration=1.96096708 podStartE2EDuration="20.706411844s" podCreationTimestamp="2025-05-17 00:39:07 +0000 UTC" firstStartedPulling="2025-05-17 00:39:08.330696486 +0000 UTC m=+20.200957695" lastFinishedPulling="2025-05-17 00:39:27.076141264 +0000 UTC m=+38.946402459" observedRunningTime="2025-05-17 00:39:27.70271913 +0000 UTC m=+39.572980349" watchObservedRunningTime="2025-05-17 00:39:27.706411844 +0000 UTC m=+39.576673062" May 17 00:39:28.065969 env[1634]: time="2025-05-17T00:39:28.064229062Z" level=info msg="StopPodSandbox for \"4a05250ffa992278cc3fa91d87356f3ce410516402be12593c6b89807bd78a09\"" May 17 00:39:28.598668 env[1634]: 2025-05-17 00:39:28.201 [INFO][3795] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="4a05250ffa992278cc3fa91d87356f3ce410516402be12593c6b89807bd78a09" May 17 00:39:28.598668 env[1634]: 2025-05-17 00:39:28.201 [INFO][3795] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="4a05250ffa992278cc3fa91d87356f3ce410516402be12593c6b89807bd78a09" iface="eth0" netns="/var/run/netns/cni-a7593e17-bdec-35e0-8d7d-84ea901e6874" May 17 00:39:28.598668 env[1634]: 2025-05-17 00:39:28.202 [INFO][3795] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="4a05250ffa992278cc3fa91d87356f3ce410516402be12593c6b89807bd78a09" iface="eth0" netns="/var/run/netns/cni-a7593e17-bdec-35e0-8d7d-84ea901e6874" May 17 00:39:28.598668 env[1634]: 2025-05-17 00:39:28.204 [INFO][3795] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="4a05250ffa992278cc3fa91d87356f3ce410516402be12593c6b89807bd78a09" iface="eth0" netns="/var/run/netns/cni-a7593e17-bdec-35e0-8d7d-84ea901e6874" May 17 00:39:28.598668 env[1634]: 2025-05-17 00:39:28.204 [INFO][3795] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="4a05250ffa992278cc3fa91d87356f3ce410516402be12593c6b89807bd78a09" May 17 00:39:28.598668 env[1634]: 2025-05-17 00:39:28.205 [INFO][3795] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="4a05250ffa992278cc3fa91d87356f3ce410516402be12593c6b89807bd78a09" May 17 00:39:28.598668 env[1634]: 2025-05-17 00:39:28.571 [INFO][3803] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="4a05250ffa992278cc3fa91d87356f3ce410516402be12593c6b89807bd78a09" HandleID="k8s-pod-network.4a05250ffa992278cc3fa91d87356f3ce410516402be12593c6b89807bd78a09" Workload="ip--172--31--30--240-k8s-whisker--5478b65bdc--b722m-eth0" May 17 00:39:28.598668 env[1634]: 2025-05-17 00:39:28.575 [INFO][3803] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. May 17 00:39:28.598668 env[1634]: 2025-05-17 00:39:28.576 [INFO][3803] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. May 17 00:39:28.598668 env[1634]: 2025-05-17 00:39:28.592 [WARNING][3803] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="4a05250ffa992278cc3fa91d87356f3ce410516402be12593c6b89807bd78a09" HandleID="k8s-pod-network.4a05250ffa992278cc3fa91d87356f3ce410516402be12593c6b89807bd78a09" Workload="ip--172--31--30--240-k8s-whisker--5478b65bdc--b722m-eth0" May 17 00:39:28.598668 env[1634]: 2025-05-17 00:39:28.592 [INFO][3803] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="4a05250ffa992278cc3fa91d87356f3ce410516402be12593c6b89807bd78a09" HandleID="k8s-pod-network.4a05250ffa992278cc3fa91d87356f3ce410516402be12593c6b89807bd78a09" Workload="ip--172--31--30--240-k8s-whisker--5478b65bdc--b722m-eth0" May 17 00:39:28.598668 env[1634]: 2025-05-17 00:39:28.593 [INFO][3803] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. May 17 00:39:28.598668 env[1634]: 2025-05-17 00:39:28.596 [INFO][3795] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="4a05250ffa992278cc3fa91d87356f3ce410516402be12593c6b89807bd78a09" May 17 00:39:28.603978 env[1634]: time="2025-05-17T00:39:28.602555589Z" level=info msg="TearDown network for sandbox \"4a05250ffa992278cc3fa91d87356f3ce410516402be12593c6b89807bd78a09\" successfully" May 17 00:39:28.603978 env[1634]: time="2025-05-17T00:39:28.602591954Z" level=info msg="StopPodSandbox for \"4a05250ffa992278cc3fa91d87356f3ce410516402be12593c6b89807bd78a09\" returns successfully" May 17 00:39:28.601458 systemd[1]: run-netns-cni\x2da7593e17\x2dbdec\x2d35e0\x2d8d7d\x2d84ea901e6874.mount: Deactivated successfully. May 17 00:39:28.617694 kubelet[2516]: I0517 00:39:28.617657 2516 reconciler_common.go:162] "operationExecutor.UnmountVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/615ec9ce-9289-40d8-8d73-6e876ad8cb0e-whisker-backend-key-pair\") pod \"615ec9ce-9289-40d8-8d73-6e876ad8cb0e\" (UID: \"615ec9ce-9289-40d8-8d73-6e876ad8cb0e\") " May 17 00:39:28.617869 kubelet[2516]: I0517 00:39:28.617722 2516 reconciler_common.go:162] "operationExecutor.UnmountVolume started for volume \"kube-api-access-z9qmg\" (UniqueName: \"kubernetes.io/projected/615ec9ce-9289-40d8-8d73-6e876ad8cb0e-kube-api-access-z9qmg\") pod \"615ec9ce-9289-40d8-8d73-6e876ad8cb0e\" (UID: \"615ec9ce-9289-40d8-8d73-6e876ad8cb0e\") " May 17 00:39:28.617869 kubelet[2516]: I0517 00:39:28.617744 2516 reconciler_common.go:162] "operationExecutor.UnmountVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/615ec9ce-9289-40d8-8d73-6e876ad8cb0e-whisker-ca-bundle\") pod \"615ec9ce-9289-40d8-8d73-6e876ad8cb0e\" (UID: \"615ec9ce-9289-40d8-8d73-6e876ad8cb0e\") " May 17 00:39:28.631000 kubelet[2516]: I0517 00:39:28.629570 2516 operation_generator.go:781] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/615ec9ce-9289-40d8-8d73-6e876ad8cb0e-whisker-ca-bundle" (OuterVolumeSpecName: "whisker-ca-bundle") pod "615ec9ce-9289-40d8-8d73-6e876ad8cb0e" (UID: "615ec9ce-9289-40d8-8d73-6e876ad8cb0e"). InnerVolumeSpecName "whisker-ca-bundle". PluginName "kubernetes.io/configmap", VolumeGIDValue "" May 17 00:39:28.632496 kubelet[2516]: I0517 00:39:28.632460 2516 operation_generator.go:781] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/615ec9ce-9289-40d8-8d73-6e876ad8cb0e-whisker-backend-key-pair" (OuterVolumeSpecName: "whisker-backend-key-pair") pod "615ec9ce-9289-40d8-8d73-6e876ad8cb0e" (UID: "615ec9ce-9289-40d8-8d73-6e876ad8cb0e"). InnerVolumeSpecName "whisker-backend-key-pair". PluginName "kubernetes.io/secret", VolumeGIDValue "" May 17 00:39:28.634140 systemd[1]: var-lib-kubelet-pods-615ec9ce\x2d9289\x2d40d8\x2d8d73\x2d6e876ad8cb0e-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2dz9qmg.mount: Deactivated successfully. May 17 00:39:28.634248 systemd[1]: var-lib-kubelet-pods-615ec9ce\x2d9289\x2d40d8\x2d8d73\x2d6e876ad8cb0e-volumes-kubernetes.io\x7esecret-whisker\x2dbackend\x2dkey\x2dpair.mount: Deactivated successfully. May 17 00:39:28.636762 kubelet[2516]: I0517 00:39:28.636703 2516 operation_generator.go:781] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/615ec9ce-9289-40d8-8d73-6e876ad8cb0e-kube-api-access-z9qmg" (OuterVolumeSpecName: "kube-api-access-z9qmg") pod "615ec9ce-9289-40d8-8d73-6e876ad8cb0e" (UID: "615ec9ce-9289-40d8-8d73-6e876ad8cb0e"). InnerVolumeSpecName "kube-api-access-z9qmg". PluginName "kubernetes.io/projected", VolumeGIDValue "" May 17 00:39:28.688180 kubelet[2516]: I0517 00:39:28.687536 2516 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" May 17 00:39:28.719227 systemd[1]: Removed slice kubepods-besteffort-pod615ec9ce_9289_40d8_8d73_6e876ad8cb0e.slice. May 17 00:39:28.730829 kubelet[2516]: I0517 00:39:28.730761 2516 reconciler_common.go:299] "Volume detached for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/615ec9ce-9289-40d8-8d73-6e876ad8cb0e-whisker-backend-key-pair\") on node \"ip-172-31-30-240\" DevicePath \"\"" May 17 00:39:28.730829 kubelet[2516]: I0517 00:39:28.730819 2516 reconciler_common.go:299] "Volume detached for volume \"kube-api-access-z9qmg\" (UniqueName: \"kubernetes.io/projected/615ec9ce-9289-40d8-8d73-6e876ad8cb0e-kube-api-access-z9qmg\") on node \"ip-172-31-30-240\" DevicePath \"\"" May 17 00:39:28.730829 kubelet[2516]: I0517 00:39:28.730832 2516 reconciler_common.go:299] "Volume detached for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/615ec9ce-9289-40d8-8d73-6e876ad8cb0e-whisker-ca-bundle\") on node \"ip-172-31-30-240\" DevicePath \"\"" May 17 00:39:28.822998 systemd[1]: Created slice kubepods-besteffort-pod9a1d6802_818f_497c_bada_09fc52fbf432.slice. May 17 00:39:28.933027 kubelet[2516]: I0517 00:39:28.932968 2516 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/9a1d6802-818f-497c-bada-09fc52fbf432-whisker-ca-bundle\") pod \"whisker-74cd64d847-wzdsv\" (UID: \"9a1d6802-818f-497c-bada-09fc52fbf432\") " pod="calico-system/whisker-74cd64d847-wzdsv" May 17 00:39:28.933203 kubelet[2516]: I0517 00:39:28.933042 2516 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-5f82j\" (UniqueName: \"kubernetes.io/projected/9a1d6802-818f-497c-bada-09fc52fbf432-kube-api-access-5f82j\") pod \"whisker-74cd64d847-wzdsv\" (UID: \"9a1d6802-818f-497c-bada-09fc52fbf432\") " pod="calico-system/whisker-74cd64d847-wzdsv" May 17 00:39:28.933203 kubelet[2516]: I0517 00:39:28.933061 2516 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/9a1d6802-818f-497c-bada-09fc52fbf432-whisker-backend-key-pair\") pod \"whisker-74cd64d847-wzdsv\" (UID: \"9a1d6802-818f-497c-bada-09fc52fbf432\") " pod="calico-system/whisker-74cd64d847-wzdsv" May 17 00:39:29.126726 env[1634]: time="2025-05-17T00:39:29.126684321Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-74cd64d847-wzdsv,Uid:9a1d6802-818f-497c-bada-09fc52fbf432,Namespace:calico-system,Attempt:0,}" May 17 00:39:29.297230 (udev-worker)[3773]: Network interface NamePolicy= disabled on kernel command line. May 17 00:39:29.304853 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready May 17 00:39:29.304914 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calia4dce9268ad: link becomes ready May 17 00:39:29.307901 systemd-networkd[1360]: calia4dce9268ad: Link UP May 17 00:39:29.308115 systemd-networkd[1360]: calia4dce9268ad: Gained carrier May 17 00:39:29.325164 env[1634]: 2025-05-17 00:39:29.176 [INFO][3825] cni-plugin/utils.go 100: File /var/lib/calico/mtu does not exist May 17 00:39:29.325164 env[1634]: 2025-05-17 00:39:29.189 [INFO][3825] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ip--172--31--30--240-k8s-whisker--74cd64d847--wzdsv-eth0 whisker-74cd64d847- calico-system 9a1d6802-818f-497c-bada-09fc52fbf432 899 0 2025-05-17 00:39:28 +0000 UTC map[app.kubernetes.io/name:whisker k8s-app:whisker pod-template-hash:74cd64d847 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:whisker] map[] [] [] []} {k8s ip-172-31-30-240 whisker-74cd64d847-wzdsv eth0 whisker [] [] [kns.calico-system ksa.calico-system.whisker] calia4dce9268ad [] [] }} ContainerID="e065a2678dcbddef44a88cd4006116e01bf6709e4880fe2915ee449db404dac5" Namespace="calico-system" Pod="whisker-74cd64d847-wzdsv" WorkloadEndpoint="ip--172--31--30--240-k8s-whisker--74cd64d847--wzdsv-" May 17 00:39:29.325164 env[1634]: 2025-05-17 00:39:29.189 [INFO][3825] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="e065a2678dcbddef44a88cd4006116e01bf6709e4880fe2915ee449db404dac5" Namespace="calico-system" Pod="whisker-74cd64d847-wzdsv" WorkloadEndpoint="ip--172--31--30--240-k8s-whisker--74cd64d847--wzdsv-eth0" May 17 00:39:29.325164 env[1634]: 2025-05-17 00:39:29.222 [INFO][3838] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="e065a2678dcbddef44a88cd4006116e01bf6709e4880fe2915ee449db404dac5" HandleID="k8s-pod-network.e065a2678dcbddef44a88cd4006116e01bf6709e4880fe2915ee449db404dac5" Workload="ip--172--31--30--240-k8s-whisker--74cd64d847--wzdsv-eth0" May 17 00:39:29.325164 env[1634]: 2025-05-17 00:39:29.222 [INFO][3838] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="e065a2678dcbddef44a88cd4006116e01bf6709e4880fe2915ee449db404dac5" HandleID="k8s-pod-network.e065a2678dcbddef44a88cd4006116e01bf6709e4880fe2915ee449db404dac5" Workload="ip--172--31--30--240-k8s-whisker--74cd64d847--wzdsv-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0002d9630), Attrs:map[string]string{"namespace":"calico-system", "node":"ip-172-31-30-240", "pod":"whisker-74cd64d847-wzdsv", "timestamp":"2025-05-17 00:39:29.22217279 +0000 UTC"}, Hostname:"ip-172-31-30-240", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} May 17 00:39:29.325164 env[1634]: 2025-05-17 00:39:29.222 [INFO][3838] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. May 17 00:39:29.325164 env[1634]: 2025-05-17 00:39:29.222 [INFO][3838] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. May 17 00:39:29.325164 env[1634]: 2025-05-17 00:39:29.222 [INFO][3838] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ip-172-31-30-240' May 17 00:39:29.325164 env[1634]: 2025-05-17 00:39:29.235 [INFO][3838] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.e065a2678dcbddef44a88cd4006116e01bf6709e4880fe2915ee449db404dac5" host="ip-172-31-30-240" May 17 00:39:29.325164 env[1634]: 2025-05-17 00:39:29.254 [INFO][3838] ipam/ipam.go 394: Looking up existing affinities for host host="ip-172-31-30-240" May 17 00:39:29.325164 env[1634]: 2025-05-17 00:39:29.261 [INFO][3838] ipam/ipam.go 511: Trying affinity for 192.168.105.64/26 host="ip-172-31-30-240" May 17 00:39:29.325164 env[1634]: 2025-05-17 00:39:29.264 [INFO][3838] ipam/ipam.go 158: Attempting to load block cidr=192.168.105.64/26 host="ip-172-31-30-240" May 17 00:39:29.325164 env[1634]: 2025-05-17 00:39:29.266 [INFO][3838] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.105.64/26 host="ip-172-31-30-240" May 17 00:39:29.325164 env[1634]: 2025-05-17 00:39:29.266 [INFO][3838] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.105.64/26 handle="k8s-pod-network.e065a2678dcbddef44a88cd4006116e01bf6709e4880fe2915ee449db404dac5" host="ip-172-31-30-240" May 17 00:39:29.325164 env[1634]: 2025-05-17 00:39:29.268 [INFO][3838] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.e065a2678dcbddef44a88cd4006116e01bf6709e4880fe2915ee449db404dac5 May 17 00:39:29.325164 env[1634]: 2025-05-17 00:39:29.273 [INFO][3838] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.105.64/26 handle="k8s-pod-network.e065a2678dcbddef44a88cd4006116e01bf6709e4880fe2915ee449db404dac5" host="ip-172-31-30-240" May 17 00:39:29.325164 env[1634]: 2025-05-17 00:39:29.282 [INFO][3838] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.105.65/26] block=192.168.105.64/26 handle="k8s-pod-network.e065a2678dcbddef44a88cd4006116e01bf6709e4880fe2915ee449db404dac5" host="ip-172-31-30-240" May 17 00:39:29.325164 env[1634]: 2025-05-17 00:39:29.282 [INFO][3838] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.105.65/26] handle="k8s-pod-network.e065a2678dcbddef44a88cd4006116e01bf6709e4880fe2915ee449db404dac5" host="ip-172-31-30-240" May 17 00:39:29.325164 env[1634]: 2025-05-17 00:39:29.282 [INFO][3838] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. May 17 00:39:29.325164 env[1634]: 2025-05-17 00:39:29.282 [INFO][3838] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.105.65/26] IPv6=[] ContainerID="e065a2678dcbddef44a88cd4006116e01bf6709e4880fe2915ee449db404dac5" HandleID="k8s-pod-network.e065a2678dcbddef44a88cd4006116e01bf6709e4880fe2915ee449db404dac5" Workload="ip--172--31--30--240-k8s-whisker--74cd64d847--wzdsv-eth0" May 17 00:39:29.326813 env[1634]: 2025-05-17 00:39:29.286 [INFO][3825] cni-plugin/k8s.go 418: Populated endpoint ContainerID="e065a2678dcbddef44a88cd4006116e01bf6709e4880fe2915ee449db404dac5" Namespace="calico-system" Pod="whisker-74cd64d847-wzdsv" WorkloadEndpoint="ip--172--31--30--240-k8s-whisker--74cd64d847--wzdsv-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--30--240-k8s-whisker--74cd64d847--wzdsv-eth0", GenerateName:"whisker-74cd64d847-", Namespace:"calico-system", SelfLink:"", UID:"9a1d6802-818f-497c-bada-09fc52fbf432", ResourceVersion:"899", Generation:0, CreationTimestamp:time.Date(2025, time.May, 17, 0, 39, 28, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"whisker", "k8s-app":"whisker", "pod-template-hash":"74cd64d847", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"whisker"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-30-240", ContainerID:"", Pod:"whisker-74cd64d847-wzdsv", Endpoint:"eth0", ServiceAccountName:"whisker", IPNetworks:[]string{"192.168.105.65/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.whisker"}, InterfaceName:"calia4dce9268ad", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} May 17 00:39:29.326813 env[1634]: 2025-05-17 00:39:29.286 [INFO][3825] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.105.65/32] ContainerID="e065a2678dcbddef44a88cd4006116e01bf6709e4880fe2915ee449db404dac5" Namespace="calico-system" Pod="whisker-74cd64d847-wzdsv" WorkloadEndpoint="ip--172--31--30--240-k8s-whisker--74cd64d847--wzdsv-eth0" May 17 00:39:29.326813 env[1634]: 2025-05-17 00:39:29.286 [INFO][3825] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calia4dce9268ad ContainerID="e065a2678dcbddef44a88cd4006116e01bf6709e4880fe2915ee449db404dac5" Namespace="calico-system" Pod="whisker-74cd64d847-wzdsv" WorkloadEndpoint="ip--172--31--30--240-k8s-whisker--74cd64d847--wzdsv-eth0" May 17 00:39:29.326813 env[1634]: 2025-05-17 00:39:29.306 [INFO][3825] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="e065a2678dcbddef44a88cd4006116e01bf6709e4880fe2915ee449db404dac5" Namespace="calico-system" Pod="whisker-74cd64d847-wzdsv" WorkloadEndpoint="ip--172--31--30--240-k8s-whisker--74cd64d847--wzdsv-eth0" May 17 00:39:29.326813 env[1634]: 2025-05-17 00:39:29.307 [INFO][3825] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="e065a2678dcbddef44a88cd4006116e01bf6709e4880fe2915ee449db404dac5" Namespace="calico-system" Pod="whisker-74cd64d847-wzdsv" WorkloadEndpoint="ip--172--31--30--240-k8s-whisker--74cd64d847--wzdsv-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--30--240-k8s-whisker--74cd64d847--wzdsv-eth0", GenerateName:"whisker-74cd64d847-", Namespace:"calico-system", SelfLink:"", UID:"9a1d6802-818f-497c-bada-09fc52fbf432", ResourceVersion:"899", Generation:0, CreationTimestamp:time.Date(2025, time.May, 17, 0, 39, 28, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"whisker", "k8s-app":"whisker", "pod-template-hash":"74cd64d847", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"whisker"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-30-240", ContainerID:"e065a2678dcbddef44a88cd4006116e01bf6709e4880fe2915ee449db404dac5", Pod:"whisker-74cd64d847-wzdsv", Endpoint:"eth0", ServiceAccountName:"whisker", IPNetworks:[]string{"192.168.105.65/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.whisker"}, InterfaceName:"calia4dce9268ad", MAC:"0a:0f:05:20:c1:65", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} May 17 00:39:29.326813 env[1634]: 2025-05-17 00:39:29.322 [INFO][3825] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="e065a2678dcbddef44a88cd4006116e01bf6709e4880fe2915ee449db404dac5" Namespace="calico-system" Pod="whisker-74cd64d847-wzdsv" WorkloadEndpoint="ip--172--31--30--240-k8s-whisker--74cd64d847--wzdsv-eth0" May 17 00:39:29.343232 env[1634]: time="2025-05-17T00:39:29.343145440Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 May 17 00:39:29.343430 env[1634]: time="2025-05-17T00:39:29.343408221Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 May 17 00:39:29.343520 env[1634]: time="2025-05-17T00:39:29.343503316Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 May 17 00:39:29.343750 env[1634]: time="2025-05-17T00:39:29.343724807Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/e065a2678dcbddef44a88cd4006116e01bf6709e4880fe2915ee449db404dac5 pid=3892 runtime=io.containerd.runc.v2 May 17 00:39:29.385051 systemd[1]: Started cri-containerd-e065a2678dcbddef44a88cd4006116e01bf6709e4880fe2915ee449db404dac5.scope. May 17 00:39:29.390000 audit[3905]: AVC avc: denied { write } for pid=3905 comm="tee" name="fd" dev="proc" ino=24926 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 May 17 00:39:29.390000 audit[3905]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffc843cd7dd a2=241 a3=1b6 items=1 ppid=3855 pid=3905 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:29.390000 audit: CWD cwd="/etc/service/enabled/cni/log" May 17 00:39:29.390000 audit: PATH item=0 name="/dev/fd/63" inode=24879 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 May 17 00:39:29.390000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 May 17 00:39:29.406000 audit[3937]: AVC avc: denied { write } for pid=3937 comm="tee" name="fd" dev="proc" ino=25926 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 May 17 00:39:29.406000 audit[3937]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffee114f7cb a2=241 a3=1b6 items=1 ppid=3866 pid=3937 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:29.406000 audit: CWD cwd="/etc/service/enabled/allocate-tunnel-addrs/log" May 17 00:39:29.406000 audit: PATH item=0 name="/dev/fd/63" inode=24930 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 May 17 00:39:29.406000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 May 17 00:39:29.407000 audit[3939]: AVC avc: denied { write } for pid=3939 comm="tee" name="fd" dev="proc" ino=25930 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 May 17 00:39:29.407000 audit[3939]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffdccbe67db a2=241 a3=1b6 items=1 ppid=3868 pid=3939 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:29.407000 audit: CWD cwd="/etc/service/enabled/felix/log" May 17 00:39:29.407000 audit: PATH item=0 name="/dev/fd/63" inode=25923 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 May 17 00:39:29.407000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 May 17 00:39:29.416000 audit[3929]: AVC avc: denied { write } for pid=3929 comm="tee" name="fd" dev="proc" ino=25945 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 May 17 00:39:29.416000 audit[3929]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffef3fde7db a2=241 a3=1b6 items=1 ppid=3857 pid=3929 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:29.416000 audit: CWD cwd="/etc/service/enabled/bird6/log" May 17 00:39:29.416000 audit: PATH item=0 name="/dev/fd/63" inode=24907 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 May 17 00:39:29.416000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 May 17 00:39:29.424000 audit[3943]: AVC avc: denied { write } for pid=3943 comm="tee" name="fd" dev="proc" ino=25949 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 May 17 00:39:29.424000 audit[3943]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7fffa76977dc a2=241 a3=1b6 items=1 ppid=3863 pid=3943 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:29.424000 audit: CWD cwd="/etc/service/enabled/bird/log" May 17 00:39:29.424000 audit: PATH item=0 name="/dev/fd/63" inode=25932 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 May 17 00:39:29.424000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 May 17 00:39:29.435000 audit[3966]: AVC avc: denied { write } for pid=3966 comm="tee" name="fd" dev="proc" ino=25956 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 May 17 00:39:29.435000 audit[3966]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffe554cf7cc a2=241 a3=1b6 items=1 ppid=3864 pid=3966 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:29.435000 audit: CWD cwd="/etc/service/enabled/node-status-reporter/log" May 17 00:39:29.435000 audit: PATH item=0 name="/dev/fd/63" inode=24940 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 May 17 00:39:29.435000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 May 17 00:39:29.435000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:29.435000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:29.435000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:29.435000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:29.435000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:29.435000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:29.435000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:29.435000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:29.435000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:29.435000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:29.435000 audit: BPF prog-id=148 op=LOAD May 17 00:39:29.436000 audit[3906]: AVC avc: denied { bpf } for pid=3906 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:29.436000 audit[3906]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=3892 pid=3906 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:29.436000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6530363561323637386463626464656634346138386364343030363131 May 17 00:39:29.436000 audit[3906]: AVC avc: denied { perfmon } for pid=3906 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:29.436000 audit[3906]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=c items=0 ppid=3892 pid=3906 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:29.436000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6530363561323637386463626464656634346138386364343030363131 May 17 00:39:29.436000 audit[3906]: AVC avc: denied { bpf } for pid=3906 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:29.436000 audit[3906]: AVC avc: denied { bpf } for pid=3906 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:29.436000 audit[3906]: AVC avc: denied { bpf } for pid=3906 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:29.436000 audit[3906]: AVC avc: denied { perfmon } for pid=3906 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:29.436000 audit[3906]: AVC avc: denied { perfmon } for pid=3906 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:29.436000 audit[3906]: AVC avc: denied { perfmon } for pid=3906 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:29.436000 audit[3906]: AVC avc: denied { perfmon } for pid=3906 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:29.436000 audit[3906]: AVC avc: denied { perfmon } for pid=3906 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:29.436000 audit[3906]: AVC avc: denied { bpf } for pid=3906 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:29.436000 audit[3906]: AVC avc: denied { bpf } for pid=3906 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:29.436000 audit: BPF prog-id=149 op=LOAD May 17 00:39:29.436000 audit[3906]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c000287050 items=0 ppid=3892 pid=3906 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:29.436000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6530363561323637386463626464656634346138386364343030363131 May 17 00:39:29.436000 audit[3906]: AVC avc: denied { bpf } for pid=3906 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:29.436000 audit[3906]: AVC avc: denied { bpf } for pid=3906 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:29.436000 audit[3906]: AVC avc: denied { perfmon } for pid=3906 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:29.436000 audit[3906]: AVC avc: denied { perfmon } for pid=3906 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:29.436000 audit[3906]: AVC avc: denied { perfmon } for pid=3906 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:29.436000 audit[3906]: AVC avc: denied { perfmon } for pid=3906 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:29.436000 audit[3906]: AVC avc: denied { perfmon } for pid=3906 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:29.436000 audit[3906]: AVC avc: denied { bpf } for pid=3906 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:29.436000 audit[3906]: AVC avc: denied { bpf } for pid=3906 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:29.436000 audit: BPF prog-id=150 op=LOAD May 17 00:39:29.436000 audit[3906]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c000287098 items=0 ppid=3892 pid=3906 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:29.436000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6530363561323637386463626464656634346138386364343030363131 May 17 00:39:29.436000 audit: BPF prog-id=150 op=UNLOAD May 17 00:39:29.436000 audit: BPF prog-id=149 op=UNLOAD May 17 00:39:29.436000 audit[3906]: AVC avc: denied { bpf } for pid=3906 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:29.436000 audit[3906]: AVC avc: denied { bpf } for pid=3906 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:29.436000 audit[3906]: AVC avc: denied { bpf } for pid=3906 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:29.436000 audit[3906]: AVC avc: denied { perfmon } for pid=3906 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:29.436000 audit[3906]: AVC avc: denied { perfmon } for pid=3906 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:29.436000 audit[3906]: AVC avc: denied { perfmon } for pid=3906 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:29.436000 audit[3906]: AVC avc: denied { perfmon } for pid=3906 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:29.436000 audit[3906]: AVC avc: denied { perfmon } for pid=3906 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:29.436000 audit[3906]: AVC avc: denied { bpf } for pid=3906 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:29.436000 audit[3906]: AVC avc: denied { bpf } for pid=3906 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:29.436000 audit: BPF prog-id=151 op=LOAD May 17 00:39:29.436000 audit[3906]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c0002874a8 items=0 ppid=3892 pid=3906 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:29.436000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6530363561323637386463626464656634346138386364343030363131 May 17 00:39:29.446000 audit[3963]: AVC avc: denied { write } for pid=3963 comm="tee" name="fd" dev="proc" ino=25985 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 May 17 00:39:29.446000 audit[3963]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffe323407db a2=241 a3=1b6 items=1 ppid=3867 pid=3963 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:29.446000 audit: CWD cwd="/etc/service/enabled/confd/log" May 17 00:39:29.446000 audit: PATH item=0 name="/dev/fd/63" inode=24938 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 May 17 00:39:29.446000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 May 17 00:39:29.473840 env[1634]: time="2025-05-17T00:39:29.473797052Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-74cd64d847-wzdsv,Uid:9a1d6802-818f-497c-bada-09fc52fbf432,Namespace:calico-system,Attempt:0,} returns sandbox id \"e065a2678dcbddef44a88cd4006116e01bf6709e4880fe2915ee449db404dac5\"" May 17 00:39:29.476626 env[1634]: time="2025-05-17T00:39:29.476588940Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.0\"" May 17 00:39:29.657837 env[1634]: time="2025-05-17T00:39:29.657764998Z" level=info msg="trying next host" error="failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" host=ghcr.io May 17 00:39:29.659909 env[1634]: time="2025-05-17T00:39:29.659852816Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.0\" failed" error="failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.0\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" May 17 00:39:29.660144 kubelet[2516]: E0517 00:39:29.660100 2516 log.go:32] "PullImage from image service failed" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.0\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/whisker:v3.30.0" May 17 00:39:29.660237 kubelet[2516]: E0517 00:39:29.660169 2516 kuberuntime_image.go:42] "Failed to pull image" err="failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.0\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/whisker:v3.30.0" May 17 00:39:29.685386 kubelet[2516]: E0517 00:39:29.685326 2516 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:whisker,Image:ghcr.io/flatcar/calico/whisker:v3.30.0,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:INFO,ValueFrom:nil,},EnvVar{Name:CALICO_VERSION,Value:v3.30.0,ValueFrom:nil,},EnvVar{Name:CLUSTER_ID,Value:9374fdf540ca4afdb7eee51ad827df9d,ValueFrom:nil,},EnvVar{Name:CLUSTER_TYPE,Value:typha,kdd,k8s,operator,bgp,kubeadm,ValueFrom:nil,},EnvVar{Name:NOTIFICATIONS,Value:Enabled,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:kube-api-access-5f82j,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod whisker-74cd64d847-wzdsv_calico-system(9a1d6802-818f-497c-bada-09fc52fbf432): ErrImagePull: failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.0\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" logger="UnhandledError" May 17 00:39:29.689228 env[1634]: time="2025-05-17T00:39:29.689177550Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.0\"" May 17 00:39:29.872906 env[1634]: time="2025-05-17T00:39:29.872825739Z" level=info msg="trying next host" error="failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" host=ghcr.io May 17 00:39:29.875066 env[1634]: time="2025-05-17T00:39:29.875002184Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.0\" failed" error="failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.0\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" May 17 00:39:29.875399 kubelet[2516]: E0517 00:39:29.875353 2516 log.go:32] "PullImage from image service failed" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.0\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/whisker-backend:v3.30.0" May 17 00:39:29.875702 kubelet[2516]: E0517 00:39:29.875404 2516 kuberuntime_image.go:42] "Failed to pull image" err="failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.0\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/whisker-backend:v3.30.0" May 17 00:39:29.875741 kubelet[2516]: E0517 00:39:29.875519 2516 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:whisker-backend,Image:ghcr.io/flatcar/calico/whisker-backend:v3.30.0,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:INFO,ValueFrom:nil,},EnvVar{Name:PORT,Value:3002,ValueFrom:nil,},EnvVar{Name:GOLDMANE_HOST,Value:goldmane.calico-system.svc.cluster.local:7443,ValueFrom:nil,},EnvVar{Name:TLS_CERT_PATH,Value:/whisker-backend-key-pair/tls.crt,ValueFrom:nil,},EnvVar{Name:TLS_KEY_PATH,Value:/whisker-backend-key-pair/tls.key,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:whisker-backend-key-pair,ReadOnly:true,MountPath:/whisker-backend-key-pair,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:whisker-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-5f82j,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod whisker-74cd64d847-wzdsv_calico-system(9a1d6802-818f-497c-bada-09fc52fbf432): ErrImagePull: failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.0\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" logger="UnhandledError" May 17 00:39:29.876896 kubelet[2516]: E0517 00:39:29.876838 2516 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"whisker\" with ErrImagePull: \"failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker:v3.30.0\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker:v3.30.0\\\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden\", failed to \"StartContainer\" for \"whisker-backend\" with ErrImagePull: \"failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.0\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.0\\\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden\"]" pod="calico-system/whisker-74cd64d847-wzdsv" podUID="9a1d6802-818f-497c-bada-09fc52fbf432" May 17 00:39:30.041968 systemd[1]: run-containerd-runc-k8s.io-e065a2678dcbddef44a88cd4006116e01bf6709e4880fe2915ee449db404dac5-runc.xBVMo7.mount: Deactivated successfully. May 17 00:39:30.456149 kubelet[2516]: I0517 00:39:30.456094 2516 kubelet_volumes.go:163] "Cleaned up orphaned pod volumes dir" podUID="615ec9ce-9289-40d8-8d73-6e876ad8cb0e" path="/var/lib/kubelet/pods/615ec9ce-9289-40d8-8d73-6e876ad8cb0e/volumes" May 17 00:39:30.643600 kubelet[2516]: I0517 00:39:30.643565 2516 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" May 17 00:39:30.690765 kubelet[2516]: E0517 00:39:30.690712 2516 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"whisker\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker:v3.30.0\\\": ErrImagePull: failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker:v3.30.0\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker:v3.30.0\\\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden\", failed to \"StartContainer\" for \"whisker-backend\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.0\\\": ErrImagePull: failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.0\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.0\\\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden\"]" pod="calico-system/whisker-74cd64d847-wzdsv" podUID="9a1d6802-818f-497c-bada-09fc52fbf432" May 17 00:39:30.810012 systemd-networkd[1360]: calia4dce9268ad: Gained IPv6LL May 17 00:39:30.978000 audit[4006]: NETFILTER_CFG table=filter:99 family=2 entries=21 op=nft_register_rule pid=4006 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" May 17 00:39:30.978000 audit[4006]: SYSCALL arch=c000003e syscall=46 success=yes exit=7480 a0=3 a1=7fffb73d92f0 a2=0 a3=7fffb73d92dc items=0 ppid=2660 pid=4006 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:30.978000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 May 17 00:39:30.987000 audit[4006]: NETFILTER_CFG table=nat:100 family=2 entries=19 op=nft_register_chain pid=4006 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" May 17 00:39:30.987000 audit[4006]: SYSCALL arch=c000003e syscall=46 success=yes exit=6276 a0=3 a1=7fffb73d92f0 a2=0 a3=7fffb73d92dc items=0 ppid=2660 pid=4006 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:30.987000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 May 17 00:39:31.012000 audit[4008]: NETFILTER_CFG table=filter:101 family=2 entries=20 op=nft_register_rule pid=4008 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" May 17 00:39:31.012000 audit[4008]: SYSCALL arch=c000003e syscall=46 success=yes exit=7480 a0=3 a1=7ffff2b87ab0 a2=0 a3=7ffff2b87a9c items=0 ppid=2660 pid=4008 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:31.012000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 May 17 00:39:31.019000 audit[4008]: NETFILTER_CFG table=nat:102 family=2 entries=14 op=nft_register_rule pid=4008 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" May 17 00:39:31.019000 audit[4008]: SYSCALL arch=c000003e syscall=46 success=yes exit=3468 a0=3 a1=7ffff2b87ab0 a2=0 a3=0 items=0 ppid=2660 pid=4008 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:31.019000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 May 17 00:39:31.227000 audit[4040]: AVC avc: denied { bpf } for pid=4040 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.227000 audit[4040]: AVC avc: denied { bpf } for pid=4040 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.227000 audit[4040]: AVC avc: denied { perfmon } for pid=4040 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.227000 audit[4040]: AVC avc: denied { perfmon } for pid=4040 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.227000 audit[4040]: AVC avc: denied { perfmon } for pid=4040 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.227000 audit[4040]: AVC avc: denied { perfmon } for pid=4040 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.227000 audit[4040]: AVC avc: denied { perfmon } for pid=4040 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.227000 audit[4040]: AVC avc: denied { bpf } for pid=4040 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.227000 audit[4040]: AVC avc: denied { bpf } for pid=4040 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.227000 audit: BPF prog-id=152 op=LOAD May 17 00:39:31.227000 audit[4040]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffed2385ba0 a2=98 a3=3 items=0 ppid=4000 pid=4040 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:31.227000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E May 17 00:39:31.227000 audit: BPF prog-id=152 op=UNLOAD May 17 00:39:31.229000 audit[4040]: AVC avc: denied { bpf } for pid=4040 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.229000 audit[4040]: AVC avc: denied { bpf } for pid=4040 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.229000 audit[4040]: AVC avc: denied { perfmon } for pid=4040 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.229000 audit[4040]: AVC avc: denied { perfmon } for pid=4040 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.229000 audit[4040]: AVC avc: denied { perfmon } for pid=4040 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.229000 audit[4040]: AVC avc: denied { perfmon } for pid=4040 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.229000 audit[4040]: AVC avc: denied { perfmon } for pid=4040 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.229000 audit[4040]: AVC avc: denied { bpf } for pid=4040 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.229000 audit[4040]: AVC avc: denied { bpf } for pid=4040 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.229000 audit: BPF prog-id=153 op=LOAD May 17 00:39:31.229000 audit[4040]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffed2385990 a2=94 a3=54428f items=0 ppid=4000 pid=4040 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:31.229000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E May 17 00:39:31.229000 audit: BPF prog-id=153 op=UNLOAD May 17 00:39:31.229000 audit[4040]: AVC avc: denied { bpf } for pid=4040 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.229000 audit[4040]: AVC avc: denied { bpf } for pid=4040 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.229000 audit[4040]: AVC avc: denied { perfmon } for pid=4040 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.229000 audit[4040]: AVC avc: denied { perfmon } for pid=4040 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.229000 audit[4040]: AVC avc: denied { perfmon } for pid=4040 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.229000 audit[4040]: AVC avc: denied { perfmon } for pid=4040 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.229000 audit[4040]: AVC avc: denied { perfmon } for pid=4040 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.229000 audit[4040]: AVC avc: denied { bpf } for pid=4040 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.229000 audit[4040]: AVC avc: denied { bpf } for pid=4040 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.229000 audit: BPF prog-id=154 op=LOAD May 17 00:39:31.229000 audit[4040]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffed23859c0 a2=94 a3=2 items=0 ppid=4000 pid=4040 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:31.229000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E May 17 00:39:31.229000 audit: BPF prog-id=154 op=UNLOAD May 17 00:39:31.346000 audit[4040]: AVC avc: denied { bpf } for pid=4040 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.346000 audit[4040]: AVC avc: denied { bpf } for pid=4040 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.346000 audit[4040]: AVC avc: denied { perfmon } for pid=4040 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.346000 audit[4040]: AVC avc: denied { perfmon } for pid=4040 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.346000 audit[4040]: AVC avc: denied { perfmon } for pid=4040 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.346000 audit[4040]: AVC avc: denied { perfmon } for pid=4040 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.346000 audit[4040]: AVC avc: denied { perfmon } for pid=4040 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.346000 audit[4040]: AVC avc: denied { bpf } for pid=4040 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.346000 audit[4040]: AVC avc: denied { bpf } for pid=4040 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.346000 audit: BPF prog-id=155 op=LOAD May 17 00:39:31.346000 audit[4040]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffed2385880 a2=94 a3=1 items=0 ppid=4000 pid=4040 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:31.346000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E May 17 00:39:31.346000 audit: BPF prog-id=155 op=UNLOAD May 17 00:39:31.346000 audit[4040]: AVC avc: denied { perfmon } for pid=4040 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.346000 audit[4040]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=0 a1=7ffed2385950 a2=50 a3=7ffed2385a30 items=0 ppid=4000 pid=4040 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:31.346000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E May 17 00:39:31.357000 audit[4040]: AVC avc: denied { bpf } for pid=4040 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.357000 audit[4040]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffed2385890 a2=28 a3=0 items=0 ppid=4000 pid=4040 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:31.357000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E May 17 00:39:31.357000 audit[4040]: AVC avc: denied { bpf } for pid=4040 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.357000 audit[4040]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffed23858c0 a2=28 a3=0 items=0 ppid=4000 pid=4040 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:31.357000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E May 17 00:39:31.357000 audit[4040]: AVC avc: denied { bpf } for pid=4040 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.357000 audit[4040]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffed23857d0 a2=28 a3=0 items=0 ppid=4000 pid=4040 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:31.357000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E May 17 00:39:31.357000 audit[4040]: AVC avc: denied { bpf } for pid=4040 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.357000 audit[4040]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffed23858e0 a2=28 a3=0 items=0 ppid=4000 pid=4040 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:31.357000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E May 17 00:39:31.357000 audit[4040]: AVC avc: denied { bpf } for pid=4040 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.357000 audit[4040]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffed23858c0 a2=28 a3=0 items=0 ppid=4000 pid=4040 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:31.357000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E May 17 00:39:31.357000 audit[4040]: AVC avc: denied { bpf } for pid=4040 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.357000 audit[4040]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffed23858b0 a2=28 a3=0 items=0 ppid=4000 pid=4040 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:31.357000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E May 17 00:39:31.357000 audit[4040]: AVC avc: denied { bpf } for pid=4040 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.357000 audit[4040]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffed23858e0 a2=28 a3=0 items=0 ppid=4000 pid=4040 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:31.357000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E May 17 00:39:31.357000 audit[4040]: AVC avc: denied { bpf } for pid=4040 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.357000 audit[4040]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffed23858c0 a2=28 a3=0 items=0 ppid=4000 pid=4040 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:31.357000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E May 17 00:39:31.357000 audit[4040]: AVC avc: denied { bpf } for pid=4040 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.357000 audit[4040]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffed23858e0 a2=28 a3=0 items=0 ppid=4000 pid=4040 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:31.357000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E May 17 00:39:31.357000 audit[4040]: AVC avc: denied { bpf } for pid=4040 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.357000 audit[4040]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffed23858b0 a2=28 a3=0 items=0 ppid=4000 pid=4040 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:31.357000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E May 17 00:39:31.357000 audit[4040]: AVC avc: denied { bpf } for pid=4040 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.357000 audit[4040]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffed2385920 a2=28 a3=0 items=0 ppid=4000 pid=4040 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:31.357000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E May 17 00:39:31.357000 audit[4040]: AVC avc: denied { perfmon } for pid=4040 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.357000 audit[4040]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=0 a1=7ffed23856d0 a2=50 a3=1 items=0 ppid=4000 pid=4040 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:31.357000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E May 17 00:39:31.358000 audit[4040]: AVC avc: denied { bpf } for pid=4040 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.358000 audit[4040]: AVC avc: denied { bpf } for pid=4040 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.358000 audit[4040]: AVC avc: denied { perfmon } for pid=4040 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.358000 audit[4040]: AVC avc: denied { perfmon } for pid=4040 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.358000 audit[4040]: AVC avc: denied { perfmon } for pid=4040 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.358000 audit[4040]: AVC avc: denied { perfmon } for pid=4040 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.358000 audit[4040]: AVC avc: denied { perfmon } for pid=4040 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.358000 audit[4040]: AVC avc: denied { bpf } for pid=4040 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.358000 audit[4040]: AVC avc: denied { bpf } for pid=4040 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.358000 audit: BPF prog-id=156 op=LOAD May 17 00:39:31.358000 audit[4040]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7ffed23856d0 a2=94 a3=5 items=0 ppid=4000 pid=4040 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:31.358000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E May 17 00:39:31.358000 audit: BPF prog-id=156 op=UNLOAD May 17 00:39:31.358000 audit[4040]: AVC avc: denied { perfmon } for pid=4040 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.358000 audit[4040]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=0 a1=7ffed2385780 a2=50 a3=1 items=0 ppid=4000 pid=4040 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:31.358000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E May 17 00:39:31.358000 audit[4040]: AVC avc: denied { bpf } for pid=4040 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.358000 audit[4040]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=16 a1=7ffed23858a0 a2=4 a3=38 items=0 ppid=4000 pid=4040 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:31.358000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E May 17 00:39:31.358000 audit[4040]: AVC avc: denied { bpf } for pid=4040 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.358000 audit[4040]: AVC avc: denied { bpf } for pid=4040 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.358000 audit[4040]: AVC avc: denied { perfmon } for pid=4040 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.358000 audit[4040]: AVC avc: denied { bpf } for pid=4040 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.358000 audit[4040]: AVC avc: denied { perfmon } for pid=4040 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.358000 audit[4040]: AVC avc: denied { perfmon } for pid=4040 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.358000 audit[4040]: AVC avc: denied { perfmon } for pid=4040 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.358000 audit[4040]: AVC avc: denied { perfmon } for pid=4040 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.358000 audit[4040]: AVC avc: denied { perfmon } for pid=4040 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.358000 audit[4040]: AVC avc: denied { bpf } for pid=4040 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.358000 audit[4040]: AVC avc: denied { confidentiality } for pid=4040 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 May 17 00:39:31.358000 audit[4040]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7ffed23858f0 a2=94 a3=6 items=0 ppid=4000 pid=4040 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:31.358000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E May 17 00:39:31.358000 audit[4040]: AVC avc: denied { bpf } for pid=4040 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.358000 audit[4040]: AVC avc: denied { bpf } for pid=4040 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.358000 audit[4040]: AVC avc: denied { perfmon } for pid=4040 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.358000 audit[4040]: AVC avc: denied { bpf } for pid=4040 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.358000 audit[4040]: AVC avc: denied { perfmon } for pid=4040 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.358000 audit[4040]: AVC avc: denied { perfmon } for pid=4040 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.358000 audit[4040]: AVC avc: denied { perfmon } for pid=4040 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.358000 audit[4040]: AVC avc: denied { perfmon } for pid=4040 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.358000 audit[4040]: AVC avc: denied { perfmon } for pid=4040 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.358000 audit[4040]: AVC avc: denied { bpf } for pid=4040 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.358000 audit[4040]: AVC avc: denied { confidentiality } for pid=4040 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 May 17 00:39:31.358000 audit[4040]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7ffed23850a0 a2=94 a3=88 items=0 ppid=4000 pid=4040 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:31.358000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E May 17 00:39:31.358000 audit[4040]: AVC avc: denied { bpf } for pid=4040 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.358000 audit[4040]: AVC avc: denied { bpf } for pid=4040 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.358000 audit[4040]: AVC avc: denied { perfmon } for pid=4040 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.358000 audit[4040]: AVC avc: denied { bpf } for pid=4040 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.358000 audit[4040]: AVC avc: denied { perfmon } for pid=4040 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.358000 audit[4040]: AVC avc: denied { perfmon } for pid=4040 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.358000 audit[4040]: AVC avc: denied { perfmon } for pid=4040 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.358000 audit[4040]: AVC avc: denied { perfmon } for pid=4040 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.358000 audit[4040]: AVC avc: denied { perfmon } for pid=4040 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.358000 audit[4040]: AVC avc: denied { bpf } for pid=4040 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.358000 audit[4040]: AVC avc: denied { confidentiality } for pid=4040 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 May 17 00:39:31.358000 audit[4040]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7ffed23850a0 a2=94 a3=88 items=0 ppid=4000 pid=4040 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:31.358000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E May 17 00:39:31.371000 audit[4044]: AVC avc: denied { bpf } for pid=4044 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.371000 audit[4044]: AVC avc: denied { bpf } for pid=4044 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.371000 audit[4044]: AVC avc: denied { perfmon } for pid=4044 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.371000 audit[4044]: AVC avc: denied { perfmon } for pid=4044 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.371000 audit[4044]: AVC avc: denied { perfmon } for pid=4044 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.371000 audit[4044]: AVC avc: denied { perfmon } for pid=4044 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.371000 audit[4044]: AVC avc: denied { perfmon } for pid=4044 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.371000 audit[4044]: AVC avc: denied { bpf } for pid=4044 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.371000 audit[4044]: AVC avc: denied { bpf } for pid=4044 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.371000 audit: BPF prog-id=157 op=LOAD May 17 00:39:31.371000 audit[4044]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffd9b34e530 a2=98 a3=1999999999999999 items=0 ppid=4000 pid=4044 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:31.371000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F May 17 00:39:31.371000 audit: BPF prog-id=157 op=UNLOAD May 17 00:39:31.371000 audit[4044]: AVC avc: denied { bpf } for pid=4044 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.371000 audit[4044]: AVC avc: denied { bpf } for pid=4044 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.371000 audit[4044]: AVC avc: denied { perfmon } for pid=4044 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.371000 audit[4044]: AVC avc: denied { perfmon } for pid=4044 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.371000 audit[4044]: AVC avc: denied { perfmon } for pid=4044 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.371000 audit[4044]: AVC avc: denied { perfmon } for pid=4044 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.371000 audit[4044]: AVC avc: denied { perfmon } for pid=4044 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.371000 audit[4044]: AVC avc: denied { bpf } for pid=4044 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.371000 audit[4044]: AVC avc: denied { bpf } for pid=4044 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.371000 audit: BPF prog-id=158 op=LOAD May 17 00:39:31.371000 audit[4044]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffd9b34e410 a2=94 a3=ffff items=0 ppid=4000 pid=4044 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:31.371000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F May 17 00:39:31.371000 audit: BPF prog-id=158 op=UNLOAD May 17 00:39:31.371000 audit[4044]: AVC avc: denied { bpf } for pid=4044 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.371000 audit[4044]: AVC avc: denied { bpf } for pid=4044 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.371000 audit[4044]: AVC avc: denied { perfmon } for pid=4044 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.371000 audit[4044]: AVC avc: denied { perfmon } for pid=4044 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.371000 audit[4044]: AVC avc: denied { perfmon } for pid=4044 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.371000 audit[4044]: AVC avc: denied { perfmon } for pid=4044 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.371000 audit[4044]: AVC avc: denied { perfmon } for pid=4044 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.371000 audit[4044]: AVC avc: denied { bpf } for pid=4044 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.371000 audit[4044]: AVC avc: denied { bpf } for pid=4044 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.371000 audit: BPF prog-id=159 op=LOAD May 17 00:39:31.371000 audit[4044]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffd9b34e450 a2=94 a3=7ffd9b34e630 items=0 ppid=4000 pid=4044 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:31.371000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F May 17 00:39:31.371000 audit: BPF prog-id=159 op=UNLOAD May 17 00:39:31.460442 systemd-networkd[1360]: vxlan.calico: Link UP May 17 00:39:31.460457 systemd-networkd[1360]: vxlan.calico: Gained carrier May 17 00:39:31.487893 (udev-worker)[3774]: Network interface NamePolicy= disabled on kernel command line. May 17 00:39:31.494000 audit[4071]: AVC avc: denied { bpf } for pid=4071 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.494000 audit[4071]: AVC avc: denied { bpf } for pid=4071 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.494000 audit[4071]: AVC avc: denied { perfmon } for pid=4071 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.494000 audit[4071]: AVC avc: denied { perfmon } for pid=4071 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.494000 audit[4071]: AVC avc: denied { perfmon } for pid=4071 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.494000 audit[4071]: AVC avc: denied { perfmon } for pid=4071 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.494000 audit[4071]: AVC avc: denied { perfmon } for pid=4071 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.494000 audit[4071]: AVC avc: denied { bpf } for pid=4071 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.494000 audit[4071]: AVC avc: denied { bpf } for pid=4071 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.494000 audit: BPF prog-id=160 op=LOAD May 17 00:39:31.494000 audit[4071]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffc9ded05d0 a2=98 a3=0 items=0 ppid=4000 pid=4071 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:31.494000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 May 17 00:39:31.495000 audit: BPF prog-id=160 op=UNLOAD May 17 00:39:31.497000 audit[4071]: AVC avc: denied { bpf } for pid=4071 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.497000 audit[4071]: AVC avc: denied { bpf } for pid=4071 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.497000 audit[4071]: AVC avc: denied { perfmon } for pid=4071 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.497000 audit[4071]: AVC avc: denied { perfmon } for pid=4071 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.497000 audit[4071]: AVC avc: denied { perfmon } for pid=4071 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.497000 audit[4071]: AVC avc: denied { perfmon } for pid=4071 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.497000 audit[4071]: AVC avc: denied { perfmon } for pid=4071 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.497000 audit[4071]: AVC avc: denied { bpf } for pid=4071 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.497000 audit[4071]: AVC avc: denied { bpf } for pid=4071 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.497000 audit: BPF prog-id=161 op=LOAD May 17 00:39:31.497000 audit[4071]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffc9ded03e0 a2=94 a3=54428f items=0 ppid=4000 pid=4071 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:31.497000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 May 17 00:39:31.498000 audit: BPF prog-id=161 op=UNLOAD May 17 00:39:31.498000 audit[4071]: AVC avc: denied { bpf } for pid=4071 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.498000 audit[4071]: AVC avc: denied { bpf } for pid=4071 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.498000 audit[4071]: AVC avc: denied { perfmon } for pid=4071 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.498000 audit[4071]: AVC avc: denied { perfmon } for pid=4071 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.498000 audit[4071]: AVC avc: denied { perfmon } for pid=4071 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.498000 audit[4071]: AVC avc: denied { perfmon } for pid=4071 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.498000 audit[4071]: AVC avc: denied { perfmon } for pid=4071 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.498000 audit[4071]: AVC avc: denied { bpf } for pid=4071 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.498000 audit[4071]: AVC avc: denied { bpf } for pid=4071 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.498000 audit: BPF prog-id=162 op=LOAD May 17 00:39:31.498000 audit[4071]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffc9ded0410 a2=94 a3=2 items=0 ppid=4000 pid=4071 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:31.498000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 May 17 00:39:31.499000 audit: BPF prog-id=162 op=UNLOAD May 17 00:39:31.499000 audit[4071]: AVC avc: denied { bpf } for pid=4071 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.499000 audit[4071]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7ffc9ded02e0 a2=28 a3=0 items=0 ppid=4000 pid=4071 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:31.499000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 May 17 00:39:31.500000 audit[4071]: AVC avc: denied { bpf } for pid=4071 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.500000 audit[4071]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffc9ded0310 a2=28 a3=0 items=0 ppid=4000 pid=4071 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:31.500000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 May 17 00:39:31.500000 audit[4071]: AVC avc: denied { bpf } for pid=4071 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.500000 audit[4071]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffc9ded0220 a2=28 a3=0 items=0 ppid=4000 pid=4071 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:31.500000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 May 17 00:39:31.500000 audit[4071]: AVC avc: denied { bpf } for pid=4071 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.500000 audit[4071]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7ffc9ded0330 a2=28 a3=0 items=0 ppid=4000 pid=4071 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:31.500000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 May 17 00:39:31.500000 audit[4071]: AVC avc: denied { bpf } for pid=4071 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.500000 audit[4071]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7ffc9ded0310 a2=28 a3=0 items=0 ppid=4000 pid=4071 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:31.500000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 May 17 00:39:31.500000 audit[4071]: AVC avc: denied { bpf } for pid=4071 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.500000 audit[4071]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7ffc9ded0300 a2=28 a3=0 items=0 ppid=4000 pid=4071 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:31.500000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 May 17 00:39:31.500000 audit[4071]: AVC avc: denied { bpf } for pid=4071 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.500000 audit[4071]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7ffc9ded0330 a2=28 a3=0 items=0 ppid=4000 pid=4071 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:31.500000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 May 17 00:39:31.500000 audit[4071]: AVC avc: denied { bpf } for pid=4071 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.500000 audit[4071]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffc9ded0310 a2=28 a3=0 items=0 ppid=4000 pid=4071 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:31.500000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 May 17 00:39:31.500000 audit[4071]: AVC avc: denied { bpf } for pid=4071 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.500000 audit[4071]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffc9ded0330 a2=28 a3=0 items=0 ppid=4000 pid=4071 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:31.500000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 May 17 00:39:31.500000 audit[4071]: AVC avc: denied { bpf } for pid=4071 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.500000 audit[4071]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffc9ded0300 a2=28 a3=0 items=0 ppid=4000 pid=4071 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:31.500000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 May 17 00:39:31.500000 audit[4071]: AVC avc: denied { bpf } for pid=4071 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.500000 audit[4071]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7ffc9ded0370 a2=28 a3=0 items=0 ppid=4000 pid=4071 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:31.500000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 May 17 00:39:31.500000 audit[4071]: AVC avc: denied { bpf } for pid=4071 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.500000 audit[4071]: AVC avc: denied { bpf } for pid=4071 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.500000 audit[4071]: AVC avc: denied { perfmon } for pid=4071 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.500000 audit[4071]: AVC avc: denied { perfmon } for pid=4071 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.500000 audit[4071]: AVC avc: denied { perfmon } for pid=4071 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.500000 audit[4071]: AVC avc: denied { perfmon } for pid=4071 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.500000 audit[4071]: AVC avc: denied { perfmon } for pid=4071 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.500000 audit[4071]: AVC avc: denied { bpf } for pid=4071 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.500000 audit[4071]: AVC avc: denied { bpf } for pid=4071 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.500000 audit: BPF prog-id=163 op=LOAD May 17 00:39:31.500000 audit[4071]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7ffc9ded01e0 a2=94 a3=0 items=0 ppid=4000 pid=4071 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:31.500000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 May 17 00:39:31.500000 audit: BPF prog-id=163 op=UNLOAD May 17 00:39:31.501000 audit[4071]: AVC avc: denied { bpf } for pid=4071 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.501000 audit[4071]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=0 a1=7ffc9ded01d0 a2=50 a3=2800 items=0 ppid=4000 pid=4071 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:31.501000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 May 17 00:39:31.503000 audit[4071]: AVC avc: denied { bpf } for pid=4071 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.503000 audit[4071]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=0 a1=7ffc9ded01d0 a2=50 a3=2800 items=0 ppid=4000 pid=4071 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:31.503000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 May 17 00:39:31.503000 audit[4071]: AVC avc: denied { bpf } for pid=4071 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.503000 audit[4071]: AVC avc: denied { bpf } for pid=4071 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.503000 audit[4071]: AVC avc: denied { bpf } for pid=4071 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.503000 audit[4071]: AVC avc: denied { perfmon } for pid=4071 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.503000 audit[4071]: AVC avc: denied { perfmon } for pid=4071 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.503000 audit[4071]: AVC avc: denied { perfmon } for pid=4071 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.503000 audit[4071]: AVC avc: denied { perfmon } for pid=4071 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.503000 audit[4071]: AVC avc: denied { perfmon } for pid=4071 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.503000 audit[4071]: AVC avc: denied { bpf } for pid=4071 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.503000 audit[4071]: AVC avc: denied { bpf } for pid=4071 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.503000 audit: BPF prog-id=164 op=LOAD May 17 00:39:31.503000 audit[4071]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7ffc9decf9f0 a2=94 a3=2 items=0 ppid=4000 pid=4071 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:31.503000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 May 17 00:39:31.503000 audit: BPF prog-id=164 op=UNLOAD May 17 00:39:31.503000 audit[4071]: AVC avc: denied { bpf } for pid=4071 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.503000 audit[4071]: AVC avc: denied { bpf } for pid=4071 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.503000 audit[4071]: AVC avc: denied { bpf } for pid=4071 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.503000 audit[4071]: AVC avc: denied { perfmon } for pid=4071 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.503000 audit[4071]: AVC avc: denied { perfmon } for pid=4071 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.503000 audit[4071]: AVC avc: denied { perfmon } for pid=4071 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.503000 audit[4071]: AVC avc: denied { perfmon } for pid=4071 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.503000 audit[4071]: AVC avc: denied { perfmon } for pid=4071 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.503000 audit[4071]: AVC avc: denied { bpf } for pid=4071 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.503000 audit[4071]: AVC avc: denied { bpf } for pid=4071 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.503000 audit: BPF prog-id=165 op=LOAD May 17 00:39:31.503000 audit[4071]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7ffc9decfaf0 a2=94 a3=30 items=0 ppid=4000 pid=4071 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:31.503000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 May 17 00:39:31.511000 audit[4073]: AVC avc: denied { bpf } for pid=4073 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.511000 audit[4073]: AVC avc: denied { bpf } for pid=4073 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.511000 audit[4073]: AVC avc: denied { perfmon } for pid=4073 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.511000 audit[4073]: AVC avc: denied { perfmon } for pid=4073 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.511000 audit[4073]: AVC avc: denied { perfmon } for pid=4073 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.511000 audit[4073]: AVC avc: denied { perfmon } for pid=4073 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.511000 audit[4073]: AVC avc: denied { perfmon } for pid=4073 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.511000 audit[4073]: AVC avc: denied { bpf } for pid=4073 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.511000 audit[4073]: AVC avc: denied { bpf } for pid=4073 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.511000 audit: BPF prog-id=166 op=LOAD May 17 00:39:31.511000 audit[4073]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffcc20eb370 a2=98 a3=0 items=0 ppid=4000 pid=4073 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:31.511000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 May 17 00:39:31.511000 audit: BPF prog-id=166 op=UNLOAD May 17 00:39:31.511000 audit[4073]: AVC avc: denied { bpf } for pid=4073 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.511000 audit[4073]: AVC avc: denied { bpf } for pid=4073 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.511000 audit[4073]: AVC avc: denied { perfmon } for pid=4073 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.511000 audit[4073]: AVC avc: denied { perfmon } for pid=4073 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.511000 audit[4073]: AVC avc: denied { perfmon } for pid=4073 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.511000 audit[4073]: AVC avc: denied { perfmon } for pid=4073 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.511000 audit[4073]: AVC avc: denied { perfmon } for pid=4073 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.511000 audit[4073]: AVC avc: denied { bpf } for pid=4073 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.511000 audit[4073]: AVC avc: denied { bpf } for pid=4073 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.511000 audit: BPF prog-id=167 op=LOAD May 17 00:39:31.511000 audit[4073]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffcc20eb160 a2=94 a3=54428f items=0 ppid=4000 pid=4073 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:31.511000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 May 17 00:39:31.511000 audit: BPF prog-id=167 op=UNLOAD May 17 00:39:31.511000 audit[4073]: AVC avc: denied { bpf } for pid=4073 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.511000 audit[4073]: AVC avc: denied { bpf } for pid=4073 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.511000 audit[4073]: AVC avc: denied { perfmon } for pid=4073 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.511000 audit[4073]: AVC avc: denied { perfmon } for pid=4073 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.511000 audit[4073]: AVC avc: denied { perfmon } for pid=4073 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.511000 audit[4073]: AVC avc: denied { perfmon } for pid=4073 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.511000 audit[4073]: AVC avc: denied { perfmon } for pid=4073 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.511000 audit[4073]: AVC avc: denied { bpf } for pid=4073 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.511000 audit[4073]: AVC avc: denied { bpf } for pid=4073 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.511000 audit: BPF prog-id=168 op=LOAD May 17 00:39:31.511000 audit[4073]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffcc20eb190 a2=94 a3=2 items=0 ppid=4000 pid=4073 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:31.511000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 May 17 00:39:31.511000 audit: BPF prog-id=168 op=UNLOAD May 17 00:39:31.634000 audit[4073]: AVC avc: denied { bpf } for pid=4073 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.634000 audit[4073]: AVC avc: denied { bpf } for pid=4073 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.634000 audit[4073]: AVC avc: denied { perfmon } for pid=4073 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.634000 audit[4073]: AVC avc: denied { perfmon } for pid=4073 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.634000 audit[4073]: AVC avc: denied { perfmon } for pid=4073 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.634000 audit[4073]: AVC avc: denied { perfmon } for pid=4073 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.634000 audit[4073]: AVC avc: denied { perfmon } for pid=4073 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.634000 audit[4073]: AVC avc: denied { bpf } for pid=4073 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.634000 audit[4073]: AVC avc: denied { bpf } for pid=4073 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.634000 audit: BPF prog-id=169 op=LOAD May 17 00:39:31.634000 audit[4073]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffcc20eb050 a2=94 a3=1 items=0 ppid=4000 pid=4073 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:31.634000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 May 17 00:39:31.635000 audit: BPF prog-id=169 op=UNLOAD May 17 00:39:31.635000 audit[4073]: AVC avc: denied { perfmon } for pid=4073 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.635000 audit[4073]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=0 a1=7ffcc20eb120 a2=50 a3=7ffcc20eb200 items=0 ppid=4000 pid=4073 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:31.635000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 May 17 00:39:31.646000 audit[4073]: AVC avc: denied { bpf } for pid=4073 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.646000 audit[4073]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffcc20eb060 a2=28 a3=0 items=0 ppid=4000 pid=4073 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:31.646000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 May 17 00:39:31.646000 audit[4073]: AVC avc: denied { bpf } for pid=4073 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.646000 audit[4073]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffcc20eb090 a2=28 a3=0 items=0 ppid=4000 pid=4073 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:31.646000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 May 17 00:39:31.646000 audit[4073]: AVC avc: denied { bpf } for pid=4073 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.646000 audit[4073]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffcc20eafa0 a2=28 a3=0 items=0 ppid=4000 pid=4073 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:31.646000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 May 17 00:39:31.646000 audit[4073]: AVC avc: denied { bpf } for pid=4073 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.646000 audit[4073]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffcc20eb0b0 a2=28 a3=0 items=0 ppid=4000 pid=4073 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:31.646000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 May 17 00:39:31.646000 audit[4073]: AVC avc: denied { bpf } for pid=4073 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.646000 audit[4073]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffcc20eb090 a2=28 a3=0 items=0 ppid=4000 pid=4073 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:31.646000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 May 17 00:39:31.646000 audit[4073]: AVC avc: denied { bpf } for pid=4073 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.646000 audit[4073]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffcc20eb080 a2=28 a3=0 items=0 ppid=4000 pid=4073 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:31.646000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 May 17 00:39:31.646000 audit[4073]: AVC avc: denied { bpf } for pid=4073 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.646000 audit[4073]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffcc20eb0b0 a2=28 a3=0 items=0 ppid=4000 pid=4073 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:31.646000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 May 17 00:39:31.646000 audit[4073]: AVC avc: denied { bpf } for pid=4073 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.646000 audit[4073]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffcc20eb090 a2=28 a3=0 items=0 ppid=4000 pid=4073 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:31.646000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 May 17 00:39:31.646000 audit[4073]: AVC avc: denied { bpf } for pid=4073 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.646000 audit[4073]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffcc20eb0b0 a2=28 a3=0 items=0 ppid=4000 pid=4073 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:31.646000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 May 17 00:39:31.646000 audit[4073]: AVC avc: denied { bpf } for pid=4073 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.646000 audit[4073]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffcc20eb080 a2=28 a3=0 items=0 ppid=4000 pid=4073 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:31.646000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 May 17 00:39:31.646000 audit[4073]: AVC avc: denied { bpf } for pid=4073 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.646000 audit[4073]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffcc20eb0f0 a2=28 a3=0 items=0 ppid=4000 pid=4073 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:31.646000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 May 17 00:39:31.646000 audit[4073]: AVC avc: denied { perfmon } for pid=4073 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.646000 audit[4073]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=0 a1=7ffcc20eaea0 a2=50 a3=1 items=0 ppid=4000 pid=4073 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:31.646000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 May 17 00:39:31.646000 audit[4073]: AVC avc: denied { bpf } for pid=4073 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.646000 audit[4073]: AVC avc: denied { bpf } for pid=4073 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.646000 audit[4073]: AVC avc: denied { perfmon } for pid=4073 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.646000 audit[4073]: AVC avc: denied { perfmon } for pid=4073 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.646000 audit[4073]: AVC avc: denied { perfmon } for pid=4073 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.646000 audit[4073]: AVC avc: denied { perfmon } for pid=4073 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.646000 audit[4073]: AVC avc: denied { perfmon } for pid=4073 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.646000 audit[4073]: AVC avc: denied { bpf } for pid=4073 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.646000 audit[4073]: AVC avc: denied { bpf } for pid=4073 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.646000 audit: BPF prog-id=170 op=LOAD May 17 00:39:31.646000 audit[4073]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7ffcc20eaea0 a2=94 a3=5 items=0 ppid=4000 pid=4073 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:31.646000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 May 17 00:39:31.647000 audit: BPF prog-id=170 op=UNLOAD May 17 00:39:31.647000 audit[4073]: AVC avc: denied { perfmon } for pid=4073 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.647000 audit[4073]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=0 a1=7ffcc20eaf50 a2=50 a3=1 items=0 ppid=4000 pid=4073 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:31.647000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 May 17 00:39:31.647000 audit[4073]: AVC avc: denied { bpf } for pid=4073 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.647000 audit[4073]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=16 a1=7ffcc20eb070 a2=4 a3=38 items=0 ppid=4000 pid=4073 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:31.647000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 May 17 00:39:31.647000 audit[4073]: AVC avc: denied { bpf } for pid=4073 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.647000 audit[4073]: AVC avc: denied { bpf } for pid=4073 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.647000 audit[4073]: AVC avc: denied { perfmon } for pid=4073 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.647000 audit[4073]: AVC avc: denied { bpf } for pid=4073 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.647000 audit[4073]: AVC avc: denied { perfmon } for pid=4073 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.647000 audit[4073]: AVC avc: denied { perfmon } for pid=4073 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.647000 audit[4073]: AVC avc: denied { perfmon } for pid=4073 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.647000 audit[4073]: AVC avc: denied { perfmon } for pid=4073 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.647000 audit[4073]: AVC avc: denied { perfmon } for pid=4073 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.647000 audit[4073]: AVC avc: denied { bpf } for pid=4073 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.647000 audit[4073]: AVC avc: denied { confidentiality } for pid=4073 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 May 17 00:39:31.647000 audit[4073]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7ffcc20eb0c0 a2=94 a3=6 items=0 ppid=4000 pid=4073 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:31.647000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 May 17 00:39:31.647000 audit[4073]: AVC avc: denied { bpf } for pid=4073 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.647000 audit[4073]: AVC avc: denied { bpf } for pid=4073 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.647000 audit[4073]: AVC avc: denied { perfmon } for pid=4073 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.647000 audit[4073]: AVC avc: denied { bpf } for pid=4073 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.647000 audit[4073]: AVC avc: denied { perfmon } for pid=4073 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.647000 audit[4073]: AVC avc: denied { perfmon } for pid=4073 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.647000 audit[4073]: AVC avc: denied { perfmon } for pid=4073 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.647000 audit[4073]: AVC avc: denied { perfmon } for pid=4073 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.647000 audit[4073]: AVC avc: denied { perfmon } for pid=4073 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.647000 audit[4073]: AVC avc: denied { bpf } for pid=4073 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.647000 audit[4073]: AVC avc: denied { confidentiality } for pid=4073 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 May 17 00:39:31.647000 audit[4073]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7ffcc20ea870 a2=94 a3=88 items=0 ppid=4000 pid=4073 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:31.647000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 May 17 00:39:31.647000 audit[4073]: AVC avc: denied { bpf } for pid=4073 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.647000 audit[4073]: AVC avc: denied { bpf } for pid=4073 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.647000 audit[4073]: AVC avc: denied { perfmon } for pid=4073 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.647000 audit[4073]: AVC avc: denied { bpf } for pid=4073 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.647000 audit[4073]: AVC avc: denied { perfmon } for pid=4073 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.647000 audit[4073]: AVC avc: denied { perfmon } for pid=4073 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.647000 audit[4073]: AVC avc: denied { perfmon } for pid=4073 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.647000 audit[4073]: AVC avc: denied { perfmon } for pid=4073 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.647000 audit[4073]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7ffcc20ea870 a2=94 a3=88 items=0 ppid=4000 pid=4073 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:31.647000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 May 17 00:39:31.649000 audit[4073]: AVC avc: denied { bpf } for pid=4073 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.649000 audit[4073]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7ffcc20ec2a0 a2=10 a3=f8f00800 items=0 ppid=4000 pid=4073 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:31.649000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 May 17 00:39:31.649000 audit[4073]: AVC avc: denied { bpf } for pid=4073 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.649000 audit[4073]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7ffcc20ec140 a2=10 a3=3 items=0 ppid=4000 pid=4073 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:31.649000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 May 17 00:39:31.649000 audit[4073]: AVC avc: denied { bpf } for pid=4073 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.649000 audit[4073]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7ffcc20ec0e0 a2=10 a3=3 items=0 ppid=4000 pid=4073 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:31.649000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 May 17 00:39:31.649000 audit[4073]: AVC avc: denied { bpf } for pid=4073 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:31.649000 audit[4073]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7ffcc20ec0e0 a2=10 a3=7 items=0 ppid=4000 pid=4073 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:31.649000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 May 17 00:39:31.655000 audit: BPF prog-id=165 op=UNLOAD May 17 00:39:31.743000 audit[4098]: NETFILTER_CFG table=mangle:103 family=2 entries=16 op=nft_register_chain pid=4098 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" May 17 00:39:31.752000 audit[4099]: NETFILTER_CFG table=nat:104 family=2 entries=15 op=nft_register_chain pid=4099 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" May 17 00:39:31.752000 audit[4099]: SYSCALL arch=c000003e syscall=46 success=yes exit=5084 a0=3 a1=7ffe027f1ae0 a2=0 a3=7ffe027f1acc items=0 ppid=4000 pid=4099 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:31.752000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 May 17 00:39:31.743000 audit[4098]: SYSCALL arch=c000003e syscall=46 success=yes exit=6868 a0=3 a1=7fff6149d030 a2=0 a3=7fff6149d01c items=0 ppid=4000 pid=4098 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:31.759000 audit[4097]: NETFILTER_CFG table=raw:105 family=2 entries=21 op=nft_register_chain pid=4097 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" May 17 00:39:31.759000 audit[4097]: SYSCALL arch=c000003e syscall=46 success=yes exit=8452 a0=3 a1=7ffd92c68fa0 a2=0 a3=7ffd92c68f8c items=0 ppid=4000 pid=4097 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:31.759000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 May 17 00:39:31.743000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 May 17 00:39:31.766000 audit[4102]: NETFILTER_CFG table=filter:106 family=2 entries=94 op=nft_register_chain pid=4102 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" May 17 00:39:31.766000 audit[4102]: SYSCALL arch=c000003e syscall=46 success=yes exit=53116 a0=3 a1=7fffa42b1440 a2=0 a3=7fffa42b142c items=0 ppid=4000 pid=4102 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:31.766000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 May 17 00:39:32.454066 env[1634]: time="2025-05-17T00:39:32.454020842Z" level=info msg="StopPodSandbox for \"b63403821bb98f1a36e09917744185b1e1d620311f3eecdcf84978e46e4c2d4a\"" May 17 00:39:32.473901 systemd-networkd[1360]: vxlan.calico: Gained IPv6LL May 17 00:39:32.552161 env[1634]: 2025-05-17 00:39:32.508 [INFO][4123] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="b63403821bb98f1a36e09917744185b1e1d620311f3eecdcf84978e46e4c2d4a" May 17 00:39:32.552161 env[1634]: 2025-05-17 00:39:32.508 [INFO][4123] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="b63403821bb98f1a36e09917744185b1e1d620311f3eecdcf84978e46e4c2d4a" iface="eth0" netns="/var/run/netns/cni-6be6c324-2b09-0a92-36fa-bd225f954ed2" May 17 00:39:32.552161 env[1634]: 2025-05-17 00:39:32.508 [INFO][4123] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="b63403821bb98f1a36e09917744185b1e1d620311f3eecdcf84978e46e4c2d4a" iface="eth0" netns="/var/run/netns/cni-6be6c324-2b09-0a92-36fa-bd225f954ed2" May 17 00:39:32.552161 env[1634]: 2025-05-17 00:39:32.509 [INFO][4123] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="b63403821bb98f1a36e09917744185b1e1d620311f3eecdcf84978e46e4c2d4a" iface="eth0" netns="/var/run/netns/cni-6be6c324-2b09-0a92-36fa-bd225f954ed2" May 17 00:39:32.552161 env[1634]: 2025-05-17 00:39:32.509 [INFO][4123] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="b63403821bb98f1a36e09917744185b1e1d620311f3eecdcf84978e46e4c2d4a" May 17 00:39:32.552161 env[1634]: 2025-05-17 00:39:32.509 [INFO][4123] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="b63403821bb98f1a36e09917744185b1e1d620311f3eecdcf84978e46e4c2d4a" May 17 00:39:32.552161 env[1634]: 2025-05-17 00:39:32.538 [INFO][4130] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="b63403821bb98f1a36e09917744185b1e1d620311f3eecdcf84978e46e4c2d4a" HandleID="k8s-pod-network.b63403821bb98f1a36e09917744185b1e1d620311f3eecdcf84978e46e4c2d4a" Workload="ip--172--31--30--240-k8s-calico--apiserver--755c444ff4--vrn79-eth0" May 17 00:39:32.552161 env[1634]: 2025-05-17 00:39:32.538 [INFO][4130] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. May 17 00:39:32.552161 env[1634]: 2025-05-17 00:39:32.538 [INFO][4130] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. May 17 00:39:32.552161 env[1634]: 2025-05-17 00:39:32.545 [WARNING][4130] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="b63403821bb98f1a36e09917744185b1e1d620311f3eecdcf84978e46e4c2d4a" HandleID="k8s-pod-network.b63403821bb98f1a36e09917744185b1e1d620311f3eecdcf84978e46e4c2d4a" Workload="ip--172--31--30--240-k8s-calico--apiserver--755c444ff4--vrn79-eth0" May 17 00:39:32.552161 env[1634]: 2025-05-17 00:39:32.545 [INFO][4130] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="b63403821bb98f1a36e09917744185b1e1d620311f3eecdcf84978e46e4c2d4a" HandleID="k8s-pod-network.b63403821bb98f1a36e09917744185b1e1d620311f3eecdcf84978e46e4c2d4a" Workload="ip--172--31--30--240-k8s-calico--apiserver--755c444ff4--vrn79-eth0" May 17 00:39:32.552161 env[1634]: 2025-05-17 00:39:32.547 [INFO][4130] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. May 17 00:39:32.552161 env[1634]: 2025-05-17 00:39:32.549 [INFO][4123] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="b63403821bb98f1a36e09917744185b1e1d620311f3eecdcf84978e46e4c2d4a" May 17 00:39:32.555981 env[1634]: time="2025-05-17T00:39:32.555907979Z" level=info msg="TearDown network for sandbox \"b63403821bb98f1a36e09917744185b1e1d620311f3eecdcf84978e46e4c2d4a\" successfully" May 17 00:39:32.556204 env[1634]: time="2025-05-17T00:39:32.556178031Z" level=info msg="StopPodSandbox for \"b63403821bb98f1a36e09917744185b1e1d620311f3eecdcf84978e46e4c2d4a\" returns successfully" May 17 00:39:32.557750 systemd[1]: run-netns-cni\x2d6be6c324\x2d2b09\x2d0a92\x2d36fa\x2dbd225f954ed2.mount: Deactivated successfully. May 17 00:39:32.561503 env[1634]: time="2025-05-17T00:39:32.561463064Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-755c444ff4-vrn79,Uid:127d3909-e9a9-4f5a-ade7-8eda212d791f,Namespace:calico-apiserver,Attempt:1,}" May 17 00:39:32.716455 systemd-networkd[1360]: califbd64be8d0c: Link UP May 17 00:39:32.720106 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready May 17 00:39:32.720199 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): califbd64be8d0c: link becomes ready May 17 00:39:32.720364 systemd-networkd[1360]: califbd64be8d0c: Gained carrier May 17 00:39:32.735314 env[1634]: 2025-05-17 00:39:32.637 [INFO][4136] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ip--172--31--30--240-k8s-calico--apiserver--755c444ff4--vrn79-eth0 calico-apiserver-755c444ff4- calico-apiserver 127d3909-e9a9-4f5a-ade7-8eda212d791f 930 0 2025-05-17 00:39:03 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:755c444ff4 projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s ip-172-31-30-240 calico-apiserver-755c444ff4-vrn79 eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] califbd64be8d0c [] [] }} ContainerID="8d868d9c3e4b77b85d1efa7c4bcfdabecb4bf2e61a058f8dd84ec4feaf296d67" Namespace="calico-apiserver" Pod="calico-apiserver-755c444ff4-vrn79" WorkloadEndpoint="ip--172--31--30--240-k8s-calico--apiserver--755c444ff4--vrn79-" May 17 00:39:32.735314 env[1634]: 2025-05-17 00:39:32.637 [INFO][4136] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="8d868d9c3e4b77b85d1efa7c4bcfdabecb4bf2e61a058f8dd84ec4feaf296d67" Namespace="calico-apiserver" Pod="calico-apiserver-755c444ff4-vrn79" WorkloadEndpoint="ip--172--31--30--240-k8s-calico--apiserver--755c444ff4--vrn79-eth0" May 17 00:39:32.735314 env[1634]: 2025-05-17 00:39:32.666 [INFO][4150] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="8d868d9c3e4b77b85d1efa7c4bcfdabecb4bf2e61a058f8dd84ec4feaf296d67" HandleID="k8s-pod-network.8d868d9c3e4b77b85d1efa7c4bcfdabecb4bf2e61a058f8dd84ec4feaf296d67" Workload="ip--172--31--30--240-k8s-calico--apiserver--755c444ff4--vrn79-eth0" May 17 00:39:32.735314 env[1634]: 2025-05-17 00:39:32.666 [INFO][4150] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="8d868d9c3e4b77b85d1efa7c4bcfdabecb4bf2e61a058f8dd84ec4feaf296d67" HandleID="k8s-pod-network.8d868d9c3e4b77b85d1efa7c4bcfdabecb4bf2e61a058f8dd84ec4feaf296d67" Workload="ip--172--31--30--240-k8s-calico--apiserver--755c444ff4--vrn79-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc000235630), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"ip-172-31-30-240", "pod":"calico-apiserver-755c444ff4-vrn79", "timestamp":"2025-05-17 00:39:32.666398792 +0000 UTC"}, Hostname:"ip-172-31-30-240", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} May 17 00:39:32.735314 env[1634]: 2025-05-17 00:39:32.666 [INFO][4150] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. May 17 00:39:32.735314 env[1634]: 2025-05-17 00:39:32.666 [INFO][4150] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. May 17 00:39:32.735314 env[1634]: 2025-05-17 00:39:32.666 [INFO][4150] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ip-172-31-30-240' May 17 00:39:32.735314 env[1634]: 2025-05-17 00:39:32.674 [INFO][4150] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.8d868d9c3e4b77b85d1efa7c4bcfdabecb4bf2e61a058f8dd84ec4feaf296d67" host="ip-172-31-30-240" May 17 00:39:32.735314 env[1634]: 2025-05-17 00:39:32.679 [INFO][4150] ipam/ipam.go 394: Looking up existing affinities for host host="ip-172-31-30-240" May 17 00:39:32.735314 env[1634]: 2025-05-17 00:39:32.685 [INFO][4150] ipam/ipam.go 511: Trying affinity for 192.168.105.64/26 host="ip-172-31-30-240" May 17 00:39:32.735314 env[1634]: 2025-05-17 00:39:32.687 [INFO][4150] ipam/ipam.go 158: Attempting to load block cidr=192.168.105.64/26 host="ip-172-31-30-240" May 17 00:39:32.735314 env[1634]: 2025-05-17 00:39:32.692 [INFO][4150] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.105.64/26 host="ip-172-31-30-240" May 17 00:39:32.735314 env[1634]: 2025-05-17 00:39:32.693 [INFO][4150] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.105.64/26 handle="k8s-pod-network.8d868d9c3e4b77b85d1efa7c4bcfdabecb4bf2e61a058f8dd84ec4feaf296d67" host="ip-172-31-30-240" May 17 00:39:32.735314 env[1634]: 2025-05-17 00:39:32.695 [INFO][4150] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.8d868d9c3e4b77b85d1efa7c4bcfdabecb4bf2e61a058f8dd84ec4feaf296d67 May 17 00:39:32.735314 env[1634]: 2025-05-17 00:39:32.700 [INFO][4150] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.105.64/26 handle="k8s-pod-network.8d868d9c3e4b77b85d1efa7c4bcfdabecb4bf2e61a058f8dd84ec4feaf296d67" host="ip-172-31-30-240" May 17 00:39:32.735314 env[1634]: 2025-05-17 00:39:32.709 [INFO][4150] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.105.66/26] block=192.168.105.64/26 handle="k8s-pod-network.8d868d9c3e4b77b85d1efa7c4bcfdabecb4bf2e61a058f8dd84ec4feaf296d67" host="ip-172-31-30-240" May 17 00:39:32.735314 env[1634]: 2025-05-17 00:39:32.709 [INFO][4150] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.105.66/26] handle="k8s-pod-network.8d868d9c3e4b77b85d1efa7c4bcfdabecb4bf2e61a058f8dd84ec4feaf296d67" host="ip-172-31-30-240" May 17 00:39:32.735314 env[1634]: 2025-05-17 00:39:32.709 [INFO][4150] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. May 17 00:39:32.735314 env[1634]: 2025-05-17 00:39:32.709 [INFO][4150] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.105.66/26] IPv6=[] ContainerID="8d868d9c3e4b77b85d1efa7c4bcfdabecb4bf2e61a058f8dd84ec4feaf296d67" HandleID="k8s-pod-network.8d868d9c3e4b77b85d1efa7c4bcfdabecb4bf2e61a058f8dd84ec4feaf296d67" Workload="ip--172--31--30--240-k8s-calico--apiserver--755c444ff4--vrn79-eth0" May 17 00:39:32.735997 env[1634]: 2025-05-17 00:39:32.712 [INFO][4136] cni-plugin/k8s.go 418: Populated endpoint ContainerID="8d868d9c3e4b77b85d1efa7c4bcfdabecb4bf2e61a058f8dd84ec4feaf296d67" Namespace="calico-apiserver" Pod="calico-apiserver-755c444ff4-vrn79" WorkloadEndpoint="ip--172--31--30--240-k8s-calico--apiserver--755c444ff4--vrn79-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--30--240-k8s-calico--apiserver--755c444ff4--vrn79-eth0", GenerateName:"calico-apiserver-755c444ff4-", Namespace:"calico-apiserver", SelfLink:"", UID:"127d3909-e9a9-4f5a-ade7-8eda212d791f", ResourceVersion:"930", Generation:0, CreationTimestamp:time.Date(2025, time.May, 17, 0, 39, 3, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"755c444ff4", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-30-240", ContainerID:"", Pod:"calico-apiserver-755c444ff4-vrn79", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.105.66/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"califbd64be8d0c", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} May 17 00:39:32.735997 env[1634]: 2025-05-17 00:39:32.712 [INFO][4136] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.105.66/32] ContainerID="8d868d9c3e4b77b85d1efa7c4bcfdabecb4bf2e61a058f8dd84ec4feaf296d67" Namespace="calico-apiserver" Pod="calico-apiserver-755c444ff4-vrn79" WorkloadEndpoint="ip--172--31--30--240-k8s-calico--apiserver--755c444ff4--vrn79-eth0" May 17 00:39:32.735997 env[1634]: 2025-05-17 00:39:32.712 [INFO][4136] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to califbd64be8d0c ContainerID="8d868d9c3e4b77b85d1efa7c4bcfdabecb4bf2e61a058f8dd84ec4feaf296d67" Namespace="calico-apiserver" Pod="calico-apiserver-755c444ff4-vrn79" WorkloadEndpoint="ip--172--31--30--240-k8s-calico--apiserver--755c444ff4--vrn79-eth0" May 17 00:39:32.735997 env[1634]: 2025-05-17 00:39:32.716 [INFO][4136] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="8d868d9c3e4b77b85d1efa7c4bcfdabecb4bf2e61a058f8dd84ec4feaf296d67" Namespace="calico-apiserver" Pod="calico-apiserver-755c444ff4-vrn79" WorkloadEndpoint="ip--172--31--30--240-k8s-calico--apiserver--755c444ff4--vrn79-eth0" May 17 00:39:32.735997 env[1634]: 2025-05-17 00:39:32.717 [INFO][4136] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="8d868d9c3e4b77b85d1efa7c4bcfdabecb4bf2e61a058f8dd84ec4feaf296d67" Namespace="calico-apiserver" Pod="calico-apiserver-755c444ff4-vrn79" WorkloadEndpoint="ip--172--31--30--240-k8s-calico--apiserver--755c444ff4--vrn79-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--30--240-k8s-calico--apiserver--755c444ff4--vrn79-eth0", GenerateName:"calico-apiserver-755c444ff4-", Namespace:"calico-apiserver", SelfLink:"", UID:"127d3909-e9a9-4f5a-ade7-8eda212d791f", ResourceVersion:"930", Generation:0, CreationTimestamp:time.Date(2025, time.May, 17, 0, 39, 3, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"755c444ff4", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-30-240", ContainerID:"8d868d9c3e4b77b85d1efa7c4bcfdabecb4bf2e61a058f8dd84ec4feaf296d67", Pod:"calico-apiserver-755c444ff4-vrn79", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.105.66/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"califbd64be8d0c", MAC:"72:e5:3a:af:6e:d7", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} May 17 00:39:32.735997 env[1634]: 2025-05-17 00:39:32.732 [INFO][4136] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="8d868d9c3e4b77b85d1efa7c4bcfdabecb4bf2e61a058f8dd84ec4feaf296d67" Namespace="calico-apiserver" Pod="calico-apiserver-755c444ff4-vrn79" WorkloadEndpoint="ip--172--31--30--240-k8s-calico--apiserver--755c444ff4--vrn79-eth0" May 17 00:39:32.749911 env[1634]: time="2025-05-17T00:39:32.749825124Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 May 17 00:39:32.750142 env[1634]: time="2025-05-17T00:39:32.750091639Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 May 17 00:39:32.750142 env[1634]: time="2025-05-17T00:39:32.750109855Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 May 17 00:39:32.750441 env[1634]: time="2025-05-17T00:39:32.750385992Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/8d868d9c3e4b77b85d1efa7c4bcfdabecb4bf2e61a058f8dd84ec4feaf296d67 pid=4171 runtime=io.containerd.runc.v2 May 17 00:39:32.759000 audit[4184]: NETFILTER_CFG table=filter:107 family=2 entries=50 op=nft_register_chain pid=4184 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" May 17 00:39:32.762358 kernel: kauditd_printk_skb: 623 callbacks suppressed May 17 00:39:32.762410 kernel: audit: type=1325 audit(1747442372.759:1101): table=filter:107 family=2 entries=50 op=nft_register_chain pid=4184 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" May 17 00:39:32.770144 kernel: audit: type=1300 audit(1747442372.759:1101): arch=c000003e syscall=46 success=yes exit=28208 a0=3 a1=7fff1fe317f0 a2=0 a3=7fff1fe317dc items=0 ppid=4000 pid=4184 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:32.759000 audit[4184]: SYSCALL arch=c000003e syscall=46 success=yes exit=28208 a0=3 a1=7fff1fe317f0 a2=0 a3=7fff1fe317dc items=0 ppid=4000 pid=4184 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:32.759000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 May 17 00:39:32.777870 kernel: audit: type=1327 audit(1747442372.759:1101): proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 May 17 00:39:32.775507 systemd[1]: Started cri-containerd-8d868d9c3e4b77b85d1efa7c4bcfdabecb4bf2e61a058f8dd84ec4feaf296d67.scope. May 17 00:39:32.792000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:32.801481 kernel: audit: type=1400 audit(1747442372.792:1102): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:32.801600 kernel: audit: type=1400 audit(1747442372.792:1103): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:32.792000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:32.793000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:32.808595 kernel: audit: type=1400 audit(1747442372.793:1104): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:32.808680 kernel: audit: type=1400 audit(1747442372.793:1105): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:32.793000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:32.816575 kernel: audit: type=1400 audit(1747442372.793:1106): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:32.793000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:32.793000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:32.828314 kernel: audit: type=1400 audit(1747442372.793:1107): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:32.828423 kernel: audit: type=1400 audit(1747442372.793:1108): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:32.793000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:32.793000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:32.793000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:32.796000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:32.796000 audit: BPF prog-id=171 op=LOAD May 17 00:39:32.796000 audit[4183]: AVC avc: denied { bpf } for pid=4183 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:32.796000 audit[4183]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=4171 pid=4183 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:32.796000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3864383638643963336534623737623835643165666137633462636664 May 17 00:39:32.796000 audit[4183]: AVC avc: denied { perfmon } for pid=4183 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:32.796000 audit[4183]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=4171 pid=4183 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:32.796000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3864383638643963336534623737623835643165666137633462636664 May 17 00:39:32.796000 audit[4183]: AVC avc: denied { bpf } for pid=4183 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:32.796000 audit[4183]: AVC avc: denied { bpf } for pid=4183 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:32.796000 audit[4183]: AVC avc: denied { bpf } for pid=4183 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:32.796000 audit[4183]: AVC avc: denied { perfmon } for pid=4183 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:32.796000 audit[4183]: AVC avc: denied { perfmon } for pid=4183 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:32.796000 audit[4183]: AVC avc: denied { perfmon } for pid=4183 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:32.796000 audit[4183]: AVC avc: denied { perfmon } for pid=4183 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:32.796000 audit[4183]: AVC avc: denied { perfmon } for pid=4183 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:32.796000 audit[4183]: AVC avc: denied { bpf } for pid=4183 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:32.796000 audit[4183]: AVC avc: denied { bpf } for pid=4183 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:32.796000 audit: BPF prog-id=172 op=LOAD May 17 00:39:32.796000 audit[4183]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c00034bce0 items=0 ppid=4171 pid=4183 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:32.796000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3864383638643963336534623737623835643165666137633462636664 May 17 00:39:32.799000 audit[4183]: AVC avc: denied { bpf } for pid=4183 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:32.799000 audit[4183]: AVC avc: denied { bpf } for pid=4183 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:32.799000 audit[4183]: AVC avc: denied { perfmon } for pid=4183 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:32.799000 audit[4183]: AVC avc: denied { perfmon } for pid=4183 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:32.799000 audit[4183]: AVC avc: denied { perfmon } for pid=4183 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:32.799000 audit[4183]: AVC avc: denied { perfmon } for pid=4183 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:32.799000 audit[4183]: AVC avc: denied { perfmon } for pid=4183 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:32.799000 audit[4183]: AVC avc: denied { bpf } for pid=4183 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:32.799000 audit[4183]: AVC avc: denied { bpf } for pid=4183 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:32.799000 audit: BPF prog-id=173 op=LOAD May 17 00:39:32.799000 audit[4183]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c00034bd28 items=0 ppid=4171 pid=4183 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:32.799000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3864383638643963336534623737623835643165666137633462636664 May 17 00:39:32.799000 audit: BPF prog-id=173 op=UNLOAD May 17 00:39:32.799000 audit: BPF prog-id=172 op=UNLOAD May 17 00:39:32.799000 audit[4183]: AVC avc: denied { bpf } for pid=4183 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:32.799000 audit[4183]: AVC avc: denied { bpf } for pid=4183 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:32.799000 audit[4183]: AVC avc: denied { bpf } for pid=4183 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:32.799000 audit[4183]: AVC avc: denied { perfmon } for pid=4183 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:32.799000 audit[4183]: AVC avc: denied { perfmon } for pid=4183 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:32.799000 audit[4183]: AVC avc: denied { perfmon } for pid=4183 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:32.799000 audit[4183]: AVC avc: denied { perfmon } for pid=4183 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:32.799000 audit[4183]: AVC avc: denied { perfmon } for pid=4183 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:32.799000 audit[4183]: AVC avc: denied { bpf } for pid=4183 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:32.799000 audit[4183]: AVC avc: denied { bpf } for pid=4183 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:32.799000 audit: BPF prog-id=174 op=LOAD May 17 00:39:32.799000 audit[4183]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0003ce138 items=0 ppid=4171 pid=4183 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:32.799000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3864383638643963336534623737623835643165666137633462636664 May 17 00:39:32.845453 env[1634]: time="2025-05-17T00:39:32.845407023Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-755c444ff4-vrn79,Uid:127d3909-e9a9-4f5a-ade7-8eda212d791f,Namespace:calico-apiserver,Attempt:1,} returns sandbox id \"8d868d9c3e4b77b85d1efa7c4bcfdabecb4bf2e61a058f8dd84ec4feaf296d67\"" May 17 00:39:32.849750 env[1634]: time="2025-05-17T00:39:32.849004670Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.0\"" May 17 00:39:33.454620 env[1634]: time="2025-05-17T00:39:33.454571961Z" level=info msg="StopPodSandbox for \"b0890c17061eccdf80ef3fdf6412a91f358237a85c6749e31cb054f4fa012ffd\"" May 17 00:39:33.454997 env[1634]: time="2025-05-17T00:39:33.454934524Z" level=info msg="StopPodSandbox for \"f72c29400ab7dcac47b5302348818191b393dad721d5927699a51057264f8d9b\"" May 17 00:39:33.456484 env[1634]: time="2025-05-17T00:39:33.456140446Z" level=info msg="StopPodSandbox for \"bc2d658c0ed39ff320fda459439b61564ebcebc82e64082742176c054dda74e2\"" May 17 00:39:33.461000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-172.31.30.240:22-139.178.68.195:43038 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:39:33.462803 systemd[1]: Started sshd@7-172.31.30.240:22-139.178.68.195:43038.service. May 17 00:39:33.716000 audit[4221]: USER_ACCT pid=4221 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' May 17 00:39:33.719737 sshd[4221]: Accepted publickey for core from 139.178.68.195 port 43038 ssh2: RSA SHA256:I5cGDzOOPhNK8a4J4SFPiuUQivu3TK8ocBzhX4AkN30 May 17 00:39:33.718000 audit[4221]: CRED_ACQ pid=4221 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' May 17 00:39:33.718000 audit[4221]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff803a5bf0 a2=3 a3=0 items=0 ppid=1 pid=4221 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:33.718000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D May 17 00:39:33.724410 sshd[4221]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) May 17 00:39:33.738305 systemd[1]: Started session-8.scope. May 17 00:39:33.739206 env[1634]: 2025-05-17 00:39:33.607 [INFO][4241] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="b0890c17061eccdf80ef3fdf6412a91f358237a85c6749e31cb054f4fa012ffd" May 17 00:39:33.739206 env[1634]: 2025-05-17 00:39:33.610 [INFO][4241] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="b0890c17061eccdf80ef3fdf6412a91f358237a85c6749e31cb054f4fa012ffd" iface="eth0" netns="/var/run/netns/cni-4c247bca-ea9b-d189-aaff-bd3bb676f283" May 17 00:39:33.739206 env[1634]: 2025-05-17 00:39:33.611 [INFO][4241] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="b0890c17061eccdf80ef3fdf6412a91f358237a85c6749e31cb054f4fa012ffd" iface="eth0" netns="/var/run/netns/cni-4c247bca-ea9b-d189-aaff-bd3bb676f283" May 17 00:39:33.739206 env[1634]: 2025-05-17 00:39:33.611 [INFO][4241] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="b0890c17061eccdf80ef3fdf6412a91f358237a85c6749e31cb054f4fa012ffd" iface="eth0" netns="/var/run/netns/cni-4c247bca-ea9b-d189-aaff-bd3bb676f283" May 17 00:39:33.739206 env[1634]: 2025-05-17 00:39:33.611 [INFO][4241] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="b0890c17061eccdf80ef3fdf6412a91f358237a85c6749e31cb054f4fa012ffd" May 17 00:39:33.739206 env[1634]: 2025-05-17 00:39:33.611 [INFO][4241] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="b0890c17061eccdf80ef3fdf6412a91f358237a85c6749e31cb054f4fa012ffd" May 17 00:39:33.739206 env[1634]: 2025-05-17 00:39:33.711 [INFO][4259] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="b0890c17061eccdf80ef3fdf6412a91f358237a85c6749e31cb054f4fa012ffd" HandleID="k8s-pod-network.b0890c17061eccdf80ef3fdf6412a91f358237a85c6749e31cb054f4fa012ffd" Workload="ip--172--31--30--240-k8s-coredns--674b8bbfcf--mnzbk-eth0" May 17 00:39:33.739206 env[1634]: 2025-05-17 00:39:33.714 [INFO][4259] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. May 17 00:39:33.739206 env[1634]: 2025-05-17 00:39:33.714 [INFO][4259] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. May 17 00:39:33.739206 env[1634]: 2025-05-17 00:39:33.724 [WARNING][4259] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="b0890c17061eccdf80ef3fdf6412a91f358237a85c6749e31cb054f4fa012ffd" HandleID="k8s-pod-network.b0890c17061eccdf80ef3fdf6412a91f358237a85c6749e31cb054f4fa012ffd" Workload="ip--172--31--30--240-k8s-coredns--674b8bbfcf--mnzbk-eth0" May 17 00:39:33.739206 env[1634]: 2025-05-17 00:39:33.724 [INFO][4259] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="b0890c17061eccdf80ef3fdf6412a91f358237a85c6749e31cb054f4fa012ffd" HandleID="k8s-pod-network.b0890c17061eccdf80ef3fdf6412a91f358237a85c6749e31cb054f4fa012ffd" Workload="ip--172--31--30--240-k8s-coredns--674b8bbfcf--mnzbk-eth0" May 17 00:39:33.739206 env[1634]: 2025-05-17 00:39:33.726 [INFO][4259] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. May 17 00:39:33.739206 env[1634]: 2025-05-17 00:39:33.732 [INFO][4241] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="b0890c17061eccdf80ef3fdf6412a91f358237a85c6749e31cb054f4fa012ffd" May 17 00:39:33.739404 systemd-logind[1620]: New session 8 of user core. May 17 00:39:33.740624 env[1634]: time="2025-05-17T00:39:33.740576256Z" level=info msg="TearDown network for sandbox \"b0890c17061eccdf80ef3fdf6412a91f358237a85c6749e31cb054f4fa012ffd\" successfully" May 17 00:39:33.740743 env[1634]: time="2025-05-17T00:39:33.740721277Z" level=info msg="StopPodSandbox for \"b0890c17061eccdf80ef3fdf6412a91f358237a85c6749e31cb054f4fa012ffd\" returns successfully" May 17 00:39:33.741701 env[1634]: time="2025-05-17T00:39:33.741668091Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-mnzbk,Uid:118f3b5b-8621-4b7e-aceb-6cf8623494e9,Namespace:kube-system,Attempt:1,}" May 17 00:39:33.747702 systemd[1]: run-netns-cni\x2d4c247bca\x2dea9b\x2dd189\x2daaff\x2dbd3bb676f283.mount: Deactivated successfully. May 17 00:39:33.758000 audit[4221]: USER_START pid=4221 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' May 17 00:39:33.760000 audit[4281]: CRED_ACQ pid=4281 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' May 17 00:39:33.766752 env[1634]: 2025-05-17 00:39:33.635 [INFO][4242] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="bc2d658c0ed39ff320fda459439b61564ebcebc82e64082742176c054dda74e2" May 17 00:39:33.766752 env[1634]: 2025-05-17 00:39:33.635 [INFO][4242] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="bc2d658c0ed39ff320fda459439b61564ebcebc82e64082742176c054dda74e2" iface="eth0" netns="/var/run/netns/cni-3e967db1-790f-2893-dfae-08ad986546e1" May 17 00:39:33.766752 env[1634]: 2025-05-17 00:39:33.635 [INFO][4242] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="bc2d658c0ed39ff320fda459439b61564ebcebc82e64082742176c054dda74e2" iface="eth0" netns="/var/run/netns/cni-3e967db1-790f-2893-dfae-08ad986546e1" May 17 00:39:33.766752 env[1634]: 2025-05-17 00:39:33.636 [INFO][4242] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="bc2d658c0ed39ff320fda459439b61564ebcebc82e64082742176c054dda74e2" iface="eth0" netns="/var/run/netns/cni-3e967db1-790f-2893-dfae-08ad986546e1" May 17 00:39:33.766752 env[1634]: 2025-05-17 00:39:33.636 [INFO][4242] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="bc2d658c0ed39ff320fda459439b61564ebcebc82e64082742176c054dda74e2" May 17 00:39:33.766752 env[1634]: 2025-05-17 00:39:33.636 [INFO][4242] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="bc2d658c0ed39ff320fda459439b61564ebcebc82e64082742176c054dda74e2" May 17 00:39:33.766752 env[1634]: 2025-05-17 00:39:33.721 [INFO][4268] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="bc2d658c0ed39ff320fda459439b61564ebcebc82e64082742176c054dda74e2" HandleID="k8s-pod-network.bc2d658c0ed39ff320fda459439b61564ebcebc82e64082742176c054dda74e2" Workload="ip--172--31--30--240-k8s-calico--kube--controllers--557b5c79c9--mhmhq-eth0" May 17 00:39:33.766752 env[1634]: 2025-05-17 00:39:33.722 [INFO][4268] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. May 17 00:39:33.766752 env[1634]: 2025-05-17 00:39:33.726 [INFO][4268] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. May 17 00:39:33.766752 env[1634]: 2025-05-17 00:39:33.746 [WARNING][4268] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="bc2d658c0ed39ff320fda459439b61564ebcebc82e64082742176c054dda74e2" HandleID="k8s-pod-network.bc2d658c0ed39ff320fda459439b61564ebcebc82e64082742176c054dda74e2" Workload="ip--172--31--30--240-k8s-calico--kube--controllers--557b5c79c9--mhmhq-eth0" May 17 00:39:33.766752 env[1634]: 2025-05-17 00:39:33.746 [INFO][4268] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="bc2d658c0ed39ff320fda459439b61564ebcebc82e64082742176c054dda74e2" HandleID="k8s-pod-network.bc2d658c0ed39ff320fda459439b61564ebcebc82e64082742176c054dda74e2" Workload="ip--172--31--30--240-k8s-calico--kube--controllers--557b5c79c9--mhmhq-eth0" May 17 00:39:33.766752 env[1634]: 2025-05-17 00:39:33.748 [INFO][4268] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. May 17 00:39:33.766752 env[1634]: 2025-05-17 00:39:33.764 [INFO][4242] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="bc2d658c0ed39ff320fda459439b61564ebcebc82e64082742176c054dda74e2" May 17 00:39:33.775850 systemd[1]: run-netns-cni\x2d3e967db1\x2d790f\x2d2893\x2ddfae\x2d08ad986546e1.mount: Deactivated successfully. May 17 00:39:33.781083 env[1634]: time="2025-05-17T00:39:33.781008553Z" level=info msg="TearDown network for sandbox \"bc2d658c0ed39ff320fda459439b61564ebcebc82e64082742176c054dda74e2\" successfully" May 17 00:39:33.781270 env[1634]: time="2025-05-17T00:39:33.781240758Z" level=info msg="StopPodSandbox for \"bc2d658c0ed39ff320fda459439b61564ebcebc82e64082742176c054dda74e2\" returns successfully" May 17 00:39:33.782248 env[1634]: time="2025-05-17T00:39:33.782205108Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-557b5c79c9-mhmhq,Uid:71c21642-e990-4107-bf6c-cc0ea6307b30,Namespace:calico-system,Attempt:1,}" May 17 00:39:33.790647 env[1634]: 2025-05-17 00:39:33.675 [INFO][4246] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="f72c29400ab7dcac47b5302348818191b393dad721d5927699a51057264f8d9b" May 17 00:39:33.790647 env[1634]: 2025-05-17 00:39:33.675 [INFO][4246] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="f72c29400ab7dcac47b5302348818191b393dad721d5927699a51057264f8d9b" iface="eth0" netns="/var/run/netns/cni-e1aa0259-e7f5-dd1f-ca8c-c2ae33d4edd8" May 17 00:39:33.790647 env[1634]: 2025-05-17 00:39:33.675 [INFO][4246] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="f72c29400ab7dcac47b5302348818191b393dad721d5927699a51057264f8d9b" iface="eth0" netns="/var/run/netns/cni-e1aa0259-e7f5-dd1f-ca8c-c2ae33d4edd8" May 17 00:39:33.790647 env[1634]: 2025-05-17 00:39:33.675 [INFO][4246] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="f72c29400ab7dcac47b5302348818191b393dad721d5927699a51057264f8d9b" iface="eth0" netns="/var/run/netns/cni-e1aa0259-e7f5-dd1f-ca8c-c2ae33d4edd8" May 17 00:39:33.790647 env[1634]: 2025-05-17 00:39:33.675 [INFO][4246] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="f72c29400ab7dcac47b5302348818191b393dad721d5927699a51057264f8d9b" May 17 00:39:33.790647 env[1634]: 2025-05-17 00:39:33.675 [INFO][4246] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="f72c29400ab7dcac47b5302348818191b393dad721d5927699a51057264f8d9b" May 17 00:39:33.790647 env[1634]: 2025-05-17 00:39:33.772 [INFO][4274] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="f72c29400ab7dcac47b5302348818191b393dad721d5927699a51057264f8d9b" HandleID="k8s-pod-network.f72c29400ab7dcac47b5302348818191b393dad721d5927699a51057264f8d9b" Workload="ip--172--31--30--240-k8s-calico--apiserver--755c444ff4--j2rw2-eth0" May 17 00:39:33.790647 env[1634]: 2025-05-17 00:39:33.772 [INFO][4274] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. May 17 00:39:33.790647 env[1634]: 2025-05-17 00:39:33.772 [INFO][4274] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. May 17 00:39:33.790647 env[1634]: 2025-05-17 00:39:33.781 [WARNING][4274] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="f72c29400ab7dcac47b5302348818191b393dad721d5927699a51057264f8d9b" HandleID="k8s-pod-network.f72c29400ab7dcac47b5302348818191b393dad721d5927699a51057264f8d9b" Workload="ip--172--31--30--240-k8s-calico--apiserver--755c444ff4--j2rw2-eth0" May 17 00:39:33.790647 env[1634]: 2025-05-17 00:39:33.782 [INFO][4274] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="f72c29400ab7dcac47b5302348818191b393dad721d5927699a51057264f8d9b" HandleID="k8s-pod-network.f72c29400ab7dcac47b5302348818191b393dad721d5927699a51057264f8d9b" Workload="ip--172--31--30--240-k8s-calico--apiserver--755c444ff4--j2rw2-eth0" May 17 00:39:33.790647 env[1634]: 2025-05-17 00:39:33.784 [INFO][4274] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. May 17 00:39:33.790647 env[1634]: 2025-05-17 00:39:33.786 [INFO][4246] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="f72c29400ab7dcac47b5302348818191b393dad721d5927699a51057264f8d9b" May 17 00:39:33.794406 systemd[1]: run-netns-cni\x2de1aa0259\x2de7f5\x2ddd1f\x2dca8c\x2dc2ae33d4edd8.mount: Deactivated successfully. May 17 00:39:33.796177 env[1634]: time="2025-05-17T00:39:33.796131763Z" level=info msg="TearDown network for sandbox \"f72c29400ab7dcac47b5302348818191b393dad721d5927699a51057264f8d9b\" successfully" May 17 00:39:33.796279 env[1634]: time="2025-05-17T00:39:33.796173001Z" level=info msg="StopPodSandbox for \"f72c29400ab7dcac47b5302348818191b393dad721d5927699a51057264f8d9b\" returns successfully" May 17 00:39:33.797439 env[1634]: time="2025-05-17T00:39:33.797405127Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-755c444ff4-j2rw2,Uid:dddc5262-e1f3-4b01-bd21-570d31a85d68,Namespace:calico-apiserver,Attempt:1,}" May 17 00:39:34.199208 systemd-networkd[1360]: cali583848cbf0c: Link UP May 17 00:39:34.203883 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready May 17 00:39:34.211823 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali583848cbf0c: link becomes ready May 17 00:39:34.208055 systemd-networkd[1360]: cali583848cbf0c: Gained carrier May 17 00:39:34.229600 env[1634]: 2025-05-17 00:39:33.894 [INFO][4283] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ip--172--31--30--240-k8s-coredns--674b8bbfcf--mnzbk-eth0 coredns-674b8bbfcf- kube-system 118f3b5b-8621-4b7e-aceb-6cf8623494e9 967 0 2025-05-17 00:38:52 +0000 UTC map[k8s-app:kube-dns pod-template-hash:674b8bbfcf projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s ip-172-31-30-240 coredns-674b8bbfcf-mnzbk eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] cali583848cbf0c [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] [] }} ContainerID="6e76a72ee41e05f39214ca3623aa2997309cbc28e243632eccdf656ef2beb46d" Namespace="kube-system" Pod="coredns-674b8bbfcf-mnzbk" WorkloadEndpoint="ip--172--31--30--240-k8s-coredns--674b8bbfcf--mnzbk-" May 17 00:39:34.229600 env[1634]: 2025-05-17 00:39:33.894 [INFO][4283] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="6e76a72ee41e05f39214ca3623aa2997309cbc28e243632eccdf656ef2beb46d" Namespace="kube-system" Pod="coredns-674b8bbfcf-mnzbk" WorkloadEndpoint="ip--172--31--30--240-k8s-coredns--674b8bbfcf--mnzbk-eth0" May 17 00:39:34.229600 env[1634]: 2025-05-17 00:39:34.051 [INFO][4321] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="6e76a72ee41e05f39214ca3623aa2997309cbc28e243632eccdf656ef2beb46d" HandleID="k8s-pod-network.6e76a72ee41e05f39214ca3623aa2997309cbc28e243632eccdf656ef2beb46d" Workload="ip--172--31--30--240-k8s-coredns--674b8bbfcf--mnzbk-eth0" May 17 00:39:34.229600 env[1634]: 2025-05-17 00:39:34.053 [INFO][4321] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="6e76a72ee41e05f39214ca3623aa2997309cbc28e243632eccdf656ef2beb46d" HandleID="k8s-pod-network.6e76a72ee41e05f39214ca3623aa2997309cbc28e243632eccdf656ef2beb46d" Workload="ip--172--31--30--240-k8s-coredns--674b8bbfcf--mnzbk-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0002d1e30), Attrs:map[string]string{"namespace":"kube-system", "node":"ip-172-31-30-240", "pod":"coredns-674b8bbfcf-mnzbk", "timestamp":"2025-05-17 00:39:34.049206509 +0000 UTC"}, Hostname:"ip-172-31-30-240", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} May 17 00:39:34.229600 env[1634]: 2025-05-17 00:39:34.053 [INFO][4321] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. May 17 00:39:34.229600 env[1634]: 2025-05-17 00:39:34.053 [INFO][4321] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. May 17 00:39:34.229600 env[1634]: 2025-05-17 00:39:34.053 [INFO][4321] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ip-172-31-30-240' May 17 00:39:34.229600 env[1634]: 2025-05-17 00:39:34.073 [INFO][4321] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.6e76a72ee41e05f39214ca3623aa2997309cbc28e243632eccdf656ef2beb46d" host="ip-172-31-30-240" May 17 00:39:34.229600 env[1634]: 2025-05-17 00:39:34.085 [INFO][4321] ipam/ipam.go 394: Looking up existing affinities for host host="ip-172-31-30-240" May 17 00:39:34.229600 env[1634]: 2025-05-17 00:39:34.102 [INFO][4321] ipam/ipam.go 511: Trying affinity for 192.168.105.64/26 host="ip-172-31-30-240" May 17 00:39:34.229600 env[1634]: 2025-05-17 00:39:34.104 [INFO][4321] ipam/ipam.go 158: Attempting to load block cidr=192.168.105.64/26 host="ip-172-31-30-240" May 17 00:39:34.229600 env[1634]: 2025-05-17 00:39:34.111 [INFO][4321] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.105.64/26 host="ip-172-31-30-240" May 17 00:39:34.229600 env[1634]: 2025-05-17 00:39:34.112 [INFO][4321] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.105.64/26 handle="k8s-pod-network.6e76a72ee41e05f39214ca3623aa2997309cbc28e243632eccdf656ef2beb46d" host="ip-172-31-30-240" May 17 00:39:34.229600 env[1634]: 2025-05-17 00:39:34.117 [INFO][4321] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.6e76a72ee41e05f39214ca3623aa2997309cbc28e243632eccdf656ef2beb46d May 17 00:39:34.229600 env[1634]: 2025-05-17 00:39:34.139 [INFO][4321] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.105.64/26 handle="k8s-pod-network.6e76a72ee41e05f39214ca3623aa2997309cbc28e243632eccdf656ef2beb46d" host="ip-172-31-30-240" May 17 00:39:34.229600 env[1634]: 2025-05-17 00:39:34.160 [INFO][4321] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.105.67/26] block=192.168.105.64/26 handle="k8s-pod-network.6e76a72ee41e05f39214ca3623aa2997309cbc28e243632eccdf656ef2beb46d" host="ip-172-31-30-240" May 17 00:39:34.229600 env[1634]: 2025-05-17 00:39:34.160 [INFO][4321] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.105.67/26] handle="k8s-pod-network.6e76a72ee41e05f39214ca3623aa2997309cbc28e243632eccdf656ef2beb46d" host="ip-172-31-30-240" May 17 00:39:34.229600 env[1634]: 2025-05-17 00:39:34.162 [INFO][4321] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. May 17 00:39:34.229600 env[1634]: 2025-05-17 00:39:34.162 [INFO][4321] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.105.67/26] IPv6=[] ContainerID="6e76a72ee41e05f39214ca3623aa2997309cbc28e243632eccdf656ef2beb46d" HandleID="k8s-pod-network.6e76a72ee41e05f39214ca3623aa2997309cbc28e243632eccdf656ef2beb46d" Workload="ip--172--31--30--240-k8s-coredns--674b8bbfcf--mnzbk-eth0" May 17 00:39:34.230607 env[1634]: 2025-05-17 00:39:34.173 [INFO][4283] cni-plugin/k8s.go 418: Populated endpoint ContainerID="6e76a72ee41e05f39214ca3623aa2997309cbc28e243632eccdf656ef2beb46d" Namespace="kube-system" Pod="coredns-674b8bbfcf-mnzbk" WorkloadEndpoint="ip--172--31--30--240-k8s-coredns--674b8bbfcf--mnzbk-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--30--240-k8s-coredns--674b8bbfcf--mnzbk-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"118f3b5b-8621-4b7e-aceb-6cf8623494e9", ResourceVersion:"967", Generation:0, CreationTimestamp:time.Date(2025, time.May, 17, 0, 38, 52, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-30-240", ContainerID:"", Pod:"coredns-674b8bbfcf-mnzbk", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.105.67/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali583848cbf0c", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} May 17 00:39:34.230607 env[1634]: 2025-05-17 00:39:34.176 [INFO][4283] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.105.67/32] ContainerID="6e76a72ee41e05f39214ca3623aa2997309cbc28e243632eccdf656ef2beb46d" Namespace="kube-system" Pod="coredns-674b8bbfcf-mnzbk" WorkloadEndpoint="ip--172--31--30--240-k8s-coredns--674b8bbfcf--mnzbk-eth0" May 17 00:39:34.230607 env[1634]: 2025-05-17 00:39:34.176 [INFO][4283] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali583848cbf0c ContainerID="6e76a72ee41e05f39214ca3623aa2997309cbc28e243632eccdf656ef2beb46d" Namespace="kube-system" Pod="coredns-674b8bbfcf-mnzbk" WorkloadEndpoint="ip--172--31--30--240-k8s-coredns--674b8bbfcf--mnzbk-eth0" May 17 00:39:34.230607 env[1634]: 2025-05-17 00:39:34.200 [INFO][4283] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="6e76a72ee41e05f39214ca3623aa2997309cbc28e243632eccdf656ef2beb46d" Namespace="kube-system" Pod="coredns-674b8bbfcf-mnzbk" WorkloadEndpoint="ip--172--31--30--240-k8s-coredns--674b8bbfcf--mnzbk-eth0" May 17 00:39:34.230607 env[1634]: 2025-05-17 00:39:34.201 [INFO][4283] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="6e76a72ee41e05f39214ca3623aa2997309cbc28e243632eccdf656ef2beb46d" Namespace="kube-system" Pod="coredns-674b8bbfcf-mnzbk" WorkloadEndpoint="ip--172--31--30--240-k8s-coredns--674b8bbfcf--mnzbk-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--30--240-k8s-coredns--674b8bbfcf--mnzbk-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"118f3b5b-8621-4b7e-aceb-6cf8623494e9", ResourceVersion:"967", Generation:0, CreationTimestamp:time.Date(2025, time.May, 17, 0, 38, 52, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-30-240", ContainerID:"6e76a72ee41e05f39214ca3623aa2997309cbc28e243632eccdf656ef2beb46d", Pod:"coredns-674b8bbfcf-mnzbk", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.105.67/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali583848cbf0c", MAC:"56:26:ae:0a:00:7d", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} May 17 00:39:34.230607 env[1634]: 2025-05-17 00:39:34.224 [INFO][4283] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="6e76a72ee41e05f39214ca3623aa2997309cbc28e243632eccdf656ef2beb46d" Namespace="kube-system" Pod="coredns-674b8bbfcf-mnzbk" WorkloadEndpoint="ip--172--31--30--240-k8s-coredns--674b8bbfcf--mnzbk-eth0" May 17 00:39:34.390856 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calie6785d09ee3: link becomes ready May 17 00:39:34.386284 systemd-networkd[1360]: calie6785d09ee3: Link UP May 17 00:39:34.391552 systemd-networkd[1360]: calie6785d09ee3: Gained carrier May 17 00:39:34.408820 env[1634]: time="2025-05-17T00:39:34.383861078Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 May 17 00:39:34.408820 env[1634]: time="2025-05-17T00:39:34.383951228Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 May 17 00:39:34.408820 env[1634]: time="2025-05-17T00:39:34.383973414Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 May 17 00:39:34.408820 env[1634]: time="2025-05-17T00:39:34.384220710Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/6e76a72ee41e05f39214ca3623aa2997309cbc28e243632eccdf656ef2beb46d pid=4365 runtime=io.containerd.runc.v2 May 17 00:39:34.418000 audit[4379]: NETFILTER_CFG table=filter:108 family=2 entries=46 op=nft_register_chain pid=4379 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" May 17 00:39:34.418000 audit[4379]: SYSCALL arch=c000003e syscall=46 success=yes exit=23740 a0=3 a1=7ffef3984d00 a2=0 a3=7ffef3984cec items=0 ppid=4000 pid=4379 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:34.418000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 May 17 00:39:34.500820 env[1634]: 2025-05-17 00:39:34.037 [INFO][4294] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ip--172--31--30--240-k8s-calico--kube--controllers--557b5c79c9--mhmhq-eth0 calico-kube-controllers-557b5c79c9- calico-system 71c21642-e990-4107-bf6c-cc0ea6307b30 968 0 2025-05-17 00:39:08 +0000 UTC map[app.kubernetes.io/name:calico-kube-controllers k8s-app:calico-kube-controllers pod-template-hash:557b5c79c9 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-kube-controllers] map[] [] [] []} {k8s ip-172-31-30-240 calico-kube-controllers-557b5c79c9-mhmhq eth0 calico-kube-controllers [] [] [kns.calico-system ksa.calico-system.calico-kube-controllers] calie6785d09ee3 [] [] }} ContainerID="e394e15fec4ebf284bcb99b919e76853c0c1e2d5584f8e42edca15019c30a118" Namespace="calico-system" Pod="calico-kube-controllers-557b5c79c9-mhmhq" WorkloadEndpoint="ip--172--31--30--240-k8s-calico--kube--controllers--557b5c79c9--mhmhq-" May 17 00:39:34.500820 env[1634]: 2025-05-17 00:39:34.038 [INFO][4294] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="e394e15fec4ebf284bcb99b919e76853c0c1e2d5584f8e42edca15019c30a118" Namespace="calico-system" Pod="calico-kube-controllers-557b5c79c9-mhmhq" WorkloadEndpoint="ip--172--31--30--240-k8s-calico--kube--controllers--557b5c79c9--mhmhq-eth0" May 17 00:39:34.500820 env[1634]: 2025-05-17 00:39:34.253 [INFO][4340] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="e394e15fec4ebf284bcb99b919e76853c0c1e2d5584f8e42edca15019c30a118" HandleID="k8s-pod-network.e394e15fec4ebf284bcb99b919e76853c0c1e2d5584f8e42edca15019c30a118" Workload="ip--172--31--30--240-k8s-calico--kube--controllers--557b5c79c9--mhmhq-eth0" May 17 00:39:34.500820 env[1634]: 2025-05-17 00:39:34.254 [INFO][4340] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="e394e15fec4ebf284bcb99b919e76853c0c1e2d5584f8e42edca15019c30a118" HandleID="k8s-pod-network.e394e15fec4ebf284bcb99b919e76853c0c1e2d5584f8e42edca15019c30a118" Workload="ip--172--31--30--240-k8s-calico--kube--controllers--557b5c79c9--mhmhq-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0001227c0), Attrs:map[string]string{"namespace":"calico-system", "node":"ip-172-31-30-240", "pod":"calico-kube-controllers-557b5c79c9-mhmhq", "timestamp":"2025-05-17 00:39:34.252363742 +0000 UTC"}, Hostname:"ip-172-31-30-240", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} May 17 00:39:34.500820 env[1634]: 2025-05-17 00:39:34.254 [INFO][4340] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. May 17 00:39:34.500820 env[1634]: 2025-05-17 00:39:34.254 [INFO][4340] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. May 17 00:39:34.500820 env[1634]: 2025-05-17 00:39:34.254 [INFO][4340] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ip-172-31-30-240' May 17 00:39:34.500820 env[1634]: 2025-05-17 00:39:34.297 [INFO][4340] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.e394e15fec4ebf284bcb99b919e76853c0c1e2d5584f8e42edca15019c30a118" host="ip-172-31-30-240" May 17 00:39:34.500820 env[1634]: 2025-05-17 00:39:34.313 [INFO][4340] ipam/ipam.go 394: Looking up existing affinities for host host="ip-172-31-30-240" May 17 00:39:34.500820 env[1634]: 2025-05-17 00:39:34.321 [INFO][4340] ipam/ipam.go 511: Trying affinity for 192.168.105.64/26 host="ip-172-31-30-240" May 17 00:39:34.500820 env[1634]: 2025-05-17 00:39:34.324 [INFO][4340] ipam/ipam.go 158: Attempting to load block cidr=192.168.105.64/26 host="ip-172-31-30-240" May 17 00:39:34.500820 env[1634]: 2025-05-17 00:39:34.327 [INFO][4340] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.105.64/26 host="ip-172-31-30-240" May 17 00:39:34.500820 env[1634]: 2025-05-17 00:39:34.327 [INFO][4340] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.105.64/26 handle="k8s-pod-network.e394e15fec4ebf284bcb99b919e76853c0c1e2d5584f8e42edca15019c30a118" host="ip-172-31-30-240" May 17 00:39:34.500820 env[1634]: 2025-05-17 00:39:34.330 [INFO][4340] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.e394e15fec4ebf284bcb99b919e76853c0c1e2d5584f8e42edca15019c30a118 May 17 00:39:34.500820 env[1634]: 2025-05-17 00:39:34.339 [INFO][4340] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.105.64/26 handle="k8s-pod-network.e394e15fec4ebf284bcb99b919e76853c0c1e2d5584f8e42edca15019c30a118" host="ip-172-31-30-240" May 17 00:39:34.500820 env[1634]: 2025-05-17 00:39:34.361 [INFO][4340] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.105.68/26] block=192.168.105.64/26 handle="k8s-pod-network.e394e15fec4ebf284bcb99b919e76853c0c1e2d5584f8e42edca15019c30a118" host="ip-172-31-30-240" May 17 00:39:34.500820 env[1634]: 2025-05-17 00:39:34.361 [INFO][4340] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.105.68/26] handle="k8s-pod-network.e394e15fec4ebf284bcb99b919e76853c0c1e2d5584f8e42edca15019c30a118" host="ip-172-31-30-240" May 17 00:39:34.500820 env[1634]: 2025-05-17 00:39:34.361 [INFO][4340] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. May 17 00:39:34.500820 env[1634]: 2025-05-17 00:39:34.361 [INFO][4340] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.105.68/26] IPv6=[] ContainerID="e394e15fec4ebf284bcb99b919e76853c0c1e2d5584f8e42edca15019c30a118" HandleID="k8s-pod-network.e394e15fec4ebf284bcb99b919e76853c0c1e2d5584f8e42edca15019c30a118" Workload="ip--172--31--30--240-k8s-calico--kube--controllers--557b5c79c9--mhmhq-eth0" May 17 00:39:34.503307 env[1634]: 2025-05-17 00:39:34.367 [INFO][4294] cni-plugin/k8s.go 418: Populated endpoint ContainerID="e394e15fec4ebf284bcb99b919e76853c0c1e2d5584f8e42edca15019c30a118" Namespace="calico-system" Pod="calico-kube-controllers-557b5c79c9-mhmhq" WorkloadEndpoint="ip--172--31--30--240-k8s-calico--kube--controllers--557b5c79c9--mhmhq-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--30--240-k8s-calico--kube--controllers--557b5c79c9--mhmhq-eth0", GenerateName:"calico-kube-controllers-557b5c79c9-", Namespace:"calico-system", SelfLink:"", UID:"71c21642-e990-4107-bf6c-cc0ea6307b30", ResourceVersion:"968", Generation:0, CreationTimestamp:time.Date(2025, time.May, 17, 0, 39, 8, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"557b5c79c9", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-30-240", ContainerID:"", Pod:"calico-kube-controllers-557b5c79c9-mhmhq", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.105.68/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"calie6785d09ee3", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} May 17 00:39:34.503307 env[1634]: 2025-05-17 00:39:34.367 [INFO][4294] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.105.68/32] ContainerID="e394e15fec4ebf284bcb99b919e76853c0c1e2d5584f8e42edca15019c30a118" Namespace="calico-system" Pod="calico-kube-controllers-557b5c79c9-mhmhq" WorkloadEndpoint="ip--172--31--30--240-k8s-calico--kube--controllers--557b5c79c9--mhmhq-eth0" May 17 00:39:34.503307 env[1634]: 2025-05-17 00:39:34.367 [INFO][4294] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calie6785d09ee3 ContainerID="e394e15fec4ebf284bcb99b919e76853c0c1e2d5584f8e42edca15019c30a118" Namespace="calico-system" Pod="calico-kube-controllers-557b5c79c9-mhmhq" WorkloadEndpoint="ip--172--31--30--240-k8s-calico--kube--controllers--557b5c79c9--mhmhq-eth0" May 17 00:39:34.503307 env[1634]: 2025-05-17 00:39:34.385 [INFO][4294] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="e394e15fec4ebf284bcb99b919e76853c0c1e2d5584f8e42edca15019c30a118" Namespace="calico-system" Pod="calico-kube-controllers-557b5c79c9-mhmhq" WorkloadEndpoint="ip--172--31--30--240-k8s-calico--kube--controllers--557b5c79c9--mhmhq-eth0" May 17 00:39:34.503307 env[1634]: 2025-05-17 00:39:34.466 [INFO][4294] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="e394e15fec4ebf284bcb99b919e76853c0c1e2d5584f8e42edca15019c30a118" Namespace="calico-system" Pod="calico-kube-controllers-557b5c79c9-mhmhq" WorkloadEndpoint="ip--172--31--30--240-k8s-calico--kube--controllers--557b5c79c9--mhmhq-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--30--240-k8s-calico--kube--controllers--557b5c79c9--mhmhq-eth0", GenerateName:"calico-kube-controllers-557b5c79c9-", Namespace:"calico-system", SelfLink:"", UID:"71c21642-e990-4107-bf6c-cc0ea6307b30", ResourceVersion:"968", Generation:0, CreationTimestamp:time.Date(2025, time.May, 17, 0, 39, 8, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"557b5c79c9", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-30-240", ContainerID:"e394e15fec4ebf284bcb99b919e76853c0c1e2d5584f8e42edca15019c30a118", Pod:"calico-kube-controllers-557b5c79c9-mhmhq", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.105.68/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"calie6785d09ee3", MAC:"76:19:b5:20:db:f2", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} May 17 00:39:34.503307 env[1634]: 2025-05-17 00:39:34.495 [INFO][4294] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="e394e15fec4ebf284bcb99b919e76853c0c1e2d5584f8e42edca15019c30a118" Namespace="calico-system" Pod="calico-kube-controllers-557b5c79c9-mhmhq" WorkloadEndpoint="ip--172--31--30--240-k8s-calico--kube--controllers--557b5c79c9--mhmhq-eth0" May 17 00:39:34.521704 systemd[1]: Started cri-containerd-6e76a72ee41e05f39214ca3623aa2997309cbc28e243632eccdf656ef2beb46d.scope. May 17 00:39:34.524038 systemd-networkd[1360]: califbd64be8d0c: Gained IPv6LL May 17 00:39:34.562276 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calib8fef7ddc3c: link becomes ready May 17 00:39:34.555856 systemd-networkd[1360]: calib8fef7ddc3c: Link UP May 17 00:39:34.561997 systemd-networkd[1360]: calib8fef7ddc3c: Gained carrier May 17 00:39:34.603000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:34.603000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:34.603000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:34.603000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:34.603000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:34.603000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:34.603000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:34.603000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:34.603000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:34.604000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:34.604000 audit: BPF prog-id=175 op=LOAD May 17 00:39:34.604000 audit[4380]: AVC avc: denied { bpf } for pid=4380 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:34.604000 audit[4380]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=4365 pid=4380 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:34.604000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3665373661373265653431653035663339323134636133363233616132 May 17 00:39:34.605000 audit[4380]: AVC avc: denied { perfmon } for pid=4380 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:34.605000 audit[4380]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=c items=0 ppid=4365 pid=4380 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:34.605000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3665373661373265653431653035663339323134636133363233616132 May 17 00:39:34.605000 audit[4380]: AVC avc: denied { bpf } for pid=4380 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:34.605000 audit[4380]: AVC avc: denied { bpf } for pid=4380 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:34.605000 audit[4380]: AVC avc: denied { bpf } for pid=4380 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:34.605000 audit[4380]: AVC avc: denied { perfmon } for pid=4380 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:34.605000 audit[4380]: AVC avc: denied { perfmon } for pid=4380 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:34.605000 audit[4380]: AVC avc: denied { perfmon } for pid=4380 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:34.605000 audit[4380]: AVC avc: denied { perfmon } for pid=4380 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:34.605000 audit[4380]: AVC avc: denied { perfmon } for pid=4380 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:34.605000 audit[4380]: AVC avc: denied { bpf } for pid=4380 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:34.605000 audit[4380]: AVC avc: denied { bpf } for pid=4380 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:34.605000 audit: BPF prog-id=176 op=LOAD May 17 00:39:34.605000 audit[4380]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c000285c90 items=0 ppid=4365 pid=4380 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:34.605000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3665373661373265653431653035663339323134636133363233616132 May 17 00:39:34.605000 audit[4380]: AVC avc: denied { bpf } for pid=4380 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:34.605000 audit[4380]: AVC avc: denied { bpf } for pid=4380 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:34.605000 audit[4380]: AVC avc: denied { perfmon } for pid=4380 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:34.605000 audit[4380]: AVC avc: denied { perfmon } for pid=4380 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:34.605000 audit[4380]: AVC avc: denied { perfmon } for pid=4380 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:34.605000 audit[4380]: AVC avc: denied { perfmon } for pid=4380 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:34.605000 audit[4380]: AVC avc: denied { perfmon } for pid=4380 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:34.605000 audit[4380]: AVC avc: denied { bpf } for pid=4380 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:34.605000 audit[4380]: AVC avc: denied { bpf } for pid=4380 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:34.605000 audit: BPF prog-id=177 op=LOAD May 17 00:39:34.605000 audit[4380]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c000285cd8 items=0 ppid=4365 pid=4380 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:34.605000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3665373661373265653431653035663339323134636133363233616132 May 17 00:39:34.605000 audit: BPF prog-id=177 op=UNLOAD May 17 00:39:34.605000 audit: BPF prog-id=176 op=UNLOAD May 17 00:39:34.605000 audit[4380]: AVC avc: denied { bpf } for pid=4380 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:34.605000 audit[4380]: AVC avc: denied { bpf } for pid=4380 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:34.605000 audit[4380]: AVC avc: denied { bpf } for pid=4380 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:34.605000 audit[4380]: AVC avc: denied { perfmon } for pid=4380 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:34.605000 audit[4380]: AVC avc: denied { perfmon } for pid=4380 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:34.605000 audit[4380]: AVC avc: denied { perfmon } for pid=4380 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:34.605000 audit[4380]: AVC avc: denied { perfmon } for pid=4380 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:34.605000 audit[4380]: AVC avc: denied { perfmon } for pid=4380 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:34.605000 audit[4380]: AVC avc: denied { bpf } for pid=4380 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:34.605000 audit[4380]: AVC avc: denied { bpf } for pid=4380 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:34.605000 audit: BPF prog-id=178 op=LOAD May 17 00:39:34.605000 audit[4380]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c0003920e8 items=0 ppid=4365 pid=4380 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:34.605000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3665373661373265653431653035663339323134636133363233616132 May 17 00:39:34.621733 env[1634]: 2025-05-17 00:39:34.014 [INFO][4311] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ip--172--31--30--240-k8s-calico--apiserver--755c444ff4--j2rw2-eth0 calico-apiserver-755c444ff4- calico-apiserver dddc5262-e1f3-4b01-bd21-570d31a85d68 969 0 2025-05-17 00:39:03 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:755c444ff4 projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s ip-172-31-30-240 calico-apiserver-755c444ff4-j2rw2 eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] calib8fef7ddc3c [] [] }} ContainerID="99aeb3fbda4050d2676666f2321a05e9ce7cff436b677225230ee8d363a8f7b5" Namespace="calico-apiserver" Pod="calico-apiserver-755c444ff4-j2rw2" WorkloadEndpoint="ip--172--31--30--240-k8s-calico--apiserver--755c444ff4--j2rw2-" May 17 00:39:34.621733 env[1634]: 2025-05-17 00:39:34.014 [INFO][4311] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="99aeb3fbda4050d2676666f2321a05e9ce7cff436b677225230ee8d363a8f7b5" Namespace="calico-apiserver" Pod="calico-apiserver-755c444ff4-j2rw2" WorkloadEndpoint="ip--172--31--30--240-k8s-calico--apiserver--755c444ff4--j2rw2-eth0" May 17 00:39:34.621733 env[1634]: 2025-05-17 00:39:34.352 [INFO][4335] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="99aeb3fbda4050d2676666f2321a05e9ce7cff436b677225230ee8d363a8f7b5" HandleID="k8s-pod-network.99aeb3fbda4050d2676666f2321a05e9ce7cff436b677225230ee8d363a8f7b5" Workload="ip--172--31--30--240-k8s-calico--apiserver--755c444ff4--j2rw2-eth0" May 17 00:39:34.621733 env[1634]: 2025-05-17 00:39:34.352 [INFO][4335] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="99aeb3fbda4050d2676666f2321a05e9ce7cff436b677225230ee8d363a8f7b5" HandleID="k8s-pod-network.99aeb3fbda4050d2676666f2321a05e9ce7cff436b677225230ee8d363a8f7b5" Workload="ip--172--31--30--240-k8s-calico--apiserver--755c444ff4--j2rw2-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc00023a3a0), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"ip-172-31-30-240", "pod":"calico-apiserver-755c444ff4-j2rw2", "timestamp":"2025-05-17 00:39:34.352497631 +0000 UTC"}, Hostname:"ip-172-31-30-240", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} May 17 00:39:34.621733 env[1634]: 2025-05-17 00:39:34.352 [INFO][4335] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. May 17 00:39:34.621733 env[1634]: 2025-05-17 00:39:34.361 [INFO][4335] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. May 17 00:39:34.621733 env[1634]: 2025-05-17 00:39:34.361 [INFO][4335] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ip-172-31-30-240' May 17 00:39:34.621733 env[1634]: 2025-05-17 00:39:34.409 [INFO][4335] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.99aeb3fbda4050d2676666f2321a05e9ce7cff436b677225230ee8d363a8f7b5" host="ip-172-31-30-240" May 17 00:39:34.621733 env[1634]: 2025-05-17 00:39:34.440 [INFO][4335] ipam/ipam.go 394: Looking up existing affinities for host host="ip-172-31-30-240" May 17 00:39:34.621733 env[1634]: 2025-05-17 00:39:34.473 [INFO][4335] ipam/ipam.go 511: Trying affinity for 192.168.105.64/26 host="ip-172-31-30-240" May 17 00:39:34.621733 env[1634]: 2025-05-17 00:39:34.478 [INFO][4335] ipam/ipam.go 158: Attempting to load block cidr=192.168.105.64/26 host="ip-172-31-30-240" May 17 00:39:34.621733 env[1634]: 2025-05-17 00:39:34.489 [INFO][4335] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.105.64/26 host="ip-172-31-30-240" May 17 00:39:34.621733 env[1634]: 2025-05-17 00:39:34.493 [INFO][4335] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.105.64/26 handle="k8s-pod-network.99aeb3fbda4050d2676666f2321a05e9ce7cff436b677225230ee8d363a8f7b5" host="ip-172-31-30-240" May 17 00:39:34.621733 env[1634]: 2025-05-17 00:39:34.499 [INFO][4335] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.99aeb3fbda4050d2676666f2321a05e9ce7cff436b677225230ee8d363a8f7b5 May 17 00:39:34.621733 env[1634]: 2025-05-17 00:39:34.514 [INFO][4335] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.105.64/26 handle="k8s-pod-network.99aeb3fbda4050d2676666f2321a05e9ce7cff436b677225230ee8d363a8f7b5" host="ip-172-31-30-240" May 17 00:39:34.621733 env[1634]: 2025-05-17 00:39:34.542 [INFO][4335] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.105.69/26] block=192.168.105.64/26 handle="k8s-pod-network.99aeb3fbda4050d2676666f2321a05e9ce7cff436b677225230ee8d363a8f7b5" host="ip-172-31-30-240" May 17 00:39:34.621733 env[1634]: 2025-05-17 00:39:34.542 [INFO][4335] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.105.69/26] handle="k8s-pod-network.99aeb3fbda4050d2676666f2321a05e9ce7cff436b677225230ee8d363a8f7b5" host="ip-172-31-30-240" May 17 00:39:34.621733 env[1634]: 2025-05-17 00:39:34.542 [INFO][4335] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. May 17 00:39:34.621733 env[1634]: 2025-05-17 00:39:34.542 [INFO][4335] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.105.69/26] IPv6=[] ContainerID="99aeb3fbda4050d2676666f2321a05e9ce7cff436b677225230ee8d363a8f7b5" HandleID="k8s-pod-network.99aeb3fbda4050d2676666f2321a05e9ce7cff436b677225230ee8d363a8f7b5" Workload="ip--172--31--30--240-k8s-calico--apiserver--755c444ff4--j2rw2-eth0" May 17 00:39:34.622753 env[1634]: 2025-05-17 00:39:34.545 [INFO][4311] cni-plugin/k8s.go 418: Populated endpoint ContainerID="99aeb3fbda4050d2676666f2321a05e9ce7cff436b677225230ee8d363a8f7b5" Namespace="calico-apiserver" Pod="calico-apiserver-755c444ff4-j2rw2" WorkloadEndpoint="ip--172--31--30--240-k8s-calico--apiserver--755c444ff4--j2rw2-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--30--240-k8s-calico--apiserver--755c444ff4--j2rw2-eth0", GenerateName:"calico-apiserver-755c444ff4-", Namespace:"calico-apiserver", SelfLink:"", UID:"dddc5262-e1f3-4b01-bd21-570d31a85d68", ResourceVersion:"969", Generation:0, CreationTimestamp:time.Date(2025, time.May, 17, 0, 39, 3, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"755c444ff4", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-30-240", ContainerID:"", Pod:"calico-apiserver-755c444ff4-j2rw2", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.105.69/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calib8fef7ddc3c", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} May 17 00:39:34.622753 env[1634]: 2025-05-17 00:39:34.546 [INFO][4311] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.105.69/32] ContainerID="99aeb3fbda4050d2676666f2321a05e9ce7cff436b677225230ee8d363a8f7b5" Namespace="calico-apiserver" Pod="calico-apiserver-755c444ff4-j2rw2" WorkloadEndpoint="ip--172--31--30--240-k8s-calico--apiserver--755c444ff4--j2rw2-eth0" May 17 00:39:34.622753 env[1634]: 2025-05-17 00:39:34.546 [INFO][4311] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calib8fef7ddc3c ContainerID="99aeb3fbda4050d2676666f2321a05e9ce7cff436b677225230ee8d363a8f7b5" Namespace="calico-apiserver" Pod="calico-apiserver-755c444ff4-j2rw2" WorkloadEndpoint="ip--172--31--30--240-k8s-calico--apiserver--755c444ff4--j2rw2-eth0" May 17 00:39:34.622753 env[1634]: 2025-05-17 00:39:34.567 [INFO][4311] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="99aeb3fbda4050d2676666f2321a05e9ce7cff436b677225230ee8d363a8f7b5" Namespace="calico-apiserver" Pod="calico-apiserver-755c444ff4-j2rw2" WorkloadEndpoint="ip--172--31--30--240-k8s-calico--apiserver--755c444ff4--j2rw2-eth0" May 17 00:39:34.622753 env[1634]: 2025-05-17 00:39:34.567 [INFO][4311] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="99aeb3fbda4050d2676666f2321a05e9ce7cff436b677225230ee8d363a8f7b5" Namespace="calico-apiserver" Pod="calico-apiserver-755c444ff4-j2rw2" WorkloadEndpoint="ip--172--31--30--240-k8s-calico--apiserver--755c444ff4--j2rw2-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--30--240-k8s-calico--apiserver--755c444ff4--j2rw2-eth0", GenerateName:"calico-apiserver-755c444ff4-", Namespace:"calico-apiserver", SelfLink:"", UID:"dddc5262-e1f3-4b01-bd21-570d31a85d68", ResourceVersion:"969", Generation:0, CreationTimestamp:time.Date(2025, time.May, 17, 0, 39, 3, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"755c444ff4", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-30-240", ContainerID:"99aeb3fbda4050d2676666f2321a05e9ce7cff436b677225230ee8d363a8f7b5", Pod:"calico-apiserver-755c444ff4-j2rw2", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.105.69/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calib8fef7ddc3c", MAC:"06:d9:ba:ee:f9:0f", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} May 17 00:39:34.622753 env[1634]: 2025-05-17 00:39:34.598 [INFO][4311] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="99aeb3fbda4050d2676666f2321a05e9ce7cff436b677225230ee8d363a8f7b5" Namespace="calico-apiserver" Pod="calico-apiserver-755c444ff4-j2rw2" WorkloadEndpoint="ip--172--31--30--240-k8s-calico--apiserver--755c444ff4--j2rw2-eth0" May 17 00:39:34.690492 env[1634]: time="2025-05-17T00:39:34.690398664Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 May 17 00:39:34.690653 env[1634]: time="2025-05-17T00:39:34.690507876Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 May 17 00:39:34.690653 env[1634]: time="2025-05-17T00:39:34.690540755Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 May 17 00:39:34.711057 env[1634]: time="2025-05-17T00:39:34.698937837Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/e394e15fec4ebf284bcb99b919e76853c0c1e2d5584f8e42edca15019c30a118 pid=4414 runtime=io.containerd.runc.v2 May 17 00:39:34.732522 env[1634]: time="2025-05-17T00:39:34.732466286Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-mnzbk,Uid:118f3b5b-8621-4b7e-aceb-6cf8623494e9,Namespace:kube-system,Attempt:1,} returns sandbox id \"6e76a72ee41e05f39214ca3623aa2997309cbc28e243632eccdf656ef2beb46d\"" May 17 00:39:34.762437 env[1634]: time="2025-05-17T00:39:34.762156745Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 May 17 00:39:34.762437 env[1634]: time="2025-05-17T00:39:34.762256021Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 May 17 00:39:34.762437 env[1634]: time="2025-05-17T00:39:34.762300571Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 May 17 00:39:34.762727 env[1634]: time="2025-05-17T00:39:34.762518588Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/99aeb3fbda4050d2676666f2321a05e9ce7cff436b677225230ee8d363a8f7b5 pid=4436 runtime=io.containerd.runc.v2 May 17 00:39:34.765022 env[1634]: time="2025-05-17T00:39:34.764911390Z" level=info msg="CreateContainer within sandbox \"6e76a72ee41e05f39214ca3623aa2997309cbc28e243632eccdf656ef2beb46d\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" May 17 00:39:34.774000 audit[4450]: NETFILTER_CFG table=filter:109 family=2 entries=44 op=nft_register_chain pid=4450 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" May 17 00:39:34.774000 audit[4450]: SYSCALL arch=c000003e syscall=46 success=yes exit=21952 a0=3 a1=7ffc0933fef0 a2=0 a3=7ffc0933fedc items=0 ppid=4000 pid=4450 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:34.774000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 May 17 00:39:34.804865 systemd[1]: Started cri-containerd-e394e15fec4ebf284bcb99b919e76853c0c1e2d5584f8e42edca15019c30a118.scope. May 17 00:39:34.834000 audit[4462]: NETFILTER_CFG table=filter:110 family=2 entries=49 op=nft_register_chain pid=4462 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" May 17 00:39:34.834000 audit[4462]: SYSCALL arch=c000003e syscall=46 success=yes exit=25452 a0=3 a1=7ffd72ebd150 a2=0 a3=7ffd72ebd13c items=0 ppid=4000 pid=4462 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:34.834000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 May 17 00:39:34.861939 env[1634]: time="2025-05-17T00:39:34.861885872Z" level=info msg="CreateContainer within sandbox \"6e76a72ee41e05f39214ca3623aa2997309cbc28e243632eccdf656ef2beb46d\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"1c5e3f4d9f741792c8298e69b580a7f395ad25e27200559e82e4b5de5d696507\"" May 17 00:39:34.863152 env[1634]: time="2025-05-17T00:39:34.863117437Z" level=info msg="StartContainer for \"1c5e3f4d9f741792c8298e69b580a7f395ad25e27200559e82e4b5de5d696507\"" May 17 00:39:34.888353 systemd[1]: Started cri-containerd-99aeb3fbda4050d2676666f2321a05e9ce7cff436b677225230ee8d363a8f7b5.scope. May 17 00:39:34.939434 sshd[4221]: pam_unix(sshd:session): session closed for user core May 17 00:39:34.941000 audit[4221]: USER_END pid=4221 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' May 17 00:39:34.941000 audit[4221]: CRED_DISP pid=4221 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' May 17 00:39:34.944000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-172.31.30.240:22-139.178.68.195:43038 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:39:34.944984 systemd[1]: sshd@7-172.31.30.240:22-139.178.68.195:43038.service: Deactivated successfully. May 17 00:39:34.946016 systemd[1]: session-8.scope: Deactivated successfully. May 17 00:39:34.950589 systemd-logind[1620]: Session 8 logged out. Waiting for processes to exit. May 17 00:39:34.952814 systemd-logind[1620]: Removed session 8. May 17 00:39:34.963000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:34.963000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:34.963000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:34.963000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:34.963000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:34.963000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:34.963000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:34.963000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:34.963000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:34.963000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:34.963000 audit: BPF prog-id=179 op=LOAD May 17 00:39:34.965000 audit[4459]: AVC avc: denied { bpf } for pid=4459 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:34.965000 audit[4459]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=4436 pid=4459 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:34.965000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3939616562336662646134303530643236373636363666323332316130 May 17 00:39:34.965000 audit[4459]: AVC avc: denied { perfmon } for pid=4459 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:34.965000 audit[4459]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=4436 pid=4459 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:34.965000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3939616562336662646134303530643236373636363666323332316130 May 17 00:39:34.966000 audit[4459]: AVC avc: denied { bpf } for pid=4459 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:34.966000 audit[4459]: AVC avc: denied { bpf } for pid=4459 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:34.966000 audit[4459]: AVC avc: denied { bpf } for pid=4459 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:34.966000 audit[4459]: AVC avc: denied { perfmon } for pid=4459 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:34.966000 audit[4459]: AVC avc: denied { perfmon } for pid=4459 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:34.966000 audit[4459]: AVC avc: denied { perfmon } for pid=4459 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:34.966000 audit[4459]: AVC avc: denied { perfmon } for pid=4459 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:34.966000 audit[4459]: AVC avc: denied { perfmon } for pid=4459 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:34.966000 audit[4459]: AVC avc: denied { bpf } for pid=4459 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:34.966000 audit[4459]: AVC avc: denied { bpf } for pid=4459 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:34.966000 audit: BPF prog-id=180 op=LOAD May 17 00:39:34.966000 audit[4459]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0001ded70 items=0 ppid=4436 pid=4459 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:34.966000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3939616562336662646134303530643236373636363666323332316130 May 17 00:39:34.967000 audit[4459]: AVC avc: denied { bpf } for pid=4459 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:34.967000 audit[4459]: AVC avc: denied { bpf } for pid=4459 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:34.967000 audit[4459]: AVC avc: denied { perfmon } for pid=4459 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:34.967000 audit[4459]: AVC avc: denied { perfmon } for pid=4459 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:34.967000 audit[4459]: AVC avc: denied { perfmon } for pid=4459 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:34.967000 audit[4459]: AVC avc: denied { perfmon } for pid=4459 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:34.967000 audit[4459]: AVC avc: denied { perfmon } for pid=4459 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:34.967000 audit[4459]: AVC avc: denied { bpf } for pid=4459 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:34.967000 audit[4459]: AVC avc: denied { bpf } for pid=4459 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:34.967000 audit: BPF prog-id=181 op=LOAD May 17 00:39:34.967000 audit[4459]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0001dedb8 items=0 ppid=4436 pid=4459 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:34.967000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3939616562336662646134303530643236373636363666323332316130 May 17 00:39:34.968000 audit: BPF prog-id=181 op=UNLOAD May 17 00:39:34.968000 audit: BPF prog-id=180 op=UNLOAD May 17 00:39:34.968000 audit[4459]: AVC avc: denied { bpf } for pid=4459 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:34.968000 audit[4459]: AVC avc: denied { bpf } for pid=4459 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:34.968000 audit[4459]: AVC avc: denied { bpf } for pid=4459 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:34.968000 audit[4459]: AVC avc: denied { perfmon } for pid=4459 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:34.968000 audit[4459]: AVC avc: denied { perfmon } for pid=4459 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:34.968000 audit[4459]: AVC avc: denied { perfmon } for pid=4459 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:34.968000 audit[4459]: AVC avc: denied { perfmon } for pid=4459 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:34.968000 audit[4459]: AVC avc: denied { perfmon } for pid=4459 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:34.968000 audit[4459]: AVC avc: denied { bpf } for pid=4459 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:34.968000 audit[4459]: AVC avc: denied { bpf } for pid=4459 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:34.968000 audit: BPF prog-id=182 op=LOAD May 17 00:39:34.968000 audit[4459]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0001df1c8 items=0 ppid=4436 pid=4459 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:34.968000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3939616562336662646134303530643236373636363666323332316130 May 17 00:39:34.987643 systemd[1]: Started cri-containerd-1c5e3f4d9f741792c8298e69b580a7f395ad25e27200559e82e4b5de5d696507.scope. May 17 00:39:35.029000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:35.029000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:35.029000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:35.029000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:35.029000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:35.029000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:35.029000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:35.029000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:35.029000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:35.029000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:35.029000 audit: BPF prog-id=183 op=LOAD May 17 00:39:35.039000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:35.039000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:35.039000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:35.039000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:35.039000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:35.039000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:35.039000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:35.039000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:35.039000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:35.039000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:35.039000 audit: BPF prog-id=184 op=LOAD May 17 00:39:35.040000 audit[4440]: AVC avc: denied { bpf } for pid=4440 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:35.041000 audit[4486]: AVC avc: denied { bpf } for pid=4486 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:35.040000 audit[4440]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=4414 pid=4440 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:35.040000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6533393465313566656334656266323834626362393962393139653736 May 17 00:39:35.041000 audit[4440]: AVC avc: denied { perfmon } for pid=4440 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:35.041000 audit[4440]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=c items=0 ppid=4414 pid=4440 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:35.041000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6533393465313566656334656266323834626362393962393139653736 May 17 00:39:35.042000 audit[4440]: AVC avc: denied { bpf } for pid=4440 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:35.042000 audit[4440]: AVC avc: denied { bpf } for pid=4440 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:35.042000 audit[4440]: AVC avc: denied { bpf } for pid=4440 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:35.042000 audit[4440]: AVC avc: denied { perfmon } for pid=4440 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:35.042000 audit[4440]: AVC avc: denied { perfmon } for pid=4440 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:35.042000 audit[4440]: AVC avc: denied { perfmon } for pid=4440 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:35.042000 audit[4440]: AVC avc: denied { perfmon } for pid=4440 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:35.042000 audit[4440]: AVC avc: denied { perfmon } for pid=4440 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:35.042000 audit[4440]: AVC avc: denied { bpf } for pid=4440 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:35.042000 audit[4440]: AVC avc: denied { bpf } for pid=4440 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:35.042000 audit: BPF prog-id=185 op=LOAD May 17 00:39:35.041000 audit[4486]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=4365 pid=4486 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:35.041000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3163356533663464396637343137393263383239386536396235383061 May 17 00:39:35.042000 audit[4440]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c0002fe7d0 items=0 ppid=4414 pid=4440 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:35.044000 audit[4486]: AVC avc: denied { perfmon } for pid=4486 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:35.042000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6533393465313566656334656266323834626362393962393139653736 May 17 00:39:35.044000 audit[4440]: AVC avc: denied { bpf } for pid=4440 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:35.044000 audit[4486]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=4365 pid=4486 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:35.044000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3163356533663464396637343137393263383239386536396235383061 May 17 00:39:35.045000 audit[4486]: AVC avc: denied { bpf } for pid=4486 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:35.045000 audit[4486]: AVC avc: denied { bpf } for pid=4486 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:35.044000 audit[4440]: AVC avc: denied { bpf } for pid=4440 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:35.044000 audit[4440]: AVC avc: denied { perfmon } for pid=4440 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:35.044000 audit[4440]: AVC avc: denied { perfmon } for pid=4440 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:35.044000 audit[4440]: AVC avc: denied { perfmon } for pid=4440 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:35.044000 audit[4440]: AVC avc: denied { perfmon } for pid=4440 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:35.044000 audit[4440]: AVC avc: denied { perfmon } for pid=4440 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:35.044000 audit[4440]: AVC avc: denied { bpf } for pid=4440 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:35.044000 audit[4440]: AVC avc: denied { bpf } for pid=4440 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:35.044000 audit: BPF prog-id=186 op=LOAD May 17 00:39:35.045000 audit[4486]: AVC avc: denied { bpf } for pid=4486 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:35.045000 audit[4486]: AVC avc: denied { perfmon } for pid=4486 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:35.045000 audit[4486]: AVC avc: denied { perfmon } for pid=4486 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:35.045000 audit[4486]: AVC avc: denied { perfmon } for pid=4486 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:35.045000 audit[4486]: AVC avc: denied { perfmon } for pid=4486 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:35.045000 audit[4486]: AVC avc: denied { perfmon } for pid=4486 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:35.045000 audit[4486]: AVC avc: denied { bpf } for pid=4486 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:35.045000 audit[4486]: AVC avc: denied { bpf } for pid=4486 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:35.045000 audit: BPF prog-id=187 op=LOAD May 17 00:39:35.044000 audit[4440]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c0002fe818 items=0 ppid=4414 pid=4440 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:35.044000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6533393465313566656334656266323834626362393962393139653736 May 17 00:39:35.045000 audit[4486]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c000228870 items=0 ppid=4365 pid=4486 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:35.047000 audit: BPF prog-id=186 op=UNLOAD May 17 00:39:35.045000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3163356533663464396637343137393263383239386536396235383061 May 17 00:39:35.047000 audit: BPF prog-id=185 op=UNLOAD May 17 00:39:35.047000 audit[4486]: AVC avc: denied { bpf } for pid=4486 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:35.048000 audit[4440]: AVC avc: denied { bpf } for pid=4440 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:35.048000 audit[4440]: AVC avc: denied { bpf } for pid=4440 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:35.047000 audit[4486]: AVC avc: denied { bpf } for pid=4486 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:35.047000 audit[4486]: AVC avc: denied { perfmon } for pid=4486 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:35.047000 audit[4486]: AVC avc: denied { perfmon } for pid=4486 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:35.047000 audit[4486]: AVC avc: denied { perfmon } for pid=4486 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:35.047000 audit[4486]: AVC avc: denied { perfmon } for pid=4486 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:35.047000 audit[4486]: AVC avc: denied { perfmon } for pid=4486 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:35.047000 audit[4486]: AVC avc: denied { bpf } for pid=4486 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:35.047000 audit[4486]: AVC avc: denied { bpf } for pid=4486 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:35.047000 audit: BPF prog-id=188 op=LOAD May 17 00:39:35.048000 audit[4440]: AVC avc: denied { bpf } for pid=4440 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:35.048000 audit[4440]: AVC avc: denied { perfmon } for pid=4440 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:35.048000 audit[4440]: AVC avc: denied { perfmon } for pid=4440 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:35.048000 audit[4440]: AVC avc: denied { perfmon } for pid=4440 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:35.048000 audit[4440]: AVC avc: denied { perfmon } for pid=4440 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:35.048000 audit[4440]: AVC avc: denied { perfmon } for pid=4440 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:35.048000 audit[4440]: AVC avc: denied { bpf } for pid=4440 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:35.047000 audit[4486]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0002288b8 items=0 ppid=4365 pid=4486 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:35.048000 audit[4440]: AVC avc: denied { bpf } for pid=4440 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:35.048000 audit: BPF prog-id=189 op=LOAD May 17 00:39:35.047000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3163356533663464396637343137393263383239386536396235383061 May 17 00:39:35.050000 audit: BPF prog-id=188 op=UNLOAD May 17 00:39:35.050000 audit: BPF prog-id=187 op=UNLOAD May 17 00:39:35.051000 audit[4486]: AVC avc: denied { bpf } for pid=4486 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:35.051000 audit[4486]: AVC avc: denied { bpf } for pid=4486 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:35.051000 audit[4486]: AVC avc: denied { bpf } for pid=4486 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:35.051000 audit[4486]: AVC avc: denied { perfmon } for pid=4486 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:35.051000 audit[4486]: AVC avc: denied { perfmon } for pid=4486 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:35.051000 audit[4486]: AVC avc: denied { perfmon } for pid=4486 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:35.051000 audit[4486]: AVC avc: denied { perfmon } for pid=4486 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:35.051000 audit[4486]: AVC avc: denied { perfmon } for pid=4486 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:35.051000 audit[4486]: AVC avc: denied { bpf } for pid=4486 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:35.051000 audit[4486]: AVC avc: denied { bpf } for pid=4486 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:35.051000 audit: BPF prog-id=190 op=LOAD May 17 00:39:35.048000 audit[4440]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c0002fec28 items=0 ppid=4414 pid=4440 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:35.048000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6533393465313566656334656266323834626362393962393139653736 May 17 00:39:35.051000 audit[4486]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c000228cc8 items=0 ppid=4365 pid=4486 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:35.051000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3163356533663464396637343137393263383239386536396235383061 May 17 00:39:35.116282 env[1634]: time="2025-05-17T00:39:35.116230309Z" level=info msg="StartContainer for \"1c5e3f4d9f741792c8298e69b580a7f395ad25e27200559e82e4b5de5d696507\" returns successfully" May 17 00:39:35.156855 env[1634]: time="2025-05-17T00:39:35.156788360Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-755c444ff4-j2rw2,Uid:dddc5262-e1f3-4b01-bd21-570d31a85d68,Namespace:calico-apiserver,Attempt:1,} returns sandbox id \"99aeb3fbda4050d2676666f2321a05e9ce7cff436b677225230ee8d363a8f7b5\"" May 17 00:39:35.246560 env[1634]: time="2025-05-17T00:39:35.243761815Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-557b5c79c9-mhmhq,Uid:71c21642-e990-4107-bf6c-cc0ea6307b30,Namespace:calico-system,Attempt:1,} returns sandbox id \"e394e15fec4ebf284bcb99b919e76853c0c1e2d5584f8e42edca15019c30a118\"" May 17 00:39:35.455656 env[1634]: time="2025-05-17T00:39:35.455608367Z" level=info msg="StopPodSandbox for \"2d982bb0c54d82a0eb9ac6679458b41ef0396c928f4b44e6521a8bc4eddb39ff\"" May 17 00:39:35.465615 env[1634]: time="2025-05-17T00:39:35.465562690Z" level=info msg="StopPodSandbox for \"6a80adfe9ae8a6c3e70d543cb6bf0e438152a46b17a0e937c0e216de0af8c0a1\"" May 17 00:39:35.466085 env[1634]: time="2025-05-17T00:39:35.466055338Z" level=info msg="StopPodSandbox for \"1a626d650958c81e04f69095e4a8fff83ff1db2e2f084819d7ce4818043c475a\"" May 17 00:39:35.683000 audit[4506]: AVC avc: denied { getattr } for pid=4506 comm="coredns" path="cgroup:[4026532721]" dev="nsfs" ino=4026532721 scontext=system_u:system_r:svirt_lxc_net_t:s0:c109,c439 tcontext=system_u:object_r:nsfs_t:s0 tclass=file permissive=0 May 17 00:39:35.683000 audit[4506]: SYSCALL arch=c000003e syscall=262 success=no exit=-13 a0=ffffffffffffff9c a1=c000236570 a2=c0004e8fa8 a3=0 items=0 ppid=4365 pid=4506 auid=4294967295 uid=65532 gid=65532 euid=65532 suid=65532 fsuid=65532 egid=65532 sgid=65532 fsgid=65532 tty=(none) ses=4294967295 comm="coredns" exe="/coredns" subj=system_u:system_r:svirt_lxc_net_t:s0:c109,c439 key=(null) May 17 00:39:35.683000 audit: PROCTITLE proctitle=2F636F7265646E73002D636F6E66002F6574632F636F7265646E732F436F726566696C65 May 17 00:39:35.753469 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3475268213.mount: Deactivated successfully. May 17 00:39:35.753597 systemd[1]: run-containerd-runc-k8s.io-e394e15fec4ebf284bcb99b919e76853c0c1e2d5584f8e42edca15019c30a118-runc.5hOxlb.mount: Deactivated successfully. May 17 00:39:35.787322 kubelet[2516]: I0517 00:39:35.783932 2516 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/coredns-674b8bbfcf-mnzbk" podStartSLOduration=43.783901544 podStartE2EDuration="43.783901544s" podCreationTimestamp="2025-05-17 00:38:52 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-05-17 00:39:35.783203858 +0000 UTC m=+47.653465069" watchObservedRunningTime="2025-05-17 00:39:35.783901544 +0000 UTC m=+47.654162762" May 17 00:39:35.878801 env[1634]: 2025-05-17 00:39:35.671 [INFO][4568] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="2d982bb0c54d82a0eb9ac6679458b41ef0396c928f4b44e6521a8bc4eddb39ff" May 17 00:39:35.878801 env[1634]: 2025-05-17 00:39:35.671 [INFO][4568] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="2d982bb0c54d82a0eb9ac6679458b41ef0396c928f4b44e6521a8bc4eddb39ff" iface="eth0" netns="/var/run/netns/cni-8b82ba6a-d8f7-e37f-ab5d-5e80b5d039f0" May 17 00:39:35.878801 env[1634]: 2025-05-17 00:39:35.672 [INFO][4568] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="2d982bb0c54d82a0eb9ac6679458b41ef0396c928f4b44e6521a8bc4eddb39ff" iface="eth0" netns="/var/run/netns/cni-8b82ba6a-d8f7-e37f-ab5d-5e80b5d039f0" May 17 00:39:35.878801 env[1634]: 2025-05-17 00:39:35.672 [INFO][4568] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="2d982bb0c54d82a0eb9ac6679458b41ef0396c928f4b44e6521a8bc4eddb39ff" iface="eth0" netns="/var/run/netns/cni-8b82ba6a-d8f7-e37f-ab5d-5e80b5d039f0" May 17 00:39:35.878801 env[1634]: 2025-05-17 00:39:35.672 [INFO][4568] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="2d982bb0c54d82a0eb9ac6679458b41ef0396c928f4b44e6521a8bc4eddb39ff" May 17 00:39:35.878801 env[1634]: 2025-05-17 00:39:35.672 [INFO][4568] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="2d982bb0c54d82a0eb9ac6679458b41ef0396c928f4b44e6521a8bc4eddb39ff" May 17 00:39:35.878801 env[1634]: 2025-05-17 00:39:35.833 [INFO][4583] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="2d982bb0c54d82a0eb9ac6679458b41ef0396c928f4b44e6521a8bc4eddb39ff" HandleID="k8s-pod-network.2d982bb0c54d82a0eb9ac6679458b41ef0396c928f4b44e6521a8bc4eddb39ff" Workload="ip--172--31--30--240-k8s-goldmane--78d55f7ddc--d97gj-eth0" May 17 00:39:35.878801 env[1634]: 2025-05-17 00:39:35.841 [INFO][4583] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. May 17 00:39:35.878801 env[1634]: 2025-05-17 00:39:35.842 [INFO][4583] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. May 17 00:39:35.878801 env[1634]: 2025-05-17 00:39:35.862 [WARNING][4583] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="2d982bb0c54d82a0eb9ac6679458b41ef0396c928f4b44e6521a8bc4eddb39ff" HandleID="k8s-pod-network.2d982bb0c54d82a0eb9ac6679458b41ef0396c928f4b44e6521a8bc4eddb39ff" Workload="ip--172--31--30--240-k8s-goldmane--78d55f7ddc--d97gj-eth0" May 17 00:39:35.878801 env[1634]: 2025-05-17 00:39:35.862 [INFO][4583] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="2d982bb0c54d82a0eb9ac6679458b41ef0396c928f4b44e6521a8bc4eddb39ff" HandleID="k8s-pod-network.2d982bb0c54d82a0eb9ac6679458b41ef0396c928f4b44e6521a8bc4eddb39ff" Workload="ip--172--31--30--240-k8s-goldmane--78d55f7ddc--d97gj-eth0" May 17 00:39:35.878801 env[1634]: 2025-05-17 00:39:35.866 [INFO][4583] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. May 17 00:39:35.878801 env[1634]: 2025-05-17 00:39:35.872 [INFO][4568] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="2d982bb0c54d82a0eb9ac6679458b41ef0396c928f4b44e6521a8bc4eddb39ff" May 17 00:39:35.885875 systemd[1]: run-netns-cni\x2d8b82ba6a\x2dd8f7\x2de37f\x2dab5d\x2d5e80b5d039f0.mount: Deactivated successfully. May 17 00:39:35.889444 env[1634]: time="2025-05-17T00:39:35.889395765Z" level=info msg="TearDown network for sandbox \"2d982bb0c54d82a0eb9ac6679458b41ef0396c928f4b44e6521a8bc4eddb39ff\" successfully" May 17 00:39:35.891021 env[1634]: time="2025-05-17T00:39:35.889551288Z" level=info msg="StopPodSandbox for \"2d982bb0c54d82a0eb9ac6679458b41ef0396c928f4b44e6521a8bc4eddb39ff\" returns successfully" May 17 00:39:35.891021 env[1634]: time="2025-05-17T00:39:35.890392387Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-78d55f7ddc-d97gj,Uid:3ebcad15-5d11-4ed3-b1bb-3bd7f1c5d1af,Namespace:calico-system,Attempt:1,}" May 17 00:39:35.901000 audit[4602]: NETFILTER_CFG table=filter:111 family=2 entries=20 op=nft_register_rule pid=4602 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" May 17 00:39:35.901000 audit[4602]: SYSCALL arch=c000003e syscall=46 success=yes exit=7480 a0=3 a1=7fff1050a1d0 a2=0 a3=7fff1050a1bc items=0 ppid=2660 pid=4602 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:35.901000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 May 17 00:39:35.906000 audit[4602]: NETFILTER_CFG table=nat:112 family=2 entries=14 op=nft_register_rule pid=4602 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" May 17 00:39:35.906000 audit[4602]: SYSCALL arch=c000003e syscall=46 success=yes exit=3468 a0=3 a1=7fff1050a1d0 a2=0 a3=0 items=0 ppid=2660 pid=4602 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:35.906000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 May 17 00:39:36.043756 env[1634]: 2025-05-17 00:39:35.824 [INFO][4573] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="1a626d650958c81e04f69095e4a8fff83ff1db2e2f084819d7ce4818043c475a" May 17 00:39:36.043756 env[1634]: 2025-05-17 00:39:35.824 [INFO][4573] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="1a626d650958c81e04f69095e4a8fff83ff1db2e2f084819d7ce4818043c475a" iface="eth0" netns="/var/run/netns/cni-06bb6714-8d72-60ed-ce5c-60d9fbfb62f4" May 17 00:39:36.043756 env[1634]: 2025-05-17 00:39:35.824 [INFO][4573] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="1a626d650958c81e04f69095e4a8fff83ff1db2e2f084819d7ce4818043c475a" iface="eth0" netns="/var/run/netns/cni-06bb6714-8d72-60ed-ce5c-60d9fbfb62f4" May 17 00:39:36.043756 env[1634]: 2025-05-17 00:39:35.825 [INFO][4573] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="1a626d650958c81e04f69095e4a8fff83ff1db2e2f084819d7ce4818043c475a" iface="eth0" netns="/var/run/netns/cni-06bb6714-8d72-60ed-ce5c-60d9fbfb62f4" May 17 00:39:36.043756 env[1634]: 2025-05-17 00:39:35.825 [INFO][4573] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="1a626d650958c81e04f69095e4a8fff83ff1db2e2f084819d7ce4818043c475a" May 17 00:39:36.043756 env[1634]: 2025-05-17 00:39:35.825 [INFO][4573] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="1a626d650958c81e04f69095e4a8fff83ff1db2e2f084819d7ce4818043c475a" May 17 00:39:36.043756 env[1634]: 2025-05-17 00:39:36.002 [INFO][4594] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="1a626d650958c81e04f69095e4a8fff83ff1db2e2f084819d7ce4818043c475a" HandleID="k8s-pod-network.1a626d650958c81e04f69095e4a8fff83ff1db2e2f084819d7ce4818043c475a" Workload="ip--172--31--30--240-k8s-coredns--674b8bbfcf--57lkx-eth0" May 17 00:39:36.043756 env[1634]: 2025-05-17 00:39:36.015 [INFO][4594] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. May 17 00:39:36.043756 env[1634]: 2025-05-17 00:39:36.015 [INFO][4594] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. May 17 00:39:36.043756 env[1634]: 2025-05-17 00:39:36.032 [WARNING][4594] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="1a626d650958c81e04f69095e4a8fff83ff1db2e2f084819d7ce4818043c475a" HandleID="k8s-pod-network.1a626d650958c81e04f69095e4a8fff83ff1db2e2f084819d7ce4818043c475a" Workload="ip--172--31--30--240-k8s-coredns--674b8bbfcf--57lkx-eth0" May 17 00:39:36.043756 env[1634]: 2025-05-17 00:39:36.032 [INFO][4594] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="1a626d650958c81e04f69095e4a8fff83ff1db2e2f084819d7ce4818043c475a" HandleID="k8s-pod-network.1a626d650958c81e04f69095e4a8fff83ff1db2e2f084819d7ce4818043c475a" Workload="ip--172--31--30--240-k8s-coredns--674b8bbfcf--57lkx-eth0" May 17 00:39:36.043756 env[1634]: 2025-05-17 00:39:36.035 [INFO][4594] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. May 17 00:39:36.043756 env[1634]: 2025-05-17 00:39:36.038 [INFO][4573] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="1a626d650958c81e04f69095e4a8fff83ff1db2e2f084819d7ce4818043c475a" May 17 00:39:36.052443 systemd[1]: run-netns-cni\x2d06bb6714\x2d8d72\x2d60ed\x2dce5c\x2d60d9fbfb62f4.mount: Deactivated successfully. May 17 00:39:36.053838 env[1634]: time="2025-05-17T00:39:36.053788376Z" level=info msg="TearDown network for sandbox \"1a626d650958c81e04f69095e4a8fff83ff1db2e2f084819d7ce4818043c475a\" successfully" May 17 00:39:36.053990 env[1634]: time="2025-05-17T00:39:36.053969742Z" level=info msg="StopPodSandbox for \"1a626d650958c81e04f69095e4a8fff83ff1db2e2f084819d7ce4818043c475a\" returns successfully" May 17 00:39:36.055098 env[1634]: time="2025-05-17T00:39:36.055062166Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-57lkx,Uid:16d78791-e942-48bb-9e38-9ea0ea348207,Namespace:kube-system,Attempt:1,}" May 17 00:39:36.061206 systemd-networkd[1360]: calib8fef7ddc3c: Gained IPv6LL May 17 00:39:36.158975 env[1634]: 2025-05-17 00:39:35.861 [INFO][4574] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="6a80adfe9ae8a6c3e70d543cb6bf0e438152a46b17a0e937c0e216de0af8c0a1" May 17 00:39:36.158975 env[1634]: 2025-05-17 00:39:35.862 [INFO][4574] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="6a80adfe9ae8a6c3e70d543cb6bf0e438152a46b17a0e937c0e216de0af8c0a1" iface="eth0" netns="/var/run/netns/cni-b89c5cf1-944d-de7f-8e75-cbce8bbe55a0" May 17 00:39:36.158975 env[1634]: 2025-05-17 00:39:35.862 [INFO][4574] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="6a80adfe9ae8a6c3e70d543cb6bf0e438152a46b17a0e937c0e216de0af8c0a1" iface="eth0" netns="/var/run/netns/cni-b89c5cf1-944d-de7f-8e75-cbce8bbe55a0" May 17 00:39:36.158975 env[1634]: 2025-05-17 00:39:35.862 [INFO][4574] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="6a80adfe9ae8a6c3e70d543cb6bf0e438152a46b17a0e937c0e216de0af8c0a1" iface="eth0" netns="/var/run/netns/cni-b89c5cf1-944d-de7f-8e75-cbce8bbe55a0" May 17 00:39:36.158975 env[1634]: 2025-05-17 00:39:35.862 [INFO][4574] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="6a80adfe9ae8a6c3e70d543cb6bf0e438152a46b17a0e937c0e216de0af8c0a1" May 17 00:39:36.158975 env[1634]: 2025-05-17 00:39:35.862 [INFO][4574] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="6a80adfe9ae8a6c3e70d543cb6bf0e438152a46b17a0e937c0e216de0af8c0a1" May 17 00:39:36.158975 env[1634]: 2025-05-17 00:39:36.094 [INFO][4601] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="6a80adfe9ae8a6c3e70d543cb6bf0e438152a46b17a0e937c0e216de0af8c0a1" HandleID="k8s-pod-network.6a80adfe9ae8a6c3e70d543cb6bf0e438152a46b17a0e937c0e216de0af8c0a1" Workload="ip--172--31--30--240-k8s-csi--node--driver--g8dpg-eth0" May 17 00:39:36.158975 env[1634]: 2025-05-17 00:39:36.094 [INFO][4601] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. May 17 00:39:36.158975 env[1634]: 2025-05-17 00:39:36.094 [INFO][4601] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. May 17 00:39:36.158975 env[1634]: 2025-05-17 00:39:36.137 [WARNING][4601] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="6a80adfe9ae8a6c3e70d543cb6bf0e438152a46b17a0e937c0e216de0af8c0a1" HandleID="k8s-pod-network.6a80adfe9ae8a6c3e70d543cb6bf0e438152a46b17a0e937c0e216de0af8c0a1" Workload="ip--172--31--30--240-k8s-csi--node--driver--g8dpg-eth0" May 17 00:39:36.158975 env[1634]: 2025-05-17 00:39:36.137 [INFO][4601] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="6a80adfe9ae8a6c3e70d543cb6bf0e438152a46b17a0e937c0e216de0af8c0a1" HandleID="k8s-pod-network.6a80adfe9ae8a6c3e70d543cb6bf0e438152a46b17a0e937c0e216de0af8c0a1" Workload="ip--172--31--30--240-k8s-csi--node--driver--g8dpg-eth0" May 17 00:39:36.158975 env[1634]: 2025-05-17 00:39:36.148 [INFO][4601] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. May 17 00:39:36.158975 env[1634]: 2025-05-17 00:39:36.150 [INFO][4574] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="6a80adfe9ae8a6c3e70d543cb6bf0e438152a46b17a0e937c0e216de0af8c0a1" May 17 00:39:36.159923 env[1634]: time="2025-05-17T00:39:36.159878552Z" level=info msg="TearDown network for sandbox \"6a80adfe9ae8a6c3e70d543cb6bf0e438152a46b17a0e937c0e216de0af8c0a1\" successfully" May 17 00:39:36.160037 env[1634]: time="2025-05-17T00:39:36.160013729Z" level=info msg="StopPodSandbox for \"6a80adfe9ae8a6c3e70d543cb6bf0e438152a46b17a0e937c0e216de0af8c0a1\" returns successfully" May 17 00:39:36.160931 env[1634]: time="2025-05-17T00:39:36.160899183Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-g8dpg,Uid:ccf5c16c-a554-4978-bf48-ec245cb3b696,Namespace:calico-system,Attempt:1,}" May 17 00:39:36.188667 systemd-networkd[1360]: cali583848cbf0c: Gained IPv6LL May 17 00:39:36.375298 systemd-networkd[1360]: cali958124fc6a9: Link UP May 17 00:39:36.378413 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready May 17 00:39:36.379610 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali958124fc6a9: link becomes ready May 17 00:39:36.378934 systemd-networkd[1360]: cali958124fc6a9: Gained carrier May 17 00:39:36.442360 systemd-networkd[1360]: calie6785d09ee3: Gained IPv6LL May 17 00:39:36.474073 env[1634]: 2025-05-17 00:39:36.109 [INFO][4607] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ip--172--31--30--240-k8s-goldmane--78d55f7ddc--d97gj-eth0 goldmane-78d55f7ddc- calico-system 3ebcad15-5d11-4ed3-b1bb-3bd7f1c5d1af 999 0 2025-05-17 00:39:07 +0000 UTC map[app.kubernetes.io/name:goldmane k8s-app:goldmane pod-template-hash:78d55f7ddc projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:goldmane] map[] [] [] []} {k8s ip-172-31-30-240 goldmane-78d55f7ddc-d97gj eth0 goldmane [] [] [kns.calico-system ksa.calico-system.goldmane] cali958124fc6a9 [] [] }} ContainerID="c5389b9734c0cad02d240507469d8521c76cf3330ae5f81cd6f1ef31ef6493e2" Namespace="calico-system" Pod="goldmane-78d55f7ddc-d97gj" WorkloadEndpoint="ip--172--31--30--240-k8s-goldmane--78d55f7ddc--d97gj-" May 17 00:39:36.474073 env[1634]: 2025-05-17 00:39:36.109 [INFO][4607] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="c5389b9734c0cad02d240507469d8521c76cf3330ae5f81cd6f1ef31ef6493e2" Namespace="calico-system" Pod="goldmane-78d55f7ddc-d97gj" WorkloadEndpoint="ip--172--31--30--240-k8s-goldmane--78d55f7ddc--d97gj-eth0" May 17 00:39:36.474073 env[1634]: 2025-05-17 00:39:36.212 [INFO][4638] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="c5389b9734c0cad02d240507469d8521c76cf3330ae5f81cd6f1ef31ef6493e2" HandleID="k8s-pod-network.c5389b9734c0cad02d240507469d8521c76cf3330ae5f81cd6f1ef31ef6493e2" Workload="ip--172--31--30--240-k8s-goldmane--78d55f7ddc--d97gj-eth0" May 17 00:39:36.474073 env[1634]: 2025-05-17 00:39:36.212 [INFO][4638] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="c5389b9734c0cad02d240507469d8521c76cf3330ae5f81cd6f1ef31ef6493e2" HandleID="k8s-pod-network.c5389b9734c0cad02d240507469d8521c76cf3330ae5f81cd6f1ef31ef6493e2" Workload="ip--172--31--30--240-k8s-goldmane--78d55f7ddc--d97gj-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0002ad4c0), Attrs:map[string]string{"namespace":"calico-system", "node":"ip-172-31-30-240", "pod":"goldmane-78d55f7ddc-d97gj", "timestamp":"2025-05-17 00:39:36.212426227 +0000 UTC"}, Hostname:"ip-172-31-30-240", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} May 17 00:39:36.474073 env[1634]: 2025-05-17 00:39:36.213 [INFO][4638] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. May 17 00:39:36.474073 env[1634]: 2025-05-17 00:39:36.213 [INFO][4638] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. May 17 00:39:36.474073 env[1634]: 2025-05-17 00:39:36.213 [INFO][4638] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ip-172-31-30-240' May 17 00:39:36.474073 env[1634]: 2025-05-17 00:39:36.243 [INFO][4638] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.c5389b9734c0cad02d240507469d8521c76cf3330ae5f81cd6f1ef31ef6493e2" host="ip-172-31-30-240" May 17 00:39:36.474073 env[1634]: 2025-05-17 00:39:36.280 [INFO][4638] ipam/ipam.go 394: Looking up existing affinities for host host="ip-172-31-30-240" May 17 00:39:36.474073 env[1634]: 2025-05-17 00:39:36.301 [INFO][4638] ipam/ipam.go 511: Trying affinity for 192.168.105.64/26 host="ip-172-31-30-240" May 17 00:39:36.474073 env[1634]: 2025-05-17 00:39:36.308 [INFO][4638] ipam/ipam.go 158: Attempting to load block cidr=192.168.105.64/26 host="ip-172-31-30-240" May 17 00:39:36.474073 env[1634]: 2025-05-17 00:39:36.320 [INFO][4638] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.105.64/26 host="ip-172-31-30-240" May 17 00:39:36.474073 env[1634]: 2025-05-17 00:39:36.320 [INFO][4638] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.105.64/26 handle="k8s-pod-network.c5389b9734c0cad02d240507469d8521c76cf3330ae5f81cd6f1ef31ef6493e2" host="ip-172-31-30-240" May 17 00:39:36.474073 env[1634]: 2025-05-17 00:39:36.323 [INFO][4638] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.c5389b9734c0cad02d240507469d8521c76cf3330ae5f81cd6f1ef31ef6493e2 May 17 00:39:36.474073 env[1634]: 2025-05-17 00:39:36.337 [INFO][4638] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.105.64/26 handle="k8s-pod-network.c5389b9734c0cad02d240507469d8521c76cf3330ae5f81cd6f1ef31ef6493e2" host="ip-172-31-30-240" May 17 00:39:36.474073 env[1634]: 2025-05-17 00:39:36.357 [INFO][4638] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.105.70/26] block=192.168.105.64/26 handle="k8s-pod-network.c5389b9734c0cad02d240507469d8521c76cf3330ae5f81cd6f1ef31ef6493e2" host="ip-172-31-30-240" May 17 00:39:36.474073 env[1634]: 2025-05-17 00:39:36.357 [INFO][4638] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.105.70/26] handle="k8s-pod-network.c5389b9734c0cad02d240507469d8521c76cf3330ae5f81cd6f1ef31ef6493e2" host="ip-172-31-30-240" May 17 00:39:36.474073 env[1634]: 2025-05-17 00:39:36.357 [INFO][4638] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. May 17 00:39:36.474073 env[1634]: 2025-05-17 00:39:36.357 [INFO][4638] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.105.70/26] IPv6=[] ContainerID="c5389b9734c0cad02d240507469d8521c76cf3330ae5f81cd6f1ef31ef6493e2" HandleID="k8s-pod-network.c5389b9734c0cad02d240507469d8521c76cf3330ae5f81cd6f1ef31ef6493e2" Workload="ip--172--31--30--240-k8s-goldmane--78d55f7ddc--d97gj-eth0" May 17 00:39:36.475821 env[1634]: 2025-05-17 00:39:36.363 [INFO][4607] cni-plugin/k8s.go 418: Populated endpoint ContainerID="c5389b9734c0cad02d240507469d8521c76cf3330ae5f81cd6f1ef31ef6493e2" Namespace="calico-system" Pod="goldmane-78d55f7ddc-d97gj" WorkloadEndpoint="ip--172--31--30--240-k8s-goldmane--78d55f7ddc--d97gj-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--30--240-k8s-goldmane--78d55f7ddc--d97gj-eth0", GenerateName:"goldmane-78d55f7ddc-", Namespace:"calico-system", SelfLink:"", UID:"3ebcad15-5d11-4ed3-b1bb-3bd7f1c5d1af", ResourceVersion:"999", Generation:0, CreationTimestamp:time.Date(2025, time.May, 17, 0, 39, 7, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"78d55f7ddc", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-30-240", ContainerID:"", Pod:"goldmane-78d55f7ddc-d97gj", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.105.70/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"cali958124fc6a9", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} May 17 00:39:36.475821 env[1634]: 2025-05-17 00:39:36.363 [INFO][4607] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.105.70/32] ContainerID="c5389b9734c0cad02d240507469d8521c76cf3330ae5f81cd6f1ef31ef6493e2" Namespace="calico-system" Pod="goldmane-78d55f7ddc-d97gj" WorkloadEndpoint="ip--172--31--30--240-k8s-goldmane--78d55f7ddc--d97gj-eth0" May 17 00:39:36.475821 env[1634]: 2025-05-17 00:39:36.363 [INFO][4607] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali958124fc6a9 ContainerID="c5389b9734c0cad02d240507469d8521c76cf3330ae5f81cd6f1ef31ef6493e2" Namespace="calico-system" Pod="goldmane-78d55f7ddc-d97gj" WorkloadEndpoint="ip--172--31--30--240-k8s-goldmane--78d55f7ddc--d97gj-eth0" May 17 00:39:36.475821 env[1634]: 2025-05-17 00:39:36.423 [INFO][4607] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="c5389b9734c0cad02d240507469d8521c76cf3330ae5f81cd6f1ef31ef6493e2" Namespace="calico-system" Pod="goldmane-78d55f7ddc-d97gj" WorkloadEndpoint="ip--172--31--30--240-k8s-goldmane--78d55f7ddc--d97gj-eth0" May 17 00:39:36.475821 env[1634]: 2025-05-17 00:39:36.424 [INFO][4607] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="c5389b9734c0cad02d240507469d8521c76cf3330ae5f81cd6f1ef31ef6493e2" Namespace="calico-system" Pod="goldmane-78d55f7ddc-d97gj" WorkloadEndpoint="ip--172--31--30--240-k8s-goldmane--78d55f7ddc--d97gj-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--30--240-k8s-goldmane--78d55f7ddc--d97gj-eth0", GenerateName:"goldmane-78d55f7ddc-", Namespace:"calico-system", SelfLink:"", UID:"3ebcad15-5d11-4ed3-b1bb-3bd7f1c5d1af", ResourceVersion:"999", Generation:0, CreationTimestamp:time.Date(2025, time.May, 17, 0, 39, 7, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"78d55f7ddc", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-30-240", ContainerID:"c5389b9734c0cad02d240507469d8521c76cf3330ae5f81cd6f1ef31ef6493e2", Pod:"goldmane-78d55f7ddc-d97gj", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.105.70/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"cali958124fc6a9", MAC:"7e:ab:25:6d:1a:2b", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} May 17 00:39:36.475821 env[1634]: 2025-05-17 00:39:36.469 [INFO][4607] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="c5389b9734c0cad02d240507469d8521c76cf3330ae5f81cd6f1ef31ef6493e2" Namespace="calico-system" Pod="goldmane-78d55f7ddc-d97gj" WorkloadEndpoint="ip--172--31--30--240-k8s-goldmane--78d55f7ddc--d97gj-eth0" May 17 00:39:36.524943 env[1634]: time="2025-05-17T00:39:36.524853934Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 May 17 00:39:36.525113 env[1634]: time="2025-05-17T00:39:36.524963778Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 May 17 00:39:36.525113 env[1634]: time="2025-05-17T00:39:36.524996612Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 May 17 00:39:36.525269 env[1634]: time="2025-05-17T00:39:36.525219440Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/c5389b9734c0cad02d240507469d8521c76cf3330ae5f81cd6f1ef31ef6493e2 pid=4690 runtime=io.containerd.runc.v2 May 17 00:39:36.541000 audit[4700]: NETFILTER_CFG table=filter:113 family=2 entries=60 op=nft_register_chain pid=4700 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" May 17 00:39:36.541000 audit[4700]: SYSCALL arch=c000003e syscall=46 success=yes exit=29932 a0=3 a1=7fffc3fe7ae0 a2=0 a3=7fffc3fe7acc items=0 ppid=4000 pid=4700 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:36.541000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 May 17 00:39:36.570901 systemd-networkd[1360]: cali69367080dbc: Link UP May 17 00:39:36.573159 systemd-networkd[1360]: cali69367080dbc: Gained carrier May 17 00:39:36.573902 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali69367080dbc: link becomes ready May 17 00:39:36.599753 systemd[1]: Started cri-containerd-c5389b9734c0cad02d240507469d8521c76cf3330ae5f81cd6f1ef31ef6493e2.scope. May 17 00:39:36.621881 env[1634]: 2025-05-17 00:39:36.310 [INFO][4643] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ip--172--31--30--240-k8s-csi--node--driver--g8dpg-eth0 csi-node-driver- calico-system ccf5c16c-a554-4978-bf48-ec245cb3b696 1005 0 2025-05-17 00:39:08 +0000 UTC map[app.kubernetes.io/name:csi-node-driver controller-revision-hash:78f6f74485 k8s-app:csi-node-driver name:csi-node-driver pod-template-generation:1 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:csi-node-driver] map[] [] [] []} {k8s ip-172-31-30-240 csi-node-driver-g8dpg eth0 csi-node-driver [] [] [kns.calico-system ksa.calico-system.csi-node-driver] cali69367080dbc [] [] }} ContainerID="2420f9d78e3421bf79b1429832b2e7215d57d0ddac779e2593254d2b33e2e967" Namespace="calico-system" Pod="csi-node-driver-g8dpg" WorkloadEndpoint="ip--172--31--30--240-k8s-csi--node--driver--g8dpg-" May 17 00:39:36.621881 env[1634]: 2025-05-17 00:39:36.310 [INFO][4643] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="2420f9d78e3421bf79b1429832b2e7215d57d0ddac779e2593254d2b33e2e967" Namespace="calico-system" Pod="csi-node-driver-g8dpg" WorkloadEndpoint="ip--172--31--30--240-k8s-csi--node--driver--g8dpg-eth0" May 17 00:39:36.621881 env[1634]: 2025-05-17 00:39:36.435 [INFO][4662] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="2420f9d78e3421bf79b1429832b2e7215d57d0ddac779e2593254d2b33e2e967" HandleID="k8s-pod-network.2420f9d78e3421bf79b1429832b2e7215d57d0ddac779e2593254d2b33e2e967" Workload="ip--172--31--30--240-k8s-csi--node--driver--g8dpg-eth0" May 17 00:39:36.621881 env[1634]: 2025-05-17 00:39:36.437 [INFO][4662] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="2420f9d78e3421bf79b1429832b2e7215d57d0ddac779e2593254d2b33e2e967" HandleID="k8s-pod-network.2420f9d78e3421bf79b1429832b2e7215d57d0ddac779e2593254d2b33e2e967" Workload="ip--172--31--30--240-k8s-csi--node--driver--g8dpg-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc00032a170), Attrs:map[string]string{"namespace":"calico-system", "node":"ip-172-31-30-240", "pod":"csi-node-driver-g8dpg", "timestamp":"2025-05-17 00:39:36.435560265 +0000 UTC"}, Hostname:"ip-172-31-30-240", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} May 17 00:39:36.621881 env[1634]: 2025-05-17 00:39:36.438 [INFO][4662] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. May 17 00:39:36.621881 env[1634]: 2025-05-17 00:39:36.438 [INFO][4662] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. May 17 00:39:36.621881 env[1634]: 2025-05-17 00:39:36.438 [INFO][4662] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ip-172-31-30-240' May 17 00:39:36.621881 env[1634]: 2025-05-17 00:39:36.478 [INFO][4662] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.2420f9d78e3421bf79b1429832b2e7215d57d0ddac779e2593254d2b33e2e967" host="ip-172-31-30-240" May 17 00:39:36.621881 env[1634]: 2025-05-17 00:39:36.491 [INFO][4662] ipam/ipam.go 394: Looking up existing affinities for host host="ip-172-31-30-240" May 17 00:39:36.621881 env[1634]: 2025-05-17 00:39:36.511 [INFO][4662] ipam/ipam.go 511: Trying affinity for 192.168.105.64/26 host="ip-172-31-30-240" May 17 00:39:36.621881 env[1634]: 2025-05-17 00:39:36.516 [INFO][4662] ipam/ipam.go 158: Attempting to load block cidr=192.168.105.64/26 host="ip-172-31-30-240" May 17 00:39:36.621881 env[1634]: 2025-05-17 00:39:36.519 [INFO][4662] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.105.64/26 host="ip-172-31-30-240" May 17 00:39:36.621881 env[1634]: 2025-05-17 00:39:36.519 [INFO][4662] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.105.64/26 handle="k8s-pod-network.2420f9d78e3421bf79b1429832b2e7215d57d0ddac779e2593254d2b33e2e967" host="ip-172-31-30-240" May 17 00:39:36.621881 env[1634]: 2025-05-17 00:39:36.524 [INFO][4662] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.2420f9d78e3421bf79b1429832b2e7215d57d0ddac779e2593254d2b33e2e967 May 17 00:39:36.621881 env[1634]: 2025-05-17 00:39:36.533 [INFO][4662] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.105.64/26 handle="k8s-pod-network.2420f9d78e3421bf79b1429832b2e7215d57d0ddac779e2593254d2b33e2e967" host="ip-172-31-30-240" May 17 00:39:36.621881 env[1634]: 2025-05-17 00:39:36.552 [INFO][4662] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.105.71/26] block=192.168.105.64/26 handle="k8s-pod-network.2420f9d78e3421bf79b1429832b2e7215d57d0ddac779e2593254d2b33e2e967" host="ip-172-31-30-240" May 17 00:39:36.621881 env[1634]: 2025-05-17 00:39:36.552 [INFO][4662] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.105.71/26] handle="k8s-pod-network.2420f9d78e3421bf79b1429832b2e7215d57d0ddac779e2593254d2b33e2e967" host="ip-172-31-30-240" May 17 00:39:36.621881 env[1634]: 2025-05-17 00:39:36.552 [INFO][4662] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. May 17 00:39:36.621881 env[1634]: 2025-05-17 00:39:36.552 [INFO][4662] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.105.71/26] IPv6=[] ContainerID="2420f9d78e3421bf79b1429832b2e7215d57d0ddac779e2593254d2b33e2e967" HandleID="k8s-pod-network.2420f9d78e3421bf79b1429832b2e7215d57d0ddac779e2593254d2b33e2e967" Workload="ip--172--31--30--240-k8s-csi--node--driver--g8dpg-eth0" May 17 00:39:36.623555 env[1634]: 2025-05-17 00:39:36.564 [INFO][4643] cni-plugin/k8s.go 418: Populated endpoint ContainerID="2420f9d78e3421bf79b1429832b2e7215d57d0ddac779e2593254d2b33e2e967" Namespace="calico-system" Pod="csi-node-driver-g8dpg" WorkloadEndpoint="ip--172--31--30--240-k8s-csi--node--driver--g8dpg-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--30--240-k8s-csi--node--driver--g8dpg-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"ccf5c16c-a554-4978-bf48-ec245cb3b696", ResourceVersion:"1005", Generation:0, CreationTimestamp:time.Date(2025, time.May, 17, 0, 39, 8, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"78f6f74485", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-30-240", ContainerID:"", Pod:"csi-node-driver-g8dpg", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.105.71/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali69367080dbc", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} May 17 00:39:36.623555 env[1634]: 2025-05-17 00:39:36.564 [INFO][4643] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.105.71/32] ContainerID="2420f9d78e3421bf79b1429832b2e7215d57d0ddac779e2593254d2b33e2e967" Namespace="calico-system" Pod="csi-node-driver-g8dpg" WorkloadEndpoint="ip--172--31--30--240-k8s-csi--node--driver--g8dpg-eth0" May 17 00:39:36.623555 env[1634]: 2025-05-17 00:39:36.564 [INFO][4643] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali69367080dbc ContainerID="2420f9d78e3421bf79b1429832b2e7215d57d0ddac779e2593254d2b33e2e967" Namespace="calico-system" Pod="csi-node-driver-g8dpg" WorkloadEndpoint="ip--172--31--30--240-k8s-csi--node--driver--g8dpg-eth0" May 17 00:39:36.623555 env[1634]: 2025-05-17 00:39:36.574 [INFO][4643] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="2420f9d78e3421bf79b1429832b2e7215d57d0ddac779e2593254d2b33e2e967" Namespace="calico-system" Pod="csi-node-driver-g8dpg" WorkloadEndpoint="ip--172--31--30--240-k8s-csi--node--driver--g8dpg-eth0" May 17 00:39:36.623555 env[1634]: 2025-05-17 00:39:36.574 [INFO][4643] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="2420f9d78e3421bf79b1429832b2e7215d57d0ddac779e2593254d2b33e2e967" Namespace="calico-system" Pod="csi-node-driver-g8dpg" WorkloadEndpoint="ip--172--31--30--240-k8s-csi--node--driver--g8dpg-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--30--240-k8s-csi--node--driver--g8dpg-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"ccf5c16c-a554-4978-bf48-ec245cb3b696", ResourceVersion:"1005", Generation:0, CreationTimestamp:time.Date(2025, time.May, 17, 0, 39, 8, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"78f6f74485", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-30-240", ContainerID:"2420f9d78e3421bf79b1429832b2e7215d57d0ddac779e2593254d2b33e2e967", Pod:"csi-node-driver-g8dpg", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.105.71/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali69367080dbc", MAC:"c6:8c:9f:24:4b:1e", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} May 17 00:39:36.623555 env[1634]: 2025-05-17 00:39:36.615 [INFO][4643] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="2420f9d78e3421bf79b1429832b2e7215d57d0ddac779e2593254d2b33e2e967" Namespace="calico-system" Pod="csi-node-driver-g8dpg" WorkloadEndpoint="ip--172--31--30--240-k8s-csi--node--driver--g8dpg-eth0" May 17 00:39:36.706062 env[1634]: time="2025-05-17T00:39:36.704615536Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 May 17 00:39:36.706506 env[1634]: time="2025-05-17T00:39:36.706416783Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 May 17 00:39:36.706739 env[1634]: time="2025-05-17T00:39:36.706696417Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 May 17 00:39:36.716662 env[1634]: time="2025-05-17T00:39:36.716551164Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/2420f9d78e3421bf79b1429832b2e7215d57d0ddac779e2593254d2b33e2e967 pid=4733 runtime=io.containerd.runc.v2 May 17 00:39:36.735727 systemd-networkd[1360]: cali30917f858f9: Link UP May 17 00:39:36.735000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:36.735000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:36.736000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:36.736000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:36.736000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:36.736000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:36.736000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:36.736000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:36.736000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:36.736000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:36.736000 audit: BPF prog-id=191 op=LOAD May 17 00:39:36.738000 audit[4702]: AVC avc: denied { bpf } for pid=4702 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:36.738000 audit[4702]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=4690 pid=4702 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:36.741253 systemd-networkd[1360]: cali30917f858f9: Gained carrier May 17 00:39:36.742953 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali30917f858f9: link becomes ready May 17 00:39:36.738000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6335333839623937333463306361643032643234303530373436396438 May 17 00:39:36.744000 audit[4702]: AVC avc: denied { perfmon } for pid=4702 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:36.744000 audit[4702]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=4690 pid=4702 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:36.744000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6335333839623937333463306361643032643234303530373436396438 May 17 00:39:36.745000 audit[4702]: AVC avc: denied { bpf } for pid=4702 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:36.745000 audit[4702]: AVC avc: denied { bpf } for pid=4702 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:36.745000 audit[4702]: AVC avc: denied { bpf } for pid=4702 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:36.745000 audit[4702]: AVC avc: denied { perfmon } for pid=4702 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:36.745000 audit[4702]: AVC avc: denied { perfmon } for pid=4702 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:36.745000 audit[4702]: AVC avc: denied { perfmon } for pid=4702 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:36.745000 audit[4702]: AVC avc: denied { perfmon } for pid=4702 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:36.745000 audit[4702]: AVC avc: denied { perfmon } for pid=4702 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:36.745000 audit[4702]: AVC avc: denied { bpf } for pid=4702 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:36.745000 audit[4702]: AVC avc: denied { bpf } for pid=4702 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:36.745000 audit: BPF prog-id=192 op=LOAD May 17 00:39:36.745000 audit[4702]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c000289350 items=0 ppid=4690 pid=4702 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:36.745000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6335333839623937333463306361643032643234303530373436396438 May 17 00:39:36.745000 audit[4702]: AVC avc: denied { bpf } for pid=4702 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:36.745000 audit[4702]: AVC avc: denied { bpf } for pid=4702 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:36.745000 audit[4702]: AVC avc: denied { perfmon } for pid=4702 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:36.745000 audit[4702]: AVC avc: denied { perfmon } for pid=4702 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:36.745000 audit[4702]: AVC avc: denied { perfmon } for pid=4702 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:36.745000 audit[4702]: AVC avc: denied { perfmon } for pid=4702 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:36.745000 audit[4702]: AVC avc: denied { perfmon } for pid=4702 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:36.745000 audit[4702]: AVC avc: denied { bpf } for pid=4702 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:36.745000 audit[4702]: AVC avc: denied { bpf } for pid=4702 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:36.745000 audit: BPF prog-id=193 op=LOAD May 17 00:39:36.745000 audit[4702]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c000289398 items=0 ppid=4690 pid=4702 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:36.745000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6335333839623937333463306361643032643234303530373436396438 May 17 00:39:36.745000 audit: BPF prog-id=193 op=UNLOAD May 17 00:39:36.745000 audit: BPF prog-id=192 op=UNLOAD May 17 00:39:36.745000 audit[4702]: AVC avc: denied { bpf } for pid=4702 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:36.745000 audit[4702]: AVC avc: denied { bpf } for pid=4702 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:36.745000 audit[4702]: AVC avc: denied { bpf } for pid=4702 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:36.745000 audit[4702]: AVC avc: denied { perfmon } for pid=4702 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:36.745000 audit[4702]: AVC avc: denied { perfmon } for pid=4702 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:36.745000 audit[4702]: AVC avc: denied { perfmon } for pid=4702 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:36.745000 audit[4702]: AVC avc: denied { perfmon } for pid=4702 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:36.745000 audit[4702]: AVC avc: denied { perfmon } for pid=4702 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:36.745000 audit[4702]: AVC avc: denied { bpf } for pid=4702 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:36.745000 audit[4702]: AVC avc: denied { bpf } for pid=4702 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:36.745000 audit: BPF prog-id=194 op=LOAD May 17 00:39:36.745000 audit[4702]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0002897a8 items=0 ppid=4690 pid=4702 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:36.745000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6335333839623937333463306361643032643234303530373436396438 May 17 00:39:36.754718 systemd[1]: run-netns-cni\x2db89c5cf1\x2d944d\x2dde7f\x2d8e75\x2dcbce8bbe55a0.mount: Deactivated successfully. May 17 00:39:36.773652 systemd[1]: Started cri-containerd-2420f9d78e3421bf79b1429832b2e7215d57d0ddac779e2593254d2b33e2e967.scope. May 17 00:39:36.802048 env[1634]: 2025-05-17 00:39:36.317 [INFO][4622] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ip--172--31--30--240-k8s-coredns--674b8bbfcf--57lkx-eth0 coredns-674b8bbfcf- kube-system 16d78791-e942-48bb-9e38-9ea0ea348207 1004 0 2025-05-17 00:38:52 +0000 UTC map[k8s-app:kube-dns pod-template-hash:674b8bbfcf projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s ip-172-31-30-240 coredns-674b8bbfcf-57lkx eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] cali30917f858f9 [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] [] }} ContainerID="b9932f88bb62792bb9bd27f14154de9c8a6e1ddbc8796e79271131210b1729d6" Namespace="kube-system" Pod="coredns-674b8bbfcf-57lkx" WorkloadEndpoint="ip--172--31--30--240-k8s-coredns--674b8bbfcf--57lkx-" May 17 00:39:36.802048 env[1634]: 2025-05-17 00:39:36.317 [INFO][4622] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="b9932f88bb62792bb9bd27f14154de9c8a6e1ddbc8796e79271131210b1729d6" Namespace="kube-system" Pod="coredns-674b8bbfcf-57lkx" WorkloadEndpoint="ip--172--31--30--240-k8s-coredns--674b8bbfcf--57lkx-eth0" May 17 00:39:36.802048 env[1634]: 2025-05-17 00:39:36.484 [INFO][4668] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="b9932f88bb62792bb9bd27f14154de9c8a6e1ddbc8796e79271131210b1729d6" HandleID="k8s-pod-network.b9932f88bb62792bb9bd27f14154de9c8a6e1ddbc8796e79271131210b1729d6" Workload="ip--172--31--30--240-k8s-coredns--674b8bbfcf--57lkx-eth0" May 17 00:39:36.802048 env[1634]: 2025-05-17 00:39:36.484 [INFO][4668] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="b9932f88bb62792bb9bd27f14154de9c8a6e1ddbc8796e79271131210b1729d6" HandleID="k8s-pod-network.b9932f88bb62792bb9bd27f14154de9c8a6e1ddbc8796e79271131210b1729d6" Workload="ip--172--31--30--240-k8s-coredns--674b8bbfcf--57lkx-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc000235b10), Attrs:map[string]string{"namespace":"kube-system", "node":"ip-172-31-30-240", "pod":"coredns-674b8bbfcf-57lkx", "timestamp":"2025-05-17 00:39:36.484007212 +0000 UTC"}, Hostname:"ip-172-31-30-240", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} May 17 00:39:36.802048 env[1634]: 2025-05-17 00:39:36.484 [INFO][4668] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. May 17 00:39:36.802048 env[1634]: 2025-05-17 00:39:36.554 [INFO][4668] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. May 17 00:39:36.802048 env[1634]: 2025-05-17 00:39:36.554 [INFO][4668] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ip-172-31-30-240' May 17 00:39:36.802048 env[1634]: 2025-05-17 00:39:36.624 [INFO][4668] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.b9932f88bb62792bb9bd27f14154de9c8a6e1ddbc8796e79271131210b1729d6" host="ip-172-31-30-240" May 17 00:39:36.802048 env[1634]: 2025-05-17 00:39:36.637 [INFO][4668] ipam/ipam.go 394: Looking up existing affinities for host host="ip-172-31-30-240" May 17 00:39:36.802048 env[1634]: 2025-05-17 00:39:36.646 [INFO][4668] ipam/ipam.go 511: Trying affinity for 192.168.105.64/26 host="ip-172-31-30-240" May 17 00:39:36.802048 env[1634]: 2025-05-17 00:39:36.649 [INFO][4668] ipam/ipam.go 158: Attempting to load block cidr=192.168.105.64/26 host="ip-172-31-30-240" May 17 00:39:36.802048 env[1634]: 2025-05-17 00:39:36.656 [INFO][4668] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.105.64/26 host="ip-172-31-30-240" May 17 00:39:36.802048 env[1634]: 2025-05-17 00:39:36.656 [INFO][4668] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.105.64/26 handle="k8s-pod-network.b9932f88bb62792bb9bd27f14154de9c8a6e1ddbc8796e79271131210b1729d6" host="ip-172-31-30-240" May 17 00:39:36.802048 env[1634]: 2025-05-17 00:39:36.661 [INFO][4668] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.b9932f88bb62792bb9bd27f14154de9c8a6e1ddbc8796e79271131210b1729d6 May 17 00:39:36.802048 env[1634]: 2025-05-17 00:39:36.678 [INFO][4668] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.105.64/26 handle="k8s-pod-network.b9932f88bb62792bb9bd27f14154de9c8a6e1ddbc8796e79271131210b1729d6" host="ip-172-31-30-240" May 17 00:39:36.802048 env[1634]: 2025-05-17 00:39:36.697 [INFO][4668] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.105.72/26] block=192.168.105.64/26 handle="k8s-pod-network.b9932f88bb62792bb9bd27f14154de9c8a6e1ddbc8796e79271131210b1729d6" host="ip-172-31-30-240" May 17 00:39:36.802048 env[1634]: 2025-05-17 00:39:36.697 [INFO][4668] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.105.72/26] handle="k8s-pod-network.b9932f88bb62792bb9bd27f14154de9c8a6e1ddbc8796e79271131210b1729d6" host="ip-172-31-30-240" May 17 00:39:36.802048 env[1634]: 2025-05-17 00:39:36.697 [INFO][4668] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. May 17 00:39:36.802048 env[1634]: 2025-05-17 00:39:36.697 [INFO][4668] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.105.72/26] IPv6=[] ContainerID="b9932f88bb62792bb9bd27f14154de9c8a6e1ddbc8796e79271131210b1729d6" HandleID="k8s-pod-network.b9932f88bb62792bb9bd27f14154de9c8a6e1ddbc8796e79271131210b1729d6" Workload="ip--172--31--30--240-k8s-coredns--674b8bbfcf--57lkx-eth0" May 17 00:39:36.803337 env[1634]: 2025-05-17 00:39:36.702 [INFO][4622] cni-plugin/k8s.go 418: Populated endpoint ContainerID="b9932f88bb62792bb9bd27f14154de9c8a6e1ddbc8796e79271131210b1729d6" Namespace="kube-system" Pod="coredns-674b8bbfcf-57lkx" WorkloadEndpoint="ip--172--31--30--240-k8s-coredns--674b8bbfcf--57lkx-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--30--240-k8s-coredns--674b8bbfcf--57lkx-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"16d78791-e942-48bb-9e38-9ea0ea348207", ResourceVersion:"1004", Generation:0, CreationTimestamp:time.Date(2025, time.May, 17, 0, 38, 52, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-30-240", ContainerID:"", Pod:"coredns-674b8bbfcf-57lkx", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.105.72/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali30917f858f9", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} May 17 00:39:36.803337 env[1634]: 2025-05-17 00:39:36.702 [INFO][4622] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.105.72/32] ContainerID="b9932f88bb62792bb9bd27f14154de9c8a6e1ddbc8796e79271131210b1729d6" Namespace="kube-system" Pod="coredns-674b8bbfcf-57lkx" WorkloadEndpoint="ip--172--31--30--240-k8s-coredns--674b8bbfcf--57lkx-eth0" May 17 00:39:36.803337 env[1634]: 2025-05-17 00:39:36.702 [INFO][4622] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali30917f858f9 ContainerID="b9932f88bb62792bb9bd27f14154de9c8a6e1ddbc8796e79271131210b1729d6" Namespace="kube-system" Pod="coredns-674b8bbfcf-57lkx" WorkloadEndpoint="ip--172--31--30--240-k8s-coredns--674b8bbfcf--57lkx-eth0" May 17 00:39:36.803337 env[1634]: 2025-05-17 00:39:36.746 [INFO][4622] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="b9932f88bb62792bb9bd27f14154de9c8a6e1ddbc8796e79271131210b1729d6" Namespace="kube-system" Pod="coredns-674b8bbfcf-57lkx" WorkloadEndpoint="ip--172--31--30--240-k8s-coredns--674b8bbfcf--57lkx-eth0" May 17 00:39:36.803337 env[1634]: 2025-05-17 00:39:36.746 [INFO][4622] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="b9932f88bb62792bb9bd27f14154de9c8a6e1ddbc8796e79271131210b1729d6" Namespace="kube-system" Pod="coredns-674b8bbfcf-57lkx" WorkloadEndpoint="ip--172--31--30--240-k8s-coredns--674b8bbfcf--57lkx-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--30--240-k8s-coredns--674b8bbfcf--57lkx-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"16d78791-e942-48bb-9e38-9ea0ea348207", ResourceVersion:"1004", Generation:0, CreationTimestamp:time.Date(2025, time.May, 17, 0, 38, 52, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-30-240", ContainerID:"b9932f88bb62792bb9bd27f14154de9c8a6e1ddbc8796e79271131210b1729d6", Pod:"coredns-674b8bbfcf-57lkx", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.105.72/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali30917f858f9", MAC:"ea:29:a2:dd:ce:4f", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} May 17 00:39:36.803337 env[1634]: 2025-05-17 00:39:36.797 [INFO][4622] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="b9932f88bb62792bb9bd27f14154de9c8a6e1ddbc8796e79271131210b1729d6" Namespace="kube-system" Pod="coredns-674b8bbfcf-57lkx" WorkloadEndpoint="ip--172--31--30--240-k8s-coredns--674b8bbfcf--57lkx-eth0" May 17 00:39:36.903835 env[1634]: time="2025-05-17T00:39:36.903731178Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-78d55f7ddc-d97gj,Uid:3ebcad15-5d11-4ed3-b1bb-3bd7f1c5d1af,Namespace:calico-system,Attempt:1,} returns sandbox id \"c5389b9734c0cad02d240507469d8521c76cf3330ae5f81cd6f1ef31ef6493e2\"" May 17 00:39:36.910120 env[1634]: time="2025-05-17T00:39:36.909965088Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 May 17 00:39:36.910381 env[1634]: time="2025-05-17T00:39:36.910344209Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 May 17 00:39:36.910581 env[1634]: time="2025-05-17T00:39:36.910554462Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 May 17 00:39:36.914346 env[1634]: time="2025-05-17T00:39:36.914285688Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/b9932f88bb62792bb9bd27f14154de9c8a6e1ddbc8796e79271131210b1729d6 pid=4775 runtime=io.containerd.runc.v2 May 17 00:39:36.915000 audit[4768]: NETFILTER_CFG table=filter:114 family=2 entries=56 op=nft_register_chain pid=4768 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" May 17 00:39:36.915000 audit[4768]: SYSCALL arch=c000003e syscall=46 success=yes exit=25516 a0=3 a1=7ffe48e991e0 a2=0 a3=7ffe48e991cc items=0 ppid=4000 pid=4768 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:36.915000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 May 17 00:39:36.928000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:36.928000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:36.928000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:36.928000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:36.928000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:36.929000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:36.929000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:36.929000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:36.929000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:36.929000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:36.929000 audit: BPF prog-id=195 op=LOAD May 17 00:39:36.930000 audit[4746]: AVC avc: denied { bpf } for pid=4746 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:36.930000 audit[4746]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=4733 pid=4746 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:36.930000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3234323066396437386533343231626637396231343239383332623265 May 17 00:39:36.930000 audit[4746]: AVC avc: denied { perfmon } for pid=4746 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:36.930000 audit[4746]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=4733 pid=4746 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:36.930000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3234323066396437386533343231626637396231343239383332623265 May 17 00:39:36.930000 audit[4746]: AVC avc: denied { bpf } for pid=4746 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:36.930000 audit[4746]: AVC avc: denied { bpf } for pid=4746 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:36.930000 audit[4746]: AVC avc: denied { bpf } for pid=4746 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:36.930000 audit[4746]: AVC avc: denied { perfmon } for pid=4746 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:36.930000 audit[4746]: AVC avc: denied { perfmon } for pid=4746 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:36.930000 audit[4746]: AVC avc: denied { perfmon } for pid=4746 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:36.930000 audit[4746]: AVC avc: denied { perfmon } for pid=4746 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:36.930000 audit[4746]: AVC avc: denied { perfmon } for pid=4746 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:36.930000 audit[4746]: AVC avc: denied { bpf } for pid=4746 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:36.930000 audit[4746]: AVC avc: denied { bpf } for pid=4746 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:36.930000 audit: BPF prog-id=196 op=LOAD May 17 00:39:36.930000 audit[4746]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c000185fb0 items=0 ppid=4733 pid=4746 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:36.930000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3234323066396437386533343231626637396231343239383332623265 May 17 00:39:36.930000 audit[4746]: AVC avc: denied { bpf } for pid=4746 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:36.930000 audit[4746]: AVC avc: denied { bpf } for pid=4746 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:36.930000 audit[4746]: AVC avc: denied { perfmon } for pid=4746 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:36.930000 audit[4746]: AVC avc: denied { perfmon } for pid=4746 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:36.930000 audit[4746]: AVC avc: denied { perfmon } for pid=4746 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:36.930000 audit[4746]: AVC avc: denied { perfmon } for pid=4746 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:36.930000 audit[4746]: AVC avc: denied { perfmon } for pid=4746 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:36.930000 audit[4746]: AVC avc: denied { bpf } for pid=4746 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:36.930000 audit[4746]: AVC avc: denied { bpf } for pid=4746 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:36.930000 audit: BPF prog-id=197 op=LOAD May 17 00:39:36.930000 audit[4746]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c000185ff8 items=0 ppid=4733 pid=4746 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:36.930000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3234323066396437386533343231626637396231343239383332623265 May 17 00:39:36.930000 audit: BPF prog-id=197 op=UNLOAD May 17 00:39:36.930000 audit: BPF prog-id=196 op=UNLOAD May 17 00:39:36.931000 audit[4746]: AVC avc: denied { bpf } for pid=4746 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:36.931000 audit[4746]: AVC avc: denied { bpf } for pid=4746 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:36.931000 audit[4746]: AVC avc: denied { bpf } for pid=4746 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:36.931000 audit[4746]: AVC avc: denied { perfmon } for pid=4746 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:36.931000 audit[4746]: AVC avc: denied { perfmon } for pid=4746 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:36.931000 audit[4746]: AVC avc: denied { perfmon } for pid=4746 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:36.931000 audit[4746]: AVC avc: denied { perfmon } for pid=4746 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:36.931000 audit[4746]: AVC avc: denied { perfmon } for pid=4746 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:36.931000 audit[4746]: AVC avc: denied { bpf } for pid=4746 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:36.931000 audit[4746]: AVC avc: denied { bpf } for pid=4746 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:36.931000 audit: BPF prog-id=198 op=LOAD May 17 00:39:36.931000 audit[4746]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0001c2408 items=0 ppid=4733 pid=4746 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:36.931000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3234323066396437386533343231626637396231343239383332623265 May 17 00:39:36.934000 audit[4792]: NETFILTER_CFG table=filter:115 family=2 entries=17 op=nft_register_rule pid=4792 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" May 17 00:39:36.934000 audit[4792]: SYSCALL arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7ffef25bf270 a2=0 a3=7ffef25bf25c items=0 ppid=2660 pid=4792 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:36.934000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 May 17 00:39:36.960000 audit[4792]: NETFILTER_CFG table=nat:116 family=2 entries=35 op=nft_register_chain pid=4792 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" May 17 00:39:36.960000 audit[4792]: SYSCALL arch=c000003e syscall=46 success=yes exit=14196 a0=3 a1=7ffef25bf270 a2=0 a3=7ffef25bf25c items=0 ppid=2660 pid=4792 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:36.960000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 May 17 00:39:36.995669 systemd[1]: Started cri-containerd-b9932f88bb62792bb9bd27f14154de9c8a6e1ddbc8796e79271131210b1729d6.scope. May 17 00:39:37.024410 env[1634]: time="2025-05-17T00:39:37.024358741Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-g8dpg,Uid:ccf5c16c-a554-4978-bf48-ec245cb3b696,Namespace:calico-system,Attempt:1,} returns sandbox id \"2420f9d78e3421bf79b1429832b2e7215d57d0ddac779e2593254d2b33e2e967\"" May 17 00:39:37.036000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:37.036000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:37.036000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:37.036000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:37.036000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:37.036000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:37.036000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:37.036000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:37.036000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:37.036000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:37.036000 audit: BPF prog-id=199 op=LOAD May 17 00:39:37.038000 audit[4791]: AVC avc: denied { bpf } for pid=4791 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:37.038000 audit[4791]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=4775 pid=4791 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:37.038000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6239393332663838626236323739326262396264323766313431353464 May 17 00:39:37.038000 audit[4791]: AVC avc: denied { perfmon } for pid=4791 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:37.038000 audit[4791]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=4775 pid=4791 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:37.038000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6239393332663838626236323739326262396264323766313431353464 May 17 00:39:37.038000 audit[4791]: AVC avc: denied { bpf } for pid=4791 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:37.038000 audit[4791]: AVC avc: denied { bpf } for pid=4791 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:37.038000 audit[4791]: AVC avc: denied { bpf } for pid=4791 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:37.038000 audit[4791]: AVC avc: denied { perfmon } for pid=4791 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:37.038000 audit[4791]: AVC avc: denied { perfmon } for pid=4791 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:37.038000 audit[4791]: AVC avc: denied { perfmon } for pid=4791 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:37.038000 audit[4791]: AVC avc: denied { perfmon } for pid=4791 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:37.038000 audit[4791]: AVC avc: denied { perfmon } for pid=4791 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:37.038000 audit[4791]: AVC avc: denied { bpf } for pid=4791 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:37.038000 audit[4791]: AVC avc: denied { bpf } for pid=4791 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:37.038000 audit: BPF prog-id=200 op=LOAD May 17 00:39:37.038000 audit[4791]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c00030b050 items=0 ppid=4775 pid=4791 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:37.038000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6239393332663838626236323739326262396264323766313431353464 May 17 00:39:37.039000 audit[4791]: AVC avc: denied { bpf } for pid=4791 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:37.039000 audit[4791]: AVC avc: denied { bpf } for pid=4791 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:37.039000 audit[4791]: AVC avc: denied { perfmon } for pid=4791 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:37.039000 audit[4791]: AVC avc: denied { perfmon } for pid=4791 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:37.039000 audit[4791]: AVC avc: denied { perfmon } for pid=4791 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:37.039000 audit[4791]: AVC avc: denied { perfmon } for pid=4791 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:37.039000 audit[4791]: AVC avc: denied { perfmon } for pid=4791 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:37.039000 audit[4791]: AVC avc: denied { bpf } for pid=4791 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:37.039000 audit[4791]: AVC avc: denied { bpf } for pid=4791 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:37.039000 audit: BPF prog-id=201 op=LOAD May 17 00:39:37.039000 audit[4791]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c00030b098 items=0 ppid=4775 pid=4791 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:37.039000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6239393332663838626236323739326262396264323766313431353464 May 17 00:39:37.041000 audit: BPF prog-id=201 op=UNLOAD May 17 00:39:37.041000 audit: BPF prog-id=200 op=UNLOAD May 17 00:39:37.041000 audit[4791]: AVC avc: denied { bpf } for pid=4791 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:37.041000 audit[4791]: AVC avc: denied { bpf } for pid=4791 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:37.041000 audit[4791]: AVC avc: denied { bpf } for pid=4791 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:37.041000 audit[4791]: AVC avc: denied { perfmon } for pid=4791 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:37.041000 audit[4791]: AVC avc: denied { perfmon } for pid=4791 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:37.041000 audit[4791]: AVC avc: denied { perfmon } for pid=4791 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:37.041000 audit[4791]: AVC avc: denied { perfmon } for pid=4791 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:37.041000 audit[4791]: AVC avc: denied { perfmon } for pid=4791 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:37.041000 audit[4791]: AVC avc: denied { bpf } for pid=4791 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:37.041000 audit[4791]: AVC avc: denied { bpf } for pid=4791 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:37.041000 audit: BPF prog-id=202 op=LOAD May 17 00:39:37.041000 audit[4791]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c00030b4a8 items=0 ppid=4775 pid=4791 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:37.041000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6239393332663838626236323739326262396264323766313431353464 May 17 00:39:37.103000 audit[4826]: NETFILTER_CFG table=filter:117 family=2 entries=56 op=nft_register_chain pid=4826 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" May 17 00:39:37.103000 audit[4826]: SYSCALL arch=c000003e syscall=46 success=yes exit=25096 a0=3 a1=7fff5f35cae0 a2=0 a3=7fff5f35cacc items=0 ppid=4000 pid=4826 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:37.103000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 May 17 00:39:37.108412 env[1634]: time="2025-05-17T00:39:37.108353291Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-57lkx,Uid:16d78791-e942-48bb-9e38-9ea0ea348207,Namespace:kube-system,Attempt:1,} returns sandbox id \"b9932f88bb62792bb9bd27f14154de9c8a6e1ddbc8796e79271131210b1729d6\"" May 17 00:39:37.122498 env[1634]: time="2025-05-17T00:39:37.122448367Z" level=info msg="CreateContainer within sandbox \"b9932f88bb62792bb9bd27f14154de9c8a6e1ddbc8796e79271131210b1729d6\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" May 17 00:39:37.149227 env[1634]: time="2025-05-17T00:39:37.149172376Z" level=info msg="CreateContainer within sandbox \"b9932f88bb62792bb9bd27f14154de9c8a6e1ddbc8796e79271131210b1729d6\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"f414a4967d2bddd80b9900acfc17a8c21bb4ff958b3189bc5a347e624a6b1672\"" May 17 00:39:37.150876 env[1634]: time="2025-05-17T00:39:37.149973515Z" level=info msg="StartContainer for \"f414a4967d2bddd80b9900acfc17a8c21bb4ff958b3189bc5a347e624a6b1672\"" May 17 00:39:37.183333 systemd[1]: Started cri-containerd-f414a4967d2bddd80b9900acfc17a8c21bb4ff958b3189bc5a347e624a6b1672.scope. May 17 00:39:37.204000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:37.204000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:37.204000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:37.204000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:37.204000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:37.204000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:37.204000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:37.204000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:37.204000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:37.204000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:37.204000 audit: BPF prog-id=203 op=LOAD May 17 00:39:37.207000 audit[4839]: AVC avc: denied { bpf } for pid=4839 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:37.207000 audit[4839]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bdc48 a2=10 a3=1c items=0 ppid=4775 pid=4839 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:37.207000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6634313461343936376432626464643830623939303061636663313761 May 17 00:39:37.207000 audit[4839]: AVC avc: denied { perfmon } for pid=4839 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:37.207000 audit[4839]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001bd6b0 a2=3c a3=8 items=0 ppid=4775 pid=4839 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:37.207000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6634313461343936376432626464643830623939303061636663313761 May 17 00:39:37.207000 audit[4839]: AVC avc: denied { bpf } for pid=4839 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:37.207000 audit[4839]: AVC avc: denied { bpf } for pid=4839 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:37.207000 audit[4839]: AVC avc: denied { bpf } for pid=4839 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:37.207000 audit[4839]: AVC avc: denied { perfmon } for pid=4839 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:37.207000 audit[4839]: AVC avc: denied { perfmon } for pid=4839 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:37.207000 audit[4839]: AVC avc: denied { perfmon } for pid=4839 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:37.207000 audit[4839]: AVC avc: denied { perfmon } for pid=4839 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:37.207000 audit[4839]: AVC avc: denied { perfmon } for pid=4839 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:37.207000 audit[4839]: AVC avc: denied { bpf } for pid=4839 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:37.207000 audit[4839]: AVC avc: denied { bpf } for pid=4839 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:37.207000 audit: BPF prog-id=204 op=LOAD May 17 00:39:37.207000 audit[4839]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bd9d8 a2=78 a3=c0000259a0 items=0 ppid=4775 pid=4839 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:37.207000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6634313461343936376432626464643830623939303061636663313761 May 17 00:39:37.207000 audit[4839]: AVC avc: denied { bpf } for pid=4839 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:37.207000 audit[4839]: AVC avc: denied { bpf } for pid=4839 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:37.207000 audit[4839]: AVC avc: denied { perfmon } for pid=4839 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:37.207000 audit[4839]: AVC avc: denied { perfmon } for pid=4839 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:37.207000 audit[4839]: AVC avc: denied { perfmon } for pid=4839 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:37.207000 audit[4839]: AVC avc: denied { perfmon } for pid=4839 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:37.207000 audit[4839]: AVC avc: denied { perfmon } for pid=4839 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:37.207000 audit[4839]: AVC avc: denied { bpf } for pid=4839 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:37.207000 audit[4839]: AVC avc: denied { bpf } for pid=4839 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:37.207000 audit: BPF prog-id=205 op=LOAD May 17 00:39:37.207000 audit[4839]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bd770 a2=78 a3=c0000259e8 items=0 ppid=4775 pid=4839 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:37.207000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6634313461343936376432626464643830623939303061636663313761 May 17 00:39:37.207000 audit: BPF prog-id=205 op=UNLOAD May 17 00:39:37.207000 audit: BPF prog-id=204 op=UNLOAD May 17 00:39:37.207000 audit[4839]: AVC avc: denied { bpf } for pid=4839 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:37.207000 audit[4839]: AVC avc: denied { bpf } for pid=4839 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:37.207000 audit[4839]: AVC avc: denied { bpf } for pid=4839 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:37.207000 audit[4839]: AVC avc: denied { perfmon } for pid=4839 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:37.207000 audit[4839]: AVC avc: denied { perfmon } for pid=4839 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:37.207000 audit[4839]: AVC avc: denied { perfmon } for pid=4839 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:37.207000 audit[4839]: AVC avc: denied { perfmon } for pid=4839 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:37.207000 audit[4839]: AVC avc: denied { perfmon } for pid=4839 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:37.207000 audit[4839]: AVC avc: denied { bpf } for pid=4839 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:37.207000 audit[4839]: AVC avc: denied { bpf } for pid=4839 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:37.207000 audit: BPF prog-id=206 op=LOAD May 17 00:39:37.207000 audit[4839]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bdc30 a2=78 a3=c000025df8 items=0 ppid=4775 pid=4839 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:37.207000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6634313461343936376432626464643830623939303061636663313761 May 17 00:39:37.240802 env[1634]: time="2025-05-17T00:39:37.240121868Z" level=info msg="StartContainer for \"f414a4967d2bddd80b9900acfc17a8c21bb4ff958b3189bc5a347e624a6b1672\" returns successfully" May 17 00:39:37.266000 audit[4849]: AVC avc: denied { getattr } for pid=4849 comm="coredns" path="cgroup:[4026532742]" dev="nsfs" ino=4026532742 scontext=system_u:system_r:svirt_lxc_net_t:s0:c531,c574 tcontext=system_u:object_r:nsfs_t:s0 tclass=file permissive=0 May 17 00:39:37.266000 audit[4849]: SYSCALL arch=c000003e syscall=262 success=no exit=-13 a0=ffffffffffffff9c a1=c00005a810 a2=c000499898 a3=0 items=0 ppid=4775 pid=4849 auid=4294967295 uid=65532 gid=65532 euid=65532 suid=65532 fsuid=65532 egid=65532 sgid=65532 fsgid=65532 tty=(none) ses=4294967295 comm="coredns" exe="/coredns" subj=system_u:system_r:svirt_lxc_net_t:s0:c531,c574 key=(null) May 17 00:39:37.266000 audit: PROCTITLE proctitle=2F636F7265646E73002D636F6E66002F6574632F636F7265646E732F436F726566696C65 May 17 00:39:37.529957 systemd-networkd[1360]: cali958124fc6a9: Gained IPv6LL May 17 00:39:37.891971 kubelet[2516]: I0517 00:39:37.886265 2516 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" May 17 00:39:37.899346 kubelet[2516]: I0517 00:39:37.899275 2516 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/coredns-674b8bbfcf-57lkx" podStartSLOduration=45.899249566 podStartE2EDuration="45.899249566s" podCreationTimestamp="2025-05-17 00:38:52 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-05-17 00:39:37.809456055 +0000 UTC m=+49.679717274" watchObservedRunningTime="2025-05-17 00:39:37.899249566 +0000 UTC m=+49.769510788" May 17 00:39:38.138050 systemd[1]: run-containerd-runc-k8s.io-e777fb60a0010b29124aa0b04a8472137dd90de26b131c07332bc276b5846713-runc.z3oAy7.mount: Deactivated successfully. May 17 00:39:38.141000 audit[4871]: NETFILTER_CFG table=filter:118 family=2 entries=14 op=nft_register_rule pid=4871 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" May 17 00:39:38.143372 kernel: kauditd_printk_skb: 553 callbacks suppressed May 17 00:39:38.144244 kernel: audit: type=1325 audit(1747442378.141:1285): table=filter:118 family=2 entries=14 op=nft_register_rule pid=4871 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" May 17 00:39:38.141000 audit[4871]: SYSCALL arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7fff8be269a0 a2=0 a3=7fff8be2698c items=0 ppid=2660 pid=4871 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:38.141000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 May 17 00:39:38.176271 kernel: audit: type=1300 audit(1747442378.141:1285): arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7fff8be269a0 a2=0 a3=7fff8be2698c items=0 ppid=2660 pid=4871 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:38.176360 kernel: audit: type=1327 audit(1747442378.141:1285): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 May 17 00:39:38.204000 audit[4871]: NETFILTER_CFG table=nat:119 family=2 entries=44 op=nft_register_rule pid=4871 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" May 17 00:39:38.213086 kernel: audit: type=1325 audit(1747442378.204:1286): table=nat:119 family=2 entries=44 op=nft_register_rule pid=4871 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" May 17 00:39:38.213215 kernel: audit: type=1300 audit(1747442378.204:1286): arch=c000003e syscall=46 success=yes exit=14196 a0=3 a1=7fff8be269a0 a2=0 a3=7fff8be2698c items=0 ppid=2660 pid=4871 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:38.204000 audit[4871]: SYSCALL arch=c000003e syscall=46 success=yes exit=14196 a0=3 a1=7fff8be269a0 a2=0 a3=7fff8be2698c items=0 ppid=2660 pid=4871 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:38.204000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 May 17 00:39:38.228820 kernel: audit: type=1327 audit(1747442378.204:1286): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 May 17 00:39:38.235909 systemd-networkd[1360]: cali69367080dbc: Gained IPv6LL May 17 00:39:38.282000 audit[4889]: NETFILTER_CFG table=filter:120 family=2 entries=14 op=nft_register_rule pid=4889 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" May 17 00:39:38.291762 kernel: audit: type=1325 audit(1747442378.282:1287): table=filter:120 family=2 entries=14 op=nft_register_rule pid=4889 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" May 17 00:39:38.292329 kernel: audit: type=1300 audit(1747442378.282:1287): arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7ffe8f848bd0 a2=0 a3=7ffe8f848bbc items=0 ppid=2660 pid=4889 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:38.282000 audit[4889]: SYSCALL arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7ffe8f848bd0 a2=0 a3=7ffe8f848bbc items=0 ppid=2660 pid=4889 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:38.282000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 May 17 00:39:38.296119 kernel: audit: type=1327 audit(1747442378.282:1287): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 May 17 00:39:38.298313 systemd-networkd[1360]: cali30917f858f9: Gained IPv6LL May 17 00:39:38.340000 audit[4889]: NETFILTER_CFG table=nat:121 family=2 entries=56 op=nft_register_chain pid=4889 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" May 17 00:39:38.344867 kernel: audit: type=1325 audit(1747442378.340:1288): table=nat:121 family=2 entries=56 op=nft_register_chain pid=4889 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" May 17 00:39:38.340000 audit[4889]: SYSCALL arch=c000003e syscall=46 success=yes exit=19860 a0=3 a1=7ffe8f848bd0 a2=0 a3=7ffe8f848bbc items=0 ppid=2660 pid=4889 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:38.340000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 May 17 00:39:38.493817 env[1634]: time="2025-05-17T00:39:38.492838833Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" May 17 00:39:38.499085 env[1634]: time="2025-05-17T00:39:38.499043967Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:5fa544b30bbe7e24458b21b80890f8834eebe8bcb99071f6caded1a39fc59082,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" May 17 00:39:38.503748 env[1634]: time="2025-05-17T00:39:38.503709152Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" May 17 00:39:38.509484 env[1634]: time="2025-05-17T00:39:38.509436008Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/apiserver@sha256:ad7d2e76f15777636c5d91c108d7655659b38fe8970255050ffa51223eb96ff4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" May 17 00:39:38.510678 env[1634]: time="2025-05-17T00:39:38.510617118Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.0\" returns image reference \"sha256:5fa544b30bbe7e24458b21b80890f8834eebe8bcb99071f6caded1a39fc59082\"" May 17 00:39:38.524067 env[1634]: time="2025-05-17T00:39:38.524022512Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.0\"" May 17 00:39:38.564039 env[1634]: time="2025-05-17T00:39:38.563876571Z" level=info msg="CreateContainer within sandbox \"8d868d9c3e4b77b85d1efa7c4bcfdabecb4bf2e61a058f8dd84ec4feaf296d67\" for container &ContainerMetadata{Name:calico-apiserver,Attempt:0,}" May 17 00:39:38.596485 env[1634]: time="2025-05-17T00:39:38.596437283Z" level=info msg="CreateContainer within sandbox \"8d868d9c3e4b77b85d1efa7c4bcfdabecb4bf2e61a058f8dd84ec4feaf296d67\" for &ContainerMetadata{Name:calico-apiserver,Attempt:0,} returns container id \"de1a7a162ac313d87fae3e4943da037d5e6a89782dec6568eb453d69dff0d973\"" May 17 00:39:38.597739 env[1634]: time="2025-05-17T00:39:38.597706277Z" level=info msg="StartContainer for \"de1a7a162ac313d87fae3e4943da037d5e6a89782dec6568eb453d69dff0d973\"" May 17 00:39:38.650732 systemd[1]: Started cri-containerd-de1a7a162ac313d87fae3e4943da037d5e6a89782dec6568eb453d69dff0d973.scope. May 17 00:39:38.725000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:38.725000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:38.725000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:38.725000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:38.725000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:38.725000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:38.725000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:38.725000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:38.725000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:38.725000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:38.725000 audit: BPF prog-id=207 op=LOAD May 17 00:39:38.726000 audit[4902]: AVC avc: denied { bpf } for pid=4902 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:38.726000 audit[4902]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=4171 pid=4902 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:38.726000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6465316137613136326163333133643837666165336534393433646130 May 17 00:39:38.726000 audit[4902]: AVC avc: denied { perfmon } for pid=4902 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:38.726000 audit[4902]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=4171 pid=4902 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:38.726000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6465316137613136326163333133643837666165336534393433646130 May 17 00:39:38.726000 audit[4902]: AVC avc: denied { bpf } for pid=4902 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:38.726000 audit[4902]: AVC avc: denied { bpf } for pid=4902 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:38.726000 audit[4902]: AVC avc: denied { bpf } for pid=4902 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:38.726000 audit[4902]: AVC avc: denied { perfmon } for pid=4902 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:38.726000 audit[4902]: AVC avc: denied { perfmon } for pid=4902 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:38.726000 audit[4902]: AVC avc: denied { perfmon } for pid=4902 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:38.726000 audit[4902]: AVC avc: denied { perfmon } for pid=4902 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:38.726000 audit[4902]: AVC avc: denied { perfmon } for pid=4902 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:38.726000 audit[4902]: AVC avc: denied { bpf } for pid=4902 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:38.726000 audit[4902]: AVC avc: denied { bpf } for pid=4902 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:38.726000 audit: BPF prog-id=208 op=LOAD May 17 00:39:38.726000 audit[4902]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c000287690 items=0 ppid=4171 pid=4902 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:38.726000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6465316137613136326163333133643837666165336534393433646130 May 17 00:39:38.726000 audit[4902]: AVC avc: denied { bpf } for pid=4902 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:38.726000 audit[4902]: AVC avc: denied { bpf } for pid=4902 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:38.726000 audit[4902]: AVC avc: denied { perfmon } for pid=4902 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:38.726000 audit[4902]: AVC avc: denied { perfmon } for pid=4902 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:38.726000 audit[4902]: AVC avc: denied { perfmon } for pid=4902 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:38.726000 audit[4902]: AVC avc: denied { perfmon } for pid=4902 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:38.726000 audit[4902]: AVC avc: denied { perfmon } for pid=4902 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:38.726000 audit[4902]: AVC avc: denied { bpf } for pid=4902 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:38.726000 audit[4902]: AVC avc: denied { bpf } for pid=4902 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:38.726000 audit: BPF prog-id=209 op=LOAD May 17 00:39:38.726000 audit[4902]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0002876d8 items=0 ppid=4171 pid=4902 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:38.726000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6465316137613136326163333133643837666165336534393433646130 May 17 00:39:38.727000 audit: BPF prog-id=209 op=UNLOAD May 17 00:39:38.728000 audit: BPF prog-id=208 op=UNLOAD May 17 00:39:38.728000 audit[4902]: AVC avc: denied { bpf } for pid=4902 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:38.728000 audit[4902]: AVC avc: denied { bpf } for pid=4902 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:38.728000 audit[4902]: AVC avc: denied { bpf } for pid=4902 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:38.728000 audit[4902]: AVC avc: denied { perfmon } for pid=4902 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:38.728000 audit[4902]: AVC avc: denied { perfmon } for pid=4902 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:38.728000 audit[4902]: AVC avc: denied { perfmon } for pid=4902 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:38.728000 audit[4902]: AVC avc: denied { perfmon } for pid=4902 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:38.728000 audit[4902]: AVC avc: denied { perfmon } for pid=4902 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:38.728000 audit[4902]: AVC avc: denied { bpf } for pid=4902 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:38.728000 audit[4902]: AVC avc: denied { bpf } for pid=4902 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:38.728000 audit: BPF prog-id=210 op=LOAD May 17 00:39:38.728000 audit[4902]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c000287ae8 items=0 ppid=4171 pid=4902 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:38.728000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6465316137613136326163333133643837666165336534393433646130 May 17 00:39:38.750497 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount913169554.mount: Deactivated successfully. May 17 00:39:38.815128 env[1634]: time="2025-05-17T00:39:38.815043210Z" level=info msg="StartContainer for \"de1a7a162ac313d87fae3e4943da037d5e6a89782dec6568eb453d69dff0d973\" returns successfully" May 17 00:39:39.018184 env[1634]: time="2025-05-17T00:39:39.016848419Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" May 17 00:39:39.022052 env[1634]: time="2025-05-17T00:39:39.022009338Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:5fa544b30bbe7e24458b21b80890f8834eebe8bcb99071f6caded1a39fc59082,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" May 17 00:39:39.030642 env[1634]: time="2025-05-17T00:39:39.030596282Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" May 17 00:39:39.033572 env[1634]: time="2025-05-17T00:39:39.033530749Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver@sha256:ad7d2e76f15777636c5d91c108d7655659b38fe8970255050ffa51223eb96ff4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" May 17 00:39:39.034387 env[1634]: time="2025-05-17T00:39:39.034343390Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.0\" returns image reference \"sha256:5fa544b30bbe7e24458b21b80890f8834eebe8bcb99071f6caded1a39fc59082\"" May 17 00:39:39.036312 env[1634]: time="2025-05-17T00:39:39.036022206Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.0\"" May 17 00:39:39.041567 env[1634]: time="2025-05-17T00:39:39.041521102Z" level=info msg="CreateContainer within sandbox \"99aeb3fbda4050d2676666f2321a05e9ce7cff436b677225230ee8d363a8f7b5\" for container &ContainerMetadata{Name:calico-apiserver,Attempt:0,}" May 17 00:39:39.078552 env[1634]: time="2025-05-17T00:39:39.078484796Z" level=info msg="CreateContainer within sandbox \"99aeb3fbda4050d2676666f2321a05e9ce7cff436b677225230ee8d363a8f7b5\" for &ContainerMetadata{Name:calico-apiserver,Attempt:0,} returns container id \"bbb121baabc95d8fd4fa2db29de32afd0cdac80d1ad83be6f2bff46cf0c0dc08\"" May 17 00:39:39.079535 env[1634]: time="2025-05-17T00:39:39.079504111Z" level=info msg="StartContainer for \"bbb121baabc95d8fd4fa2db29de32afd0cdac80d1ad83be6f2bff46cf0c0dc08\"" May 17 00:39:39.105945 systemd[1]: Started cri-containerd-bbb121baabc95d8fd4fa2db29de32afd0cdac80d1ad83be6f2bff46cf0c0dc08.scope. May 17 00:39:39.121000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:39.121000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:39.121000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:39.121000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:39.121000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:39.121000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:39.121000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:39.121000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:39.121000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:39.122000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:39.122000 audit: BPF prog-id=211 op=LOAD May 17 00:39:39.122000 audit[4957]: AVC avc: denied { bpf } for pid=4957 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:39.122000 audit[4957]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=4436 pid=4957 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:39.122000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6262623132316261616263393564386664346661326462323964653332 May 17 00:39:39.122000 audit[4957]: AVC avc: denied { perfmon } for pid=4957 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:39.122000 audit[4957]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=4436 pid=4957 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:39.122000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6262623132316261616263393564386664346661326462323964653332 May 17 00:39:39.122000 audit[4957]: AVC avc: denied { bpf } for pid=4957 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:39.122000 audit[4957]: AVC avc: denied { bpf } for pid=4957 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:39.122000 audit[4957]: AVC avc: denied { bpf } for pid=4957 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:39.122000 audit[4957]: AVC avc: denied { perfmon } for pid=4957 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:39.122000 audit[4957]: AVC avc: denied { perfmon } for pid=4957 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:39.122000 audit[4957]: AVC avc: denied { perfmon } for pid=4957 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:39.122000 audit[4957]: AVC avc: denied { perfmon } for pid=4957 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:39.122000 audit[4957]: AVC avc: denied { perfmon } for pid=4957 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:39.122000 audit[4957]: AVC avc: denied { bpf } for pid=4957 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:39.122000 audit[4957]: AVC avc: denied { bpf } for pid=4957 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:39.122000 audit: BPF prog-id=212 op=LOAD May 17 00:39:39.122000 audit[4957]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c000094ee0 items=0 ppid=4436 pid=4957 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:39.122000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6262623132316261616263393564386664346661326462323964653332 May 17 00:39:39.122000 audit[4957]: AVC avc: denied { bpf } for pid=4957 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:39.122000 audit[4957]: AVC avc: denied { bpf } for pid=4957 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:39.122000 audit[4957]: AVC avc: denied { perfmon } for pid=4957 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:39.122000 audit[4957]: AVC avc: denied { perfmon } for pid=4957 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:39.122000 audit[4957]: AVC avc: denied { perfmon } for pid=4957 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:39.122000 audit[4957]: AVC avc: denied { perfmon } for pid=4957 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:39.122000 audit[4957]: AVC avc: denied { perfmon } for pid=4957 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:39.122000 audit[4957]: AVC avc: denied { bpf } for pid=4957 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:39.122000 audit[4957]: AVC avc: denied { bpf } for pid=4957 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:39.122000 audit: BPF prog-id=213 op=LOAD May 17 00:39:39.122000 audit[4957]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c000094f28 items=0 ppid=4436 pid=4957 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:39.122000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6262623132316261616263393564386664346661326462323964653332 May 17 00:39:39.122000 audit: BPF prog-id=213 op=UNLOAD May 17 00:39:39.122000 audit: BPF prog-id=212 op=UNLOAD May 17 00:39:39.122000 audit[4957]: AVC avc: denied { bpf } for pid=4957 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:39.122000 audit[4957]: AVC avc: denied { bpf } for pid=4957 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:39.122000 audit[4957]: AVC avc: denied { bpf } for pid=4957 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:39.122000 audit[4957]: AVC avc: denied { perfmon } for pid=4957 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:39.122000 audit[4957]: AVC avc: denied { perfmon } for pid=4957 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:39.122000 audit[4957]: AVC avc: denied { perfmon } for pid=4957 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:39.122000 audit[4957]: AVC avc: denied { perfmon } for pid=4957 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:39.122000 audit[4957]: AVC avc: denied { perfmon } for pid=4957 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:39.122000 audit[4957]: AVC avc: denied { bpf } for pid=4957 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:39.122000 audit[4957]: AVC avc: denied { bpf } for pid=4957 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:39.122000 audit: BPF prog-id=214 op=LOAD May 17 00:39:39.122000 audit[4957]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c000095338 items=0 ppid=4436 pid=4957 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:39.122000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6262623132316261616263393564386664346661326462323964653332 May 17 00:39:39.159420 env[1634]: time="2025-05-17T00:39:39.159378258Z" level=info msg="StartContainer for \"bbb121baabc95d8fd4fa2db29de32afd0cdac80d1ad83be6f2bff46cf0c0dc08\" returns successfully" May 17 00:39:39.824916 kubelet[2516]: I0517 00:39:39.824842 2516 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-apiserver/calico-apiserver-755c444ff4-j2rw2" podStartSLOduration=32.949347024 podStartE2EDuration="36.822091437s" podCreationTimestamp="2025-05-17 00:39:03 +0000 UTC" firstStartedPulling="2025-05-17 00:39:35.162977378 +0000 UTC m=+47.033238588" lastFinishedPulling="2025-05-17 00:39:39.035721794 +0000 UTC m=+50.905983001" observedRunningTime="2025-05-17 00:39:39.798253489 +0000 UTC m=+51.668514708" watchObservedRunningTime="2025-05-17 00:39:39.822091437 +0000 UTC m=+51.692352654" May 17 00:39:39.854000 audit[4991]: NETFILTER_CFG table=filter:122 family=2 entries=14 op=nft_register_rule pid=4991 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" May 17 00:39:39.854000 audit[4991]: SYSCALL arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7fff8ba7b490 a2=0 a3=7fff8ba7b47c items=0 ppid=2660 pid=4991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:39.854000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 May 17 00:39:39.859000 audit[4991]: NETFILTER_CFG table=nat:123 family=2 entries=20 op=nft_register_rule pid=4991 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" May 17 00:39:39.859000 audit[4991]: SYSCALL arch=c000003e syscall=46 success=yes exit=5772 a0=3 a1=7fff8ba7b490 a2=0 a3=7fff8ba7b47c items=0 ppid=2660 pid=4991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:39.859000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 May 17 00:39:39.888000 audit[4993]: NETFILTER_CFG table=filter:124 family=2 entries=14 op=nft_register_rule pid=4993 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" May 17 00:39:39.888000 audit[4993]: SYSCALL arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7fff9705c2b0 a2=0 a3=7fff9705c29c items=0 ppid=2660 pid=4993 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:39.888000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 May 17 00:39:39.895000 audit[4993]: NETFILTER_CFG table=nat:125 family=2 entries=20 op=nft_register_rule pid=4993 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" May 17 00:39:39.895000 audit[4993]: SYSCALL arch=c000003e syscall=46 success=yes exit=5772 a0=3 a1=7fff9705c2b0 a2=0 a3=7fff9705c29c items=0 ppid=2660 pid=4993 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:39.895000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 May 17 00:39:39.972879 systemd[1]: Started sshd@8-172.31.30.240:22-139.178.68.195:49824.service. May 17 00:39:39.973000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-172.31.30.240:22-139.178.68.195:49824 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:39:40.243000 audit[4995]: USER_ACCT pid=4995 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' May 17 00:39:40.245976 sshd[4995]: Accepted publickey for core from 139.178.68.195 port 49824 ssh2: RSA SHA256:I5cGDzOOPhNK8a4J4SFPiuUQivu3TK8ocBzhX4AkN30 May 17 00:39:40.245000 audit[4995]: CRED_ACQ pid=4995 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' May 17 00:39:40.245000 audit[4995]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffebaca3fc0 a2=3 a3=0 items=0 ppid=1 pid=4995 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:40.245000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D May 17 00:39:40.249259 sshd[4995]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) May 17 00:39:40.263491 systemd-logind[1620]: New session 9 of user core. May 17 00:39:40.264369 systemd[1]: Started session-9.scope. May 17 00:39:40.271000 audit[4995]: USER_START pid=4995 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' May 17 00:39:40.273000 audit[4997]: CRED_ACQ pid=4997 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' May 17 00:39:40.830097 kubelet[2516]: I0517 00:39:40.830038 2516 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" May 17 00:39:40.895000 audit[4920]: AVC avc: denied { watch } for pid=4920 comm="apiserver" path="/calico-apiserver-certs/..2025_05_17_00_39_20.2217887946/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c755,c764 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c755,c764 tclass=file permissive=0 May 17 00:39:40.895000 audit[4920]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c001116be0 a2=fc6 a3=0 items=0 ppid=4171 pid=4920 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c755,c764 key=(null) May 17 00:39:40.895000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 May 17 00:39:41.585000 audit[4969]: AVC avc: denied { watch } for pid=4969 comm="apiserver" path="/calico-apiserver-certs/..2025_05_17_00_39_20.3617611156/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c192,c952 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c192,c952 tclass=file permissive=0 May 17 00:39:41.585000 audit[4969]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c0016ac6c0 a2=fc6 a3=0 items=0 ppid=4436 pid=4969 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c192,c952 key=(null) May 17 00:39:41.585000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 May 17 00:39:41.657902 sshd[4995]: pam_unix(sshd:session): session closed for user core May 17 00:39:41.664000 audit[4995]: USER_END pid=4995 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' May 17 00:39:41.664000 audit[4995]: CRED_DISP pid=4995 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' May 17 00:39:41.667000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-172.31.30.240:22-139.178.68.195:49824 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:39:41.668351 systemd[1]: sshd@8-172.31.30.240:22-139.178.68.195:49824.service: Deactivated successfully. May 17 00:39:41.669560 systemd[1]: session-9.scope: Deactivated successfully. May 17 00:39:41.676909 systemd-logind[1620]: Session 9 logged out. Waiting for processes to exit. May 17 00:39:41.680317 systemd-logind[1620]: Removed session 9. May 17 00:39:41.826789 kubelet[2516]: I0517 00:39:41.803196 2516 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-apiserver/calico-apiserver-755c444ff4-vrn79" podStartSLOduration=33.123391939 podStartE2EDuration="38.789813219s" podCreationTimestamp="2025-05-17 00:39:03 +0000 UTC" firstStartedPulling="2025-05-17 00:39:32.847647419 +0000 UTC m=+44.717908629" lastFinishedPulling="2025-05-17 00:39:38.514068708 +0000 UTC m=+50.384329909" observedRunningTime="2025-05-17 00:39:39.842202379 +0000 UTC m=+51.712463597" watchObservedRunningTime="2025-05-17 00:39:41.789813219 +0000 UTC m=+53.660074437" May 17 00:39:41.895000 audit[5010]: NETFILTER_CFG table=filter:126 family=2 entries=13 op=nft_register_rule pid=5010 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" May 17 00:39:41.895000 audit[5010]: SYSCALL arch=c000003e syscall=46 success=yes exit=4504 a0=3 a1=7fffa29f94a0 a2=0 a3=7fffa29f948c items=0 ppid=2660 pid=5010 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:41.895000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 May 17 00:39:41.904000 audit[5010]: NETFILTER_CFG table=nat:127 family=2 entries=27 op=nft_register_chain pid=5010 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" May 17 00:39:41.904000 audit[5010]: SYSCALL arch=c000003e syscall=46 success=yes exit=9348 a0=3 a1=7fffa29f94a0 a2=0 a3=7fffa29f948c items=0 ppid=2660 pid=5010 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:41.904000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 May 17 00:39:43.323477 env[1634]: time="2025-05-17T00:39:43.323381367Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/kube-controllers:v3.30.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" May 17 00:39:43.334746 env[1634]: time="2025-05-17T00:39:43.334659825Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:094053209304a3d20e6561c18d37ac2dc4c7fbb68c1579d9864c303edebffa50,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" May 17 00:39:43.338614 env[1634]: time="2025-05-17T00:39:43.338566918Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/kube-controllers:v3.30.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" May 17 00:39:43.342441 env[1634]: time="2025-05-17T00:39:43.342396900Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/kube-controllers@sha256:eb5bc5c9e7a71f1d8ea69bbcc8e54b84fb7ec1e32d919c8b148f80b770f20182,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" May 17 00:39:43.342680 env[1634]: time="2025-05-17T00:39:43.342650929Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.0\" returns image reference \"sha256:094053209304a3d20e6561c18d37ac2dc4c7fbb68c1579d9864c303edebffa50\"" May 17 00:39:43.364112 kernel: kauditd_printk_skb: 151 callbacks suppressed May 17 00:39:43.365553 kernel: audit: type=1400 audit(1747442383.359:1342): avc: denied { watch } for pid=2384 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520978 scontext=system_u:system_r:svirt_lxc_net_t:s0:c777,c806 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 May 17 00:39:43.365623 kernel: audit: type=1400 audit(1747442383.359:1343): avc: denied { watch } for pid=2384 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c777,c806 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 May 17 00:39:43.359000 audit[2384]: AVC avc: denied { watch } for pid=2384 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520978 scontext=system_u:system_r:svirt_lxc_net_t:s0:c777,c806 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 May 17 00:39:43.359000 audit[2384]: AVC avc: denied { watch } for pid=2384 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c777,c806 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 May 17 00:39:43.359000 audit[2384]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c000d9ce10 a2=fc6 a3=0 items=0 ppid=2248 pid=2384 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c777,c806 key=(null) May 17 00:39:43.374859 kernel: audit: type=1300 audit(1747442383.359:1342): arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c000d9ce10 a2=fc6 a3=0 items=0 ppid=2248 pid=2384 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c777,c806 key=(null) May 17 00:39:43.374960 kernel: audit: type=1327 audit(1747442383.359:1342): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 May 17 00:39:43.359000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 May 17 00:39:43.379931 kernel: audit: type=1300 audit(1747442383.359:1343): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00173da00 a2=fc6 a3=0 items=0 ppid=2248 pid=2384 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c777,c806 key=(null) May 17 00:39:43.359000 audit[2384]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00173da00 a2=fc6 a3=0 items=0 ppid=2248 pid=2384 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c777,c806 key=(null) May 17 00:39:43.385573 env[1634]: time="2025-05-17T00:39:43.385328551Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.0\"" May 17 00:39:43.388584 kernel: audit: type=1327 audit(1747442383.359:1343): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 May 17 00:39:43.359000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 May 17 00:39:43.560915 env[1634]: time="2025-05-17T00:39:43.560873044Z" level=info msg="CreateContainer within sandbox \"e394e15fec4ebf284bcb99b919e76853c0c1e2d5584f8e42edca15019c30a118\" for container &ContainerMetadata{Name:calico-kube-controllers,Attempt:0,}" May 17 00:39:43.564004 env[1634]: time="2025-05-17T00:39:43.563952304Z" level=info msg="trying next host" error="failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" host=ghcr.io May 17 00:39:43.566515 env[1634]: time="2025-05-17T00:39:43.566233567Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.0\" failed" error="failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.0\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" May 17 00:39:43.577227 kubelet[2516]: E0517 00:39:43.576675 2516 log.go:32] "PullImage from image service failed" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.0\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/goldmane:v3.30.0" May 17 00:39:43.587361 kubelet[2516]: E0517 00:39:43.585628 2516 kuberuntime_image.go:42] "Failed to pull image" err="failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.0\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/goldmane:v3.30.0" May 17 00:39:43.587506 env[1634]: time="2025-05-17T00:39:43.586032237Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.0\"" May 17 00:39:43.595096 env[1634]: time="2025-05-17T00:39:43.595016191Z" level=info msg="CreateContainer within sandbox \"e394e15fec4ebf284bcb99b919e76853c0c1e2d5584f8e42edca15019c30a118\" for &ContainerMetadata{Name:calico-kube-controllers,Attempt:0,} returns container id \"a0779426ca278c47e96a3526d5c7ac854166103cbf173556d3a9ec9202a5f8b1\"" May 17 00:39:43.609290 env[1634]: time="2025-05-17T00:39:43.609244456Z" level=info msg="StartContainer for \"a0779426ca278c47e96a3526d5c7ac854166103cbf173556d3a9ec9202a5f8b1\"" May 17 00:39:43.634036 kubelet[2516]: E0517 00:39:43.633961 2516 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:goldmane,Image:ghcr.io/flatcar/calico/goldmane:v3.30.0,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:INFO,ValueFrom:nil,},EnvVar{Name:PORT,Value:7443,ValueFrom:nil,},EnvVar{Name:SERVER_CERT_PATH,Value:/goldmane-key-pair/tls.crt,ValueFrom:nil,},EnvVar{Name:SERVER_KEY_PATH,Value:/goldmane-key-pair/tls.key,ValueFrom:nil,},EnvVar{Name:CA_CERT_PATH,Value:/etc/pki/tls/certs/tigera-ca-bundle.crt,ValueFrom:nil,},EnvVar{Name:PUSH_URL,Value:https://guardian.calico-system.svc.cluster.local:443/api/v1/flows/bulk,ValueFrom:nil,},EnvVar{Name:FILE_CONFIG_PATH,Value:/config/config.json,ValueFrom:nil,},EnvVar{Name:HEALTH_ENABLED,Value:true,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:config,ReadOnly:true,MountPath:/config,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:goldmane-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:goldmane-key-pair,ReadOnly:true,MountPath:/goldmane-key-pair,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-lklcj,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/health -live],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/health -ready],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:30,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod goldmane-78d55f7ddc-d97gj_calico-system(3ebcad15-5d11-4ed3-b1bb-3bd7f1c5d1af): ErrImagePull: failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.0\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" logger="UnhandledError" May 17 00:39:43.640311 kubelet[2516]: E0517 00:39:43.640251 2516 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"goldmane\" with ErrImagePull: \"failed to pull and unpack image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.0\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/goldmane:v3.30.0\\\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden\"" pod="calico-system/goldmane-78d55f7ddc-d97gj" podUID="3ebcad15-5d11-4ed3-b1bb-3bd7f1c5d1af" May 17 00:39:43.643419 systemd[1]: Started cri-containerd-a0779426ca278c47e96a3526d5c7ac854166103cbf173556d3a9ec9202a5f8b1.scope. May 17 00:39:43.688952 kernel: audit: type=1400 audit(1747442383.677:1344): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:43.689722 kernel: audit: type=1400 audit(1747442383.677:1345): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:43.677000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:43.677000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:43.677000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:43.695804 kernel: audit: type=1400 audit(1747442383.677:1346): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:43.677000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:43.677000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:43.677000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:43.677000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:43.702874 kernel: audit: type=1400 audit(1747442383.677:1347): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:43.677000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:43.677000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:43.688000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:43.688000 audit: BPF prog-id=215 op=LOAD May 17 00:39:43.689000 audit[5026]: AVC avc: denied { bpf } for pid=5026 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:43.689000 audit[5026]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=4414 pid=5026 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:43.689000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6130373739343236636132373863343765393661333532366435633761 May 17 00:39:43.689000 audit[5026]: AVC avc: denied { perfmon } for pid=5026 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:43.689000 audit[5026]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=4414 pid=5026 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:43.689000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6130373739343236636132373863343765393661333532366435633761 May 17 00:39:43.689000 audit[5026]: AVC avc: denied { bpf } for pid=5026 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:43.689000 audit[5026]: AVC avc: denied { bpf } for pid=5026 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:43.689000 audit[5026]: AVC avc: denied { bpf } for pid=5026 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:43.689000 audit[5026]: AVC avc: denied { perfmon } for pid=5026 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:43.689000 audit[5026]: AVC avc: denied { perfmon } for pid=5026 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:43.689000 audit[5026]: AVC avc: denied { perfmon } for pid=5026 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:43.689000 audit[5026]: AVC avc: denied { perfmon } for pid=5026 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:43.689000 audit[5026]: AVC avc: denied { perfmon } for pid=5026 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:43.689000 audit[5026]: AVC avc: denied { bpf } for pid=5026 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:43.689000 audit[5026]: AVC avc: denied { bpf } for pid=5026 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:43.689000 audit: BPF prog-id=216 op=LOAD May 17 00:39:43.689000 audit[5026]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c000382380 items=0 ppid=4414 pid=5026 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:43.689000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6130373739343236636132373863343765393661333532366435633761 May 17 00:39:43.689000 audit[5026]: AVC avc: denied { bpf } for pid=5026 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:43.689000 audit[5026]: AVC avc: denied { bpf } for pid=5026 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:43.689000 audit[5026]: AVC avc: denied { perfmon } for pid=5026 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:43.689000 audit[5026]: AVC avc: denied { perfmon } for pid=5026 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:43.689000 audit[5026]: AVC avc: denied { perfmon } for pid=5026 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:43.689000 audit[5026]: AVC avc: denied { perfmon } for pid=5026 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:43.689000 audit[5026]: AVC avc: denied { perfmon } for pid=5026 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:43.689000 audit[5026]: AVC avc: denied { bpf } for pid=5026 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:43.689000 audit[5026]: AVC avc: denied { bpf } for pid=5026 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:43.689000 audit: BPF prog-id=217 op=LOAD May 17 00:39:43.689000 audit[5026]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0003823c8 items=0 ppid=4414 pid=5026 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:43.689000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6130373739343236636132373863343765393661333532366435633761 May 17 00:39:43.689000 audit: BPF prog-id=217 op=UNLOAD May 17 00:39:43.689000 audit: BPF prog-id=216 op=UNLOAD May 17 00:39:43.689000 audit[5026]: AVC avc: denied { bpf } for pid=5026 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:43.689000 audit[5026]: AVC avc: denied { bpf } for pid=5026 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:43.689000 audit[5026]: AVC avc: denied { bpf } for pid=5026 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:43.689000 audit[5026]: AVC avc: denied { perfmon } for pid=5026 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:43.689000 audit[5026]: AVC avc: denied { perfmon } for pid=5026 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:43.689000 audit[5026]: AVC avc: denied { perfmon } for pid=5026 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:43.689000 audit[5026]: AVC avc: denied { perfmon } for pid=5026 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:43.689000 audit[5026]: AVC avc: denied { perfmon } for pid=5026 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:43.689000 audit[5026]: AVC avc: denied { bpf } for pid=5026 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:43.689000 audit[5026]: AVC avc: denied { bpf } for pid=5026 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:43.689000 audit: BPF prog-id=218 op=LOAD May 17 00:39:43.689000 audit[5026]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0003827d8 items=0 ppid=4414 pid=5026 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:43.689000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6130373739343236636132373863343765393661333532366435633761 May 17 00:39:43.768554 env[1634]: time="2025-05-17T00:39:43.768488651Z" level=info msg="StartContainer for \"a0779426ca278c47e96a3526d5c7ac854166103cbf173556d3a9ec9202a5f8b1\" returns successfully" May 17 00:39:43.797000 audit[2370]: AVC avc: denied { watch } for pid=2370 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=520974 scontext=system_u:system_r:svirt_lxc_net_t:s0:c562,c1015 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 May 17 00:39:43.797000 audit[2370]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7c a1=c00ab78240 a2=fc6 a3=0 items=0 ppid=2221 pid=2370 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c562,c1015 key=(null) May 17 00:39:43.797000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E33302E323430002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 May 17 00:39:43.808000 audit[2370]: AVC avc: denied { watch } for pid=2370 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520978 scontext=system_u:system_r:svirt_lxc_net_t:s0:c562,c1015 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 May 17 00:39:43.808000 audit[2370]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7c a1=c00aacfa10 a2=fc6 a3=0 items=0 ppid=2221 pid=2370 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c562,c1015 key=(null) May 17 00:39:43.808000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E33302E323430002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 May 17 00:39:43.808000 audit[2370]: AVC avc: denied { watch } for pid=2370 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c562,c1015 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 May 17 00:39:43.808000 audit[2370]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7c a1=c00a94a2e0 a2=fc6 a3=0 items=0 ppid=2221 pid=2370 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c562,c1015 key=(null) May 17 00:39:43.808000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E33302E323430002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 May 17 00:39:43.813000 audit[2370]: AVC avc: denied { watch } for pid=2370 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=520980 scontext=system_u:system_r:svirt_lxc_net_t:s0:c562,c1015 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 May 17 00:39:43.813000 audit[2370]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7c a1=c00aacfa70 a2=fc6 a3=0 items=0 ppid=2221 pid=2370 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c562,c1015 key=(null) May 17 00:39:43.813000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E33302E323430002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 May 17 00:39:43.831000 audit[2370]: AVC avc: denied { watch } for pid=2370 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c562,c1015 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 May 17 00:39:43.831000 audit[2370]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7d a1=c00a98ca40 a2=fc6 a3=0 items=0 ppid=2221 pid=2370 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c562,c1015 key=(null) May 17 00:39:43.831000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E33302E323430002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 May 17 00:39:43.831000 audit[2370]: AVC avc: denied { watch } for pid=2370 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520978 scontext=system_u:system_r:svirt_lxc_net_t:s0:c562,c1015 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 May 17 00:39:43.831000 audit[2370]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7d a1=c00ab783f0 a2=fc6 a3=0 items=0 ppid=2221 pid=2370 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c562,c1015 key=(null) May 17 00:39:43.831000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E33302E323430002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 May 17 00:39:43.955058 kubelet[2516]: E0517 00:39:43.954955 2516 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"goldmane\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.0\\\": ErrImagePull: failed to pull and unpack image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.0\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/goldmane:v3.30.0\\\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden\"" pod="calico-system/goldmane-78d55f7ddc-d97gj" podUID="3ebcad15-5d11-4ed3-b1bb-3bd7f1c5d1af" May 17 00:39:44.008000 audit[5066]: NETFILTER_CFG table=filter:128 family=2 entries=12 op=nft_register_rule pid=5066 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" May 17 00:39:44.008000 audit[5066]: SYSCALL arch=c000003e syscall=46 success=yes exit=4504 a0=3 a1=7ffc19e0f540 a2=0 a3=7ffc19e0f52c items=0 ppid=2660 pid=5066 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:44.008000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 May 17 00:39:44.014000 audit[5066]: NETFILTER_CFG table=nat:129 family=2 entries=22 op=nft_register_rule pid=5066 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" May 17 00:39:44.014000 audit[5066]: SYSCALL arch=c000003e syscall=46 success=yes exit=6540 a0=3 a1=7ffc19e0f540 a2=0 a3=7ffc19e0f52c items=0 ppid=2660 pid=5066 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:44.014000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 May 17 00:39:44.478358 kubelet[2516]: I0517 00:39:44.476657 2516 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-kube-controllers-557b5c79c9-mhmhq" podStartSLOduration=28.362361713 podStartE2EDuration="36.47663638s" podCreationTimestamp="2025-05-17 00:39:08 +0000 UTC" firstStartedPulling="2025-05-17 00:39:35.27522898 +0000 UTC m=+47.145490180" lastFinishedPulling="2025-05-17 00:39:43.389503627 +0000 UTC m=+55.259764847" observedRunningTime="2025-05-17 00:39:44.001930841 +0000 UTC m=+55.872192059" watchObservedRunningTime="2025-05-17 00:39:44.47663638 +0000 UTC m=+56.346897607" May 17 00:39:44.979833 systemd[1]: run-containerd-runc-k8s.io-a0779426ca278c47e96a3526d5c7ac854166103cbf173556d3a9ec9202a5f8b1-runc.wjCgiL.mount: Deactivated successfully. May 17 00:39:46.007414 env[1634]: time="2025-05-17T00:39:46.007337600Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/csi:v3.30.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" May 17 00:39:46.012898 env[1634]: time="2025-05-17T00:39:46.012849708Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:d5b08093b7928c0ac1122e59edf69b2e58c6d10ecc8b9e5cffeb809a956dc48e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" May 17 00:39:46.016122 env[1634]: time="2025-05-17T00:39:46.016071233Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/csi:v3.30.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" May 17 00:39:46.019064 env[1634]: time="2025-05-17T00:39:46.019020826Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/csi@sha256:27883a4104876fe239311dd93ce6efd0c4a87de7163d57a4c8d96bd65a287ffd,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" May 17 00:39:46.020037 env[1634]: time="2025-05-17T00:39:46.019969068Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.0\" returns image reference \"sha256:d5b08093b7928c0ac1122e59edf69b2e58c6d10ecc8b9e5cffeb809a956dc48e\"" May 17 00:39:46.022683 env[1634]: time="2025-05-17T00:39:46.022594158Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.0\"" May 17 00:39:46.032271 env[1634]: time="2025-05-17T00:39:46.032226874Z" level=info msg="CreateContainer within sandbox \"2420f9d78e3421bf79b1429832b2e7215d57d0ddac779e2593254d2b33e2e967\" for container &ContainerMetadata{Name:calico-csi,Attempt:0,}" May 17 00:39:46.070825 env[1634]: time="2025-05-17T00:39:46.070735207Z" level=info msg="CreateContainer within sandbox \"2420f9d78e3421bf79b1429832b2e7215d57d0ddac779e2593254d2b33e2e967\" for &ContainerMetadata{Name:calico-csi,Attempt:0,} returns container id \"4f1a7b24cc210f8911aed584f4395177cb104a669fc62020bc06bdfc5460c98e\"" May 17 00:39:46.071681 env[1634]: time="2025-05-17T00:39:46.071647792Z" level=info msg="StartContainer for \"4f1a7b24cc210f8911aed584f4395177cb104a669fc62020bc06bdfc5460c98e\"" May 17 00:39:46.112503 systemd[1]: Started cri-containerd-4f1a7b24cc210f8911aed584f4395177cb104a669fc62020bc06bdfc5460c98e.scope. May 17 00:39:46.118289 systemd[1]: run-containerd-runc-k8s.io-4f1a7b24cc210f8911aed584f4395177cb104a669fc62020bc06bdfc5460c98e-runc.kchE0K.mount: Deactivated successfully. May 17 00:39:46.149000 audit[5094]: AVC avc: denied { perfmon } for pid=5094 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:46.149000 audit[5094]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001456b0 a2=3c a3=7fc28bd6d608 items=0 ppid=4733 pid=5094 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:46.149000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3466316137623234636332313066383931316165643538346634333935 May 17 00:39:46.149000 audit[5094]: AVC avc: denied { bpf } for pid=5094 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:46.149000 audit[5094]: AVC avc: denied { bpf } for pid=5094 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:46.149000 audit[5094]: AVC avc: denied { bpf } for pid=5094 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:46.149000 audit[5094]: AVC avc: denied { perfmon } for pid=5094 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:46.149000 audit[5094]: AVC avc: denied { perfmon } for pid=5094 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:46.149000 audit[5094]: AVC avc: denied { perfmon } for pid=5094 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:46.149000 audit[5094]: AVC avc: denied { perfmon } for pid=5094 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:46.149000 audit[5094]: AVC avc: denied { perfmon } for pid=5094 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:46.149000 audit[5094]: AVC avc: denied { bpf } for pid=5094 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:46.149000 audit[5094]: AVC avc: denied { bpf } for pid=5094 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:46.149000 audit: BPF prog-id=219 op=LOAD May 17 00:39:46.149000 audit[5094]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001459d8 a2=78 a3=c0003be3b8 items=0 ppid=4733 pid=5094 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:46.149000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3466316137623234636332313066383931316165643538346634333935 May 17 00:39:46.149000 audit[5094]: AVC avc: denied { bpf } for pid=5094 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:46.149000 audit[5094]: AVC avc: denied { bpf } for pid=5094 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:46.149000 audit[5094]: AVC avc: denied { perfmon } for pid=5094 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:46.149000 audit[5094]: AVC avc: denied { perfmon } for pid=5094 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:46.149000 audit[5094]: AVC avc: denied { perfmon } for pid=5094 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:46.149000 audit[5094]: AVC avc: denied { perfmon } for pid=5094 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:46.149000 audit[5094]: AVC avc: denied { perfmon } for pid=5094 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:46.149000 audit[5094]: AVC avc: denied { bpf } for pid=5094 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:46.149000 audit[5094]: AVC avc: denied { bpf } for pid=5094 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:46.149000 audit: BPF prog-id=220 op=LOAD May 17 00:39:46.149000 audit[5094]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000145770 a2=78 a3=c0003be408 items=0 ppid=4733 pid=5094 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:46.149000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3466316137623234636332313066383931316165643538346634333935 May 17 00:39:46.149000 audit: BPF prog-id=220 op=UNLOAD May 17 00:39:46.149000 audit: BPF prog-id=219 op=UNLOAD May 17 00:39:46.149000 audit[5094]: AVC avc: denied { bpf } for pid=5094 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:46.149000 audit[5094]: AVC avc: denied { bpf } for pid=5094 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:46.149000 audit[5094]: AVC avc: denied { bpf } for pid=5094 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:46.149000 audit[5094]: AVC avc: denied { perfmon } for pid=5094 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:46.149000 audit[5094]: AVC avc: denied { perfmon } for pid=5094 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:46.149000 audit[5094]: AVC avc: denied { perfmon } for pid=5094 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:46.149000 audit[5094]: AVC avc: denied { perfmon } for pid=5094 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:46.149000 audit[5094]: AVC avc: denied { perfmon } for pid=5094 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:46.149000 audit[5094]: AVC avc: denied { bpf } for pid=5094 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:46.149000 audit[5094]: AVC avc: denied { bpf } for pid=5094 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:46.149000 audit: BPF prog-id=221 op=LOAD May 17 00:39:46.149000 audit[5094]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000145c30 a2=78 a3=c0003be498 items=0 ppid=4733 pid=5094 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:46.149000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3466316137623234636332313066383931316165643538346634333935 May 17 00:39:46.173240 env[1634]: time="2025-05-17T00:39:46.173181535Z" level=info msg="StartContainer for \"4f1a7b24cc210f8911aed584f4395177cb104a669fc62020bc06bdfc5460c98e\" returns successfully" May 17 00:39:46.198869 env[1634]: time="2025-05-17T00:39:46.198813682Z" level=info msg="trying next host" error="failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" host=ghcr.io May 17 00:39:46.201030 env[1634]: time="2025-05-17T00:39:46.200943212Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.0\" failed" error="failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.0\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" May 17 00:39:46.201212 kubelet[2516]: E0517 00:39:46.201178 2516 log.go:32] "PullImage from image service failed" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.0\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/whisker:v3.30.0" May 17 00:39:46.201604 kubelet[2516]: E0517 00:39:46.201228 2516 kuberuntime_image.go:42] "Failed to pull image" err="failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.0\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/whisker:v3.30.0" May 17 00:39:46.201604 kubelet[2516]: E0517 00:39:46.201414 2516 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:whisker,Image:ghcr.io/flatcar/calico/whisker:v3.30.0,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:INFO,ValueFrom:nil,},EnvVar{Name:CALICO_VERSION,Value:v3.30.0,ValueFrom:nil,},EnvVar{Name:CLUSTER_ID,Value:9374fdf540ca4afdb7eee51ad827df9d,ValueFrom:nil,},EnvVar{Name:CLUSTER_TYPE,Value:typha,kdd,k8s,operator,bgp,kubeadm,ValueFrom:nil,},EnvVar{Name:NOTIFICATIONS,Value:Enabled,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:kube-api-access-5f82j,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod whisker-74cd64d847-wzdsv_calico-system(9a1d6802-818f-497c-bada-09fc52fbf432): ErrImagePull: failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.0\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" logger="UnhandledError" May 17 00:39:46.204178 env[1634]: time="2025-05-17T00:39:46.204135758Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.0\"" May 17 00:39:46.477000 audit[2384]: AVC avc: denied { watch } for pid=2384 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c777,c806 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 May 17 00:39:46.477000 audit[2384]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c0022af200 a2=fc6 a3=0 items=0 ppid=2248 pid=2384 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c777,c806 key=(null) May 17 00:39:46.477000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 May 17 00:39:46.483000 audit[2384]: AVC avc: denied { watch } for pid=2384 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c777,c806 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 May 17 00:39:46.483000 audit[2384]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c0022af220 a2=fc6 a3=0 items=0 ppid=2248 pid=2384 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c777,c806 key=(null) May 17 00:39:46.483000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 May 17 00:39:46.498000 audit[2384]: AVC avc: denied { watch } for pid=2384 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c777,c806 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 May 17 00:39:46.498000 audit[2384]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c0018558a0 a2=fc6 a3=0 items=0 ppid=2248 pid=2384 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c777,c806 key=(null) May 17 00:39:46.498000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 May 17 00:39:46.500000 audit[2384]: AVC avc: denied { watch } for pid=2384 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c777,c806 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 May 17 00:39:46.500000 audit[2384]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c0022af5e0 a2=fc6 a3=0 items=0 ppid=2248 pid=2384 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c777,c806 key=(null) May 17 00:39:46.500000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 May 17 00:39:46.688152 systemd[1]: Started sshd@9-172.31.30.240:22-139.178.68.195:36302.service. May 17 00:39:46.687000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-172.31.30.240:22-139.178.68.195:36302 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:39:46.941000 audit[5120]: USER_ACCT pid=5120 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' May 17 00:39:46.944097 sshd[5120]: Accepted publickey for core from 139.178.68.195 port 36302 ssh2: RSA SHA256:I5cGDzOOPhNK8a4J4SFPiuUQivu3TK8ocBzhX4AkN30 May 17 00:39:46.944000 audit[5120]: CRED_ACQ pid=5120 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' May 17 00:39:46.944000 audit[5120]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffdfb47a1d0 a2=3 a3=0 items=0 ppid=1 pid=5120 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:46.944000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D May 17 00:39:46.948883 sshd[5120]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) May 17 00:39:46.961163 systemd[1]: Started session-10.scope. May 17 00:39:46.961477 systemd-logind[1620]: New session 10 of user core. May 17 00:39:46.967000 audit[5120]: USER_START pid=5120 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' May 17 00:39:46.968000 audit[5122]: CRED_ACQ pid=5122 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' May 17 00:39:47.889877 sshd[5120]: pam_unix(sshd:session): session closed for user core May 17 00:39:47.891000 audit[5120]: USER_END pid=5120 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' May 17 00:39:47.891000 audit[5120]: CRED_DISP pid=5120 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' May 17 00:39:47.893808 systemd[1]: sshd@9-172.31.30.240:22-139.178.68.195:36302.service: Deactivated successfully. May 17 00:39:47.893000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-172.31.30.240:22-139.178.68.195:36302 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:39:47.894584 systemd[1]: session-10.scope: Deactivated successfully. May 17 00:39:47.895353 systemd-logind[1620]: Session 10 logged out. Waiting for processes to exit. May 17 00:39:47.897266 systemd-logind[1620]: Removed session 10. May 17 00:39:47.917000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-172.31.30.240:22-139.178.68.195:36310 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:39:47.917601 systemd[1]: Started sshd@10-172.31.30.240:22-139.178.68.195:36310.service. May 17 00:39:48.094000 audit[5134]: USER_ACCT pid=5134 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' May 17 00:39:48.096919 sshd[5134]: Accepted publickey for core from 139.178.68.195 port 36310 ssh2: RSA SHA256:I5cGDzOOPhNK8a4J4SFPiuUQivu3TK8ocBzhX4AkN30 May 17 00:39:48.096000 audit[5134]: CRED_ACQ pid=5134 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' May 17 00:39:48.096000 audit[5134]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe6791f540 a2=3 a3=0 items=0 ppid=1 pid=5134 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:48.096000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D May 17 00:39:48.099137 sshd[5134]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) May 17 00:39:48.111293 systemd[1]: Started session-11.scope. May 17 00:39:48.111831 systemd-logind[1620]: New session 11 of user core. May 17 00:39:48.117000 audit[5134]: USER_START pid=5134 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' May 17 00:39:48.119000 audit[5136]: CRED_ACQ pid=5136 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' May 17 00:39:48.403675 env[1634]: time="2025-05-17T00:39:48.402762986Z" level=info msg="StopPodSandbox for \"bc2d658c0ed39ff320fda459439b61564ebcebc82e64082742176c054dda74e2\"" May 17 00:39:48.841176 env[1634]: time="2025-05-17T00:39:48.840737866Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node-driver-registrar:v3.30.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" May 17 00:39:48.845716 env[1634]: time="2025-05-17T00:39:48.845437864Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:45c8692ffc029387ee93ba83da8ad26da9749cf2ba6ed03981f8f9933ed5a5b0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" May 17 00:39:48.848519 env[1634]: time="2025-05-17T00:39:48.848017894Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/node-driver-registrar:v3.30.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" May 17 00:39:48.853899 env[1634]: time="2025-05-17T00:39:48.853056523Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node-driver-registrar@sha256:dca5c16181edde2e860463615523ce457cd9dcfca85b7cfdcd6f3ea7de6f2ac8,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" May 17 00:39:48.853899 env[1634]: time="2025-05-17T00:39:48.853576337Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.0\" returns image reference \"sha256:45c8692ffc029387ee93ba83da8ad26da9749cf2ba6ed03981f8f9933ed5a5b0\"" May 17 00:39:48.858915 sshd[5134]: pam_unix(sshd:session): session closed for user core May 17 00:39:48.864000 audit[5134]: USER_END pid=5134 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' May 17 00:39:48.867442 kernel: kauditd_printk_skb: 151 callbacks suppressed May 17 00:39:48.870926 kernel: audit: type=1106 audit(1747442388.864:1395): pid=5134 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' May 17 00:39:48.891806 kernel: audit: type=1104 audit(1747442388.875:1396): pid=5134 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' May 17 00:39:48.875000 audit[5134]: CRED_DISP pid=5134 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' May 17 00:39:48.887103 systemd[1]: Started sshd@11-172.31.30.240:22-139.178.68.195:36326.service. May 17 00:39:48.891850 systemd[1]: sshd@10-172.31.30.240:22-139.178.68.195:36310.service: Deactivated successfully. May 17 00:39:48.893868 systemd[1]: session-11.scope: Deactivated successfully. May 17 00:39:48.895930 systemd-logind[1620]: Session 11 logged out. Waiting for processes to exit. May 17 00:39:48.910834 kernel: audit: type=1130 audit(1747442388.887:1397): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-172.31.30.240:22-139.178.68.195:36326 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:39:48.887000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-172.31.30.240:22-139.178.68.195:36326 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:39:48.911158 systemd-logind[1620]: Removed session 11. May 17 00:39:48.891000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-172.31.30.240:22-139.178.68.195:36310 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:39:48.924785 kernel: audit: type=1131 audit(1747442388.891:1398): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-172.31.30.240:22-139.178.68.195:36310 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:39:49.139000 audit[5156]: USER_ACCT pid=5156 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' May 17 00:39:49.158883 kernel: audit: type=1101 audit(1747442389.139:1399): pid=5156 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' May 17 00:39:49.158982 kernel: audit: type=1103 audit(1747442389.148:1400): pid=5156 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' May 17 00:39:49.148000 audit[5156]: CRED_ACQ pid=5156 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' May 17 00:39:49.159078 sshd[5156]: Accepted publickey for core from 139.178.68.195 port 36326 ssh2: RSA SHA256:I5cGDzOOPhNK8a4J4SFPiuUQivu3TK8ocBzhX4AkN30 May 17 00:39:49.166419 kernel: audit: type=1006 audit(1747442389.148:1401): pid=5156 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=12 res=1 May 17 00:39:49.153778 sshd[5156]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) May 17 00:39:49.148000 audit[5156]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff2e722870 a2=3 a3=0 items=0 ppid=1 pid=5156 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:49.182129 kernel: audit: type=1300 audit(1747442389.148:1401): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff2e722870 a2=3 a3=0 items=0 ppid=1 pid=5156 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:49.171009 systemd[1]: Started session-12.scope. May 17 00:39:49.148000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D May 17 00:39:49.172879 systemd-logind[1620]: New session 12 of user core. May 17 00:39:49.188821 kernel: audit: type=1327 audit(1747442389.148:1401): proctitle=737368643A20636F7265205B707269765D May 17 00:39:49.180000 audit[5156]: USER_START pid=5156 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' May 17 00:39:49.198807 kernel: audit: type=1105 audit(1747442389.180:1402): pid=5156 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' May 17 00:39:49.183000 audit[5164]: CRED_ACQ pid=5164 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' May 17 00:39:49.385866 env[1634]: time="2025-05-17T00:39:49.385828607Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.0\"" May 17 00:39:49.584838 env[1634]: time="2025-05-17T00:39:49.584109378Z" level=info msg="trying next host" error="failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" host=ghcr.io May 17 00:39:49.586474 env[1634]: time="2025-05-17T00:39:49.586422642Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.0\" failed" error="failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.0\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" May 17 00:39:49.663863 env[1634]: 2025-05-17 00:39:49.181 [WARNING][5150] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="bc2d658c0ed39ff320fda459439b61564ebcebc82e64082742176c054dda74e2" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--30--240-k8s-calico--kube--controllers--557b5c79c9--mhmhq-eth0", GenerateName:"calico-kube-controllers-557b5c79c9-", Namespace:"calico-system", SelfLink:"", UID:"71c21642-e990-4107-bf6c-cc0ea6307b30", ResourceVersion:"1118", Generation:0, CreationTimestamp:time.Date(2025, time.May, 17, 0, 39, 8, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"557b5c79c9", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-30-240", ContainerID:"e394e15fec4ebf284bcb99b919e76853c0c1e2d5584f8e42edca15019c30a118", Pod:"calico-kube-controllers-557b5c79c9-mhmhq", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.105.68/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"calie6785d09ee3", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} May 17 00:39:49.663863 env[1634]: 2025-05-17 00:39:49.200 [INFO][5150] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="bc2d658c0ed39ff320fda459439b61564ebcebc82e64082742176c054dda74e2" May 17 00:39:49.663863 env[1634]: 2025-05-17 00:39:49.200 [INFO][5150] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="bc2d658c0ed39ff320fda459439b61564ebcebc82e64082742176c054dda74e2" iface="eth0" netns="" May 17 00:39:49.663863 env[1634]: 2025-05-17 00:39:49.200 [INFO][5150] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="bc2d658c0ed39ff320fda459439b61564ebcebc82e64082742176c054dda74e2" May 17 00:39:49.663863 env[1634]: 2025-05-17 00:39:49.200 [INFO][5150] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="bc2d658c0ed39ff320fda459439b61564ebcebc82e64082742176c054dda74e2" May 17 00:39:49.663863 env[1634]: 2025-05-17 00:39:49.625 [INFO][5166] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="bc2d658c0ed39ff320fda459439b61564ebcebc82e64082742176c054dda74e2" HandleID="k8s-pod-network.bc2d658c0ed39ff320fda459439b61564ebcebc82e64082742176c054dda74e2" Workload="ip--172--31--30--240-k8s-calico--kube--controllers--557b5c79c9--mhmhq-eth0" May 17 00:39:49.663863 env[1634]: 2025-05-17 00:39:49.633 [INFO][5166] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. May 17 00:39:49.663863 env[1634]: 2025-05-17 00:39:49.633 [INFO][5166] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. May 17 00:39:49.663863 env[1634]: 2025-05-17 00:39:49.653 [WARNING][5166] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="bc2d658c0ed39ff320fda459439b61564ebcebc82e64082742176c054dda74e2" HandleID="k8s-pod-network.bc2d658c0ed39ff320fda459439b61564ebcebc82e64082742176c054dda74e2" Workload="ip--172--31--30--240-k8s-calico--kube--controllers--557b5c79c9--mhmhq-eth0" May 17 00:39:49.663863 env[1634]: 2025-05-17 00:39:49.654 [INFO][5166] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="bc2d658c0ed39ff320fda459439b61564ebcebc82e64082742176c054dda74e2" HandleID="k8s-pod-network.bc2d658c0ed39ff320fda459439b61564ebcebc82e64082742176c054dda74e2" Workload="ip--172--31--30--240-k8s-calico--kube--controllers--557b5c79c9--mhmhq-eth0" May 17 00:39:49.663863 env[1634]: 2025-05-17 00:39:49.657 [INFO][5166] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. May 17 00:39:49.663863 env[1634]: 2025-05-17 00:39:49.659 [INFO][5150] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="bc2d658c0ed39ff320fda459439b61564ebcebc82e64082742176c054dda74e2" May 17 00:39:49.663863 env[1634]: time="2025-05-17T00:39:49.663618281Z" level=info msg="TearDown network for sandbox \"bc2d658c0ed39ff320fda459439b61564ebcebc82e64082742176c054dda74e2\" successfully" May 17 00:39:49.663863 env[1634]: time="2025-05-17T00:39:49.663646765Z" level=info msg="StopPodSandbox for \"bc2d658c0ed39ff320fda459439b61564ebcebc82e64082742176c054dda74e2\" returns successfully" May 17 00:39:49.713329 env[1634]: time="2025-05-17T00:39:49.711437219Z" level=info msg="CreateContainer within sandbox \"2420f9d78e3421bf79b1429832b2e7215d57d0ddac779e2593254d2b33e2e967\" for container &ContainerMetadata{Name:csi-node-driver-registrar,Attempt:0,}" May 17 00:39:49.725455 kubelet[2516]: E0517 00:39:49.725313 2516 log.go:32] "PullImage from image service failed" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.0\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/whisker-backend:v3.30.0" May 17 00:39:49.747426 env[1634]: time="2025-05-17T00:39:49.747147742Z" level=info msg="CreateContainer within sandbox \"2420f9d78e3421bf79b1429832b2e7215d57d0ddac779e2593254d2b33e2e967\" for &ContainerMetadata{Name:csi-node-driver-registrar,Attempt:0,} returns container id \"61950906363954e1808e3d2b85c748d5fb94e1060ae2089b6c604c4268ea3469\"" May 17 00:39:49.777884 env[1634]: time="2025-05-17T00:39:49.777343093Z" level=info msg="StartContainer for \"61950906363954e1808e3d2b85c748d5fb94e1060ae2089b6c604c4268ea3469\"" May 17 00:39:49.819660 kubelet[2516]: E0517 00:39:49.818208 2516 kuberuntime_image.go:42] "Failed to pull image" err="failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.0\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/whisker-backend:v3.30.0" May 17 00:39:49.819660 kubelet[2516]: E0517 00:39:49.818389 2516 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:whisker-backend,Image:ghcr.io/flatcar/calico/whisker-backend:v3.30.0,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:INFO,ValueFrom:nil,},EnvVar{Name:PORT,Value:3002,ValueFrom:nil,},EnvVar{Name:GOLDMANE_HOST,Value:goldmane.calico-system.svc.cluster.local:7443,ValueFrom:nil,},EnvVar{Name:TLS_CERT_PATH,Value:/whisker-backend-key-pair/tls.crt,ValueFrom:nil,},EnvVar{Name:TLS_KEY_PATH,Value:/whisker-backend-key-pair/tls.key,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:whisker-backend-key-pair,ReadOnly:true,MountPath:/whisker-backend-key-pair,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:whisker-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-5f82j,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod whisker-74cd64d847-wzdsv_calico-system(9a1d6802-818f-497c-bada-09fc52fbf432): ErrImagePull: failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.0\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" logger="UnhandledError" May 17 00:39:49.827646 env[1634]: time="2025-05-17T00:39:49.827586258Z" level=info msg="RemovePodSandbox for \"bc2d658c0ed39ff320fda459439b61564ebcebc82e64082742176c054dda74e2\"" May 17 00:39:49.827946 kubelet[2516]: E0517 00:39:49.827841 2516 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"whisker\" with ErrImagePull: \"failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker:v3.30.0\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker:v3.30.0\\\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden\", failed to \"StartContainer\" for \"whisker-backend\" with ErrImagePull: \"failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.0\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.0\\\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden\"]" pod="calico-system/whisker-74cd64d847-wzdsv" podUID="9a1d6802-818f-497c-bada-09fc52fbf432" May 17 00:39:49.828293 env[1634]: time="2025-05-17T00:39:49.828209637Z" level=info msg="Forcibly stopping sandbox \"bc2d658c0ed39ff320fda459439b61564ebcebc82e64082742176c054dda74e2\"" May 17 00:39:49.857839 sshd[5156]: pam_unix(sshd:session): session closed for user core May 17 00:39:49.860000 audit[5156]: USER_END pid=5156 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' May 17 00:39:49.861000 audit[5156]: CRED_DISP pid=5156 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' May 17 00:39:49.886277 systemd[1]: run-containerd-runc-k8s.io-61950906363954e1808e3d2b85c748d5fb94e1060ae2089b6c604c4268ea3469-runc.hjCfB1.mount: Deactivated successfully. May 17 00:39:49.890909 systemd[1]: sshd@11-172.31.30.240:22-139.178.68.195:36326.service: Deactivated successfully. May 17 00:39:49.890000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-172.31.30.240:22-139.178.68.195:36326 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:39:49.891829 systemd[1]: session-12.scope: Deactivated successfully. May 17 00:39:49.894348 systemd-logind[1620]: Session 12 logged out. Waiting for processes to exit. May 17 00:39:49.895869 systemd[1]: Started cri-containerd-61950906363954e1808e3d2b85c748d5fb94e1060ae2089b6c604c4268ea3469.scope. May 17 00:39:49.900280 systemd-logind[1620]: Removed session 12. May 17 00:39:49.919000 audit[5185]: AVC avc: denied { perfmon } for pid=5185 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:49.919000 audit[5185]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001bd6b0 a2=3c a3=7f6147fc0bd8 items=0 ppid=4733 pid=5185 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:49.919000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3631393530393036333633393534653138303865336432623835633734 May 17 00:39:49.919000 audit[5185]: AVC avc: denied { bpf } for pid=5185 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:49.919000 audit[5185]: AVC avc: denied { bpf } for pid=5185 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:49.919000 audit[5185]: AVC avc: denied { bpf } for pid=5185 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:49.919000 audit[5185]: AVC avc: denied { perfmon } for pid=5185 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:49.919000 audit[5185]: AVC avc: denied { perfmon } for pid=5185 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:49.919000 audit[5185]: AVC avc: denied { perfmon } for pid=5185 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:49.919000 audit[5185]: AVC avc: denied { perfmon } for pid=5185 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:49.919000 audit[5185]: AVC avc: denied { perfmon } for pid=5185 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:49.919000 audit[5185]: AVC avc: denied { bpf } for pid=5185 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:49.919000 audit[5185]: AVC avc: denied { bpf } for pid=5185 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:49.919000 audit: BPF prog-id=222 op=LOAD May 17 00:39:49.919000 audit[5185]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001bd9d8 a2=78 a3=c0000a0cf8 items=0 ppid=4733 pid=5185 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:49.919000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3631393530393036333633393534653138303865336432623835633734 May 17 00:39:49.919000 audit[5185]: AVC avc: denied { bpf } for pid=5185 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:49.919000 audit[5185]: AVC avc: denied { bpf } for pid=5185 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:49.919000 audit[5185]: AVC avc: denied { perfmon } for pid=5185 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:49.919000 audit[5185]: AVC avc: denied { perfmon } for pid=5185 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:49.919000 audit[5185]: AVC avc: denied { perfmon } for pid=5185 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:49.919000 audit[5185]: AVC avc: denied { perfmon } for pid=5185 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:49.919000 audit[5185]: AVC avc: denied { perfmon } for pid=5185 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:49.919000 audit[5185]: AVC avc: denied { bpf } for pid=5185 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:49.919000 audit[5185]: AVC avc: denied { bpf } for pid=5185 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:49.919000 audit: BPF prog-id=223 op=LOAD May 17 00:39:49.919000 audit[5185]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c0001bd770 a2=78 a3=c0000a0d48 items=0 ppid=4733 pid=5185 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:49.919000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3631393530393036333633393534653138303865336432623835633734 May 17 00:39:49.919000 audit: BPF prog-id=223 op=UNLOAD May 17 00:39:49.919000 audit: BPF prog-id=222 op=UNLOAD May 17 00:39:49.919000 audit[5185]: AVC avc: denied { bpf } for pid=5185 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:49.919000 audit[5185]: AVC avc: denied { bpf } for pid=5185 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:49.919000 audit[5185]: AVC avc: denied { bpf } for pid=5185 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:49.919000 audit[5185]: AVC avc: denied { perfmon } for pid=5185 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:49.919000 audit[5185]: AVC avc: denied { perfmon } for pid=5185 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:49.919000 audit[5185]: AVC avc: denied { perfmon } for pid=5185 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:49.919000 audit[5185]: AVC avc: denied { perfmon } for pid=5185 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:49.919000 audit[5185]: AVC avc: denied { perfmon } for pid=5185 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:49.919000 audit[5185]: AVC avc: denied { bpf } for pid=5185 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:49.919000 audit[5185]: AVC avc: denied { bpf } for pid=5185 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:39:49.919000 audit: BPF prog-id=224 op=LOAD May 17 00:39:49.919000 audit[5185]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001bdc30 a2=78 a3=c0000a0dd8 items=0 ppid=4733 pid=5185 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:49.919000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3631393530393036333633393534653138303865336432623835633734 May 17 00:39:49.940056 env[1634]: time="2025-05-17T00:39:49.940009715Z" level=info msg="StartContainer for \"61950906363954e1808e3d2b85c748d5fb94e1060ae2089b6c604c4268ea3469\" returns successfully" May 17 00:39:50.036331 env[1634]: 2025-05-17 00:39:49.990 [WARNING][5219] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="bc2d658c0ed39ff320fda459439b61564ebcebc82e64082742176c054dda74e2" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--30--240-k8s-calico--kube--controllers--557b5c79c9--mhmhq-eth0", GenerateName:"calico-kube-controllers-557b5c79c9-", Namespace:"calico-system", SelfLink:"", UID:"71c21642-e990-4107-bf6c-cc0ea6307b30", ResourceVersion:"1118", Generation:0, CreationTimestamp:time.Date(2025, time.May, 17, 0, 39, 8, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"557b5c79c9", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-30-240", ContainerID:"e394e15fec4ebf284bcb99b919e76853c0c1e2d5584f8e42edca15019c30a118", Pod:"calico-kube-controllers-557b5c79c9-mhmhq", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.105.68/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"calie6785d09ee3", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} May 17 00:39:50.036331 env[1634]: 2025-05-17 00:39:49.990 [INFO][5219] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="bc2d658c0ed39ff320fda459439b61564ebcebc82e64082742176c054dda74e2" May 17 00:39:50.036331 env[1634]: 2025-05-17 00:39:49.990 [INFO][5219] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="bc2d658c0ed39ff320fda459439b61564ebcebc82e64082742176c054dda74e2" iface="eth0" netns="" May 17 00:39:50.036331 env[1634]: 2025-05-17 00:39:49.990 [INFO][5219] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="bc2d658c0ed39ff320fda459439b61564ebcebc82e64082742176c054dda74e2" May 17 00:39:50.036331 env[1634]: 2025-05-17 00:39:49.990 [INFO][5219] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="bc2d658c0ed39ff320fda459439b61564ebcebc82e64082742176c054dda74e2" May 17 00:39:50.036331 env[1634]: 2025-05-17 00:39:50.019 [INFO][5229] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="bc2d658c0ed39ff320fda459439b61564ebcebc82e64082742176c054dda74e2" HandleID="k8s-pod-network.bc2d658c0ed39ff320fda459439b61564ebcebc82e64082742176c054dda74e2" Workload="ip--172--31--30--240-k8s-calico--kube--controllers--557b5c79c9--mhmhq-eth0" May 17 00:39:50.036331 env[1634]: 2025-05-17 00:39:50.019 [INFO][5229] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. May 17 00:39:50.036331 env[1634]: 2025-05-17 00:39:50.019 [INFO][5229] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. May 17 00:39:50.036331 env[1634]: 2025-05-17 00:39:50.026 [WARNING][5229] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="bc2d658c0ed39ff320fda459439b61564ebcebc82e64082742176c054dda74e2" HandleID="k8s-pod-network.bc2d658c0ed39ff320fda459439b61564ebcebc82e64082742176c054dda74e2" Workload="ip--172--31--30--240-k8s-calico--kube--controllers--557b5c79c9--mhmhq-eth0" May 17 00:39:50.036331 env[1634]: 2025-05-17 00:39:50.026 [INFO][5229] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="bc2d658c0ed39ff320fda459439b61564ebcebc82e64082742176c054dda74e2" HandleID="k8s-pod-network.bc2d658c0ed39ff320fda459439b61564ebcebc82e64082742176c054dda74e2" Workload="ip--172--31--30--240-k8s-calico--kube--controllers--557b5c79c9--mhmhq-eth0" May 17 00:39:50.036331 env[1634]: 2025-05-17 00:39:50.028 [INFO][5229] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. May 17 00:39:50.036331 env[1634]: 2025-05-17 00:39:50.032 [INFO][5219] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="bc2d658c0ed39ff320fda459439b61564ebcebc82e64082742176c054dda74e2" May 17 00:39:50.037201 env[1634]: time="2025-05-17T00:39:50.036362374Z" level=info msg="TearDown network for sandbox \"bc2d658c0ed39ff320fda459439b61564ebcebc82e64082742176c054dda74e2\" successfully" May 17 00:39:50.049320 env[1634]: time="2025-05-17T00:39:50.049274642Z" level=info msg="RemovePodSandbox \"bc2d658c0ed39ff320fda459439b61564ebcebc82e64082742176c054dda74e2\" returns successfully" May 17 00:39:50.052747 env[1634]: time="2025-05-17T00:39:50.052549143Z" level=info msg="StopPodSandbox for \"b0890c17061eccdf80ef3fdf6412a91f358237a85c6749e31cb054f4fa012ffd\"" May 17 00:39:50.154954 env[1634]: 2025-05-17 00:39:50.097 [WARNING][5243] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="b0890c17061eccdf80ef3fdf6412a91f358237a85c6749e31cb054f4fa012ffd" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--30--240-k8s-coredns--674b8bbfcf--mnzbk-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"118f3b5b-8621-4b7e-aceb-6cf8623494e9", ResourceVersion:"1022", Generation:0, CreationTimestamp:time.Date(2025, time.May, 17, 0, 38, 52, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-30-240", ContainerID:"6e76a72ee41e05f39214ca3623aa2997309cbc28e243632eccdf656ef2beb46d", Pod:"coredns-674b8bbfcf-mnzbk", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.105.67/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali583848cbf0c", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} May 17 00:39:50.154954 env[1634]: 2025-05-17 00:39:50.097 [INFO][5243] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="b0890c17061eccdf80ef3fdf6412a91f358237a85c6749e31cb054f4fa012ffd" May 17 00:39:50.154954 env[1634]: 2025-05-17 00:39:50.097 [INFO][5243] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="b0890c17061eccdf80ef3fdf6412a91f358237a85c6749e31cb054f4fa012ffd" iface="eth0" netns="" May 17 00:39:50.154954 env[1634]: 2025-05-17 00:39:50.097 [INFO][5243] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="b0890c17061eccdf80ef3fdf6412a91f358237a85c6749e31cb054f4fa012ffd" May 17 00:39:50.154954 env[1634]: 2025-05-17 00:39:50.100 [INFO][5243] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="b0890c17061eccdf80ef3fdf6412a91f358237a85c6749e31cb054f4fa012ffd" May 17 00:39:50.154954 env[1634]: 2025-05-17 00:39:50.139 [INFO][5250] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="b0890c17061eccdf80ef3fdf6412a91f358237a85c6749e31cb054f4fa012ffd" HandleID="k8s-pod-network.b0890c17061eccdf80ef3fdf6412a91f358237a85c6749e31cb054f4fa012ffd" Workload="ip--172--31--30--240-k8s-coredns--674b8bbfcf--mnzbk-eth0" May 17 00:39:50.154954 env[1634]: 2025-05-17 00:39:50.140 [INFO][5250] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. May 17 00:39:50.154954 env[1634]: 2025-05-17 00:39:50.140 [INFO][5250] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. May 17 00:39:50.154954 env[1634]: 2025-05-17 00:39:50.147 [WARNING][5250] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="b0890c17061eccdf80ef3fdf6412a91f358237a85c6749e31cb054f4fa012ffd" HandleID="k8s-pod-network.b0890c17061eccdf80ef3fdf6412a91f358237a85c6749e31cb054f4fa012ffd" Workload="ip--172--31--30--240-k8s-coredns--674b8bbfcf--mnzbk-eth0" May 17 00:39:50.154954 env[1634]: 2025-05-17 00:39:50.147 [INFO][5250] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="b0890c17061eccdf80ef3fdf6412a91f358237a85c6749e31cb054f4fa012ffd" HandleID="k8s-pod-network.b0890c17061eccdf80ef3fdf6412a91f358237a85c6749e31cb054f4fa012ffd" Workload="ip--172--31--30--240-k8s-coredns--674b8bbfcf--mnzbk-eth0" May 17 00:39:50.154954 env[1634]: 2025-05-17 00:39:50.149 [INFO][5250] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. May 17 00:39:50.154954 env[1634]: 2025-05-17 00:39:50.152 [INFO][5243] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="b0890c17061eccdf80ef3fdf6412a91f358237a85c6749e31cb054f4fa012ffd" May 17 00:39:50.156011 env[1634]: time="2025-05-17T00:39:50.155866843Z" level=info msg="TearDown network for sandbox \"b0890c17061eccdf80ef3fdf6412a91f358237a85c6749e31cb054f4fa012ffd\" successfully" May 17 00:39:50.156011 env[1634]: time="2025-05-17T00:39:50.155915252Z" level=info msg="StopPodSandbox for \"b0890c17061eccdf80ef3fdf6412a91f358237a85c6749e31cb054f4fa012ffd\" returns successfully" May 17 00:39:50.156510 env[1634]: time="2025-05-17T00:39:50.156476877Z" level=info msg="RemovePodSandbox for \"b0890c17061eccdf80ef3fdf6412a91f358237a85c6749e31cb054f4fa012ffd\"" May 17 00:39:50.156628 env[1634]: time="2025-05-17T00:39:50.156514565Z" level=info msg="Forcibly stopping sandbox \"b0890c17061eccdf80ef3fdf6412a91f358237a85c6749e31cb054f4fa012ffd\"" May 17 00:39:50.263311 env[1634]: 2025-05-17 00:39:50.217 [WARNING][5264] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="b0890c17061eccdf80ef3fdf6412a91f358237a85c6749e31cb054f4fa012ffd" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--30--240-k8s-coredns--674b8bbfcf--mnzbk-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"118f3b5b-8621-4b7e-aceb-6cf8623494e9", ResourceVersion:"1022", Generation:0, CreationTimestamp:time.Date(2025, time.May, 17, 0, 38, 52, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-30-240", ContainerID:"6e76a72ee41e05f39214ca3623aa2997309cbc28e243632eccdf656ef2beb46d", Pod:"coredns-674b8bbfcf-mnzbk", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.105.67/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali583848cbf0c", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} May 17 00:39:50.263311 env[1634]: 2025-05-17 00:39:50.217 [INFO][5264] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="b0890c17061eccdf80ef3fdf6412a91f358237a85c6749e31cb054f4fa012ffd" May 17 00:39:50.263311 env[1634]: 2025-05-17 00:39:50.217 [INFO][5264] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="b0890c17061eccdf80ef3fdf6412a91f358237a85c6749e31cb054f4fa012ffd" iface="eth0" netns="" May 17 00:39:50.263311 env[1634]: 2025-05-17 00:39:50.217 [INFO][5264] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="b0890c17061eccdf80ef3fdf6412a91f358237a85c6749e31cb054f4fa012ffd" May 17 00:39:50.263311 env[1634]: 2025-05-17 00:39:50.217 [INFO][5264] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="b0890c17061eccdf80ef3fdf6412a91f358237a85c6749e31cb054f4fa012ffd" May 17 00:39:50.263311 env[1634]: 2025-05-17 00:39:50.250 [INFO][5274] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="b0890c17061eccdf80ef3fdf6412a91f358237a85c6749e31cb054f4fa012ffd" HandleID="k8s-pod-network.b0890c17061eccdf80ef3fdf6412a91f358237a85c6749e31cb054f4fa012ffd" Workload="ip--172--31--30--240-k8s-coredns--674b8bbfcf--mnzbk-eth0" May 17 00:39:50.263311 env[1634]: 2025-05-17 00:39:50.250 [INFO][5274] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. May 17 00:39:50.263311 env[1634]: 2025-05-17 00:39:50.250 [INFO][5274] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. May 17 00:39:50.263311 env[1634]: 2025-05-17 00:39:50.257 [WARNING][5274] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="b0890c17061eccdf80ef3fdf6412a91f358237a85c6749e31cb054f4fa012ffd" HandleID="k8s-pod-network.b0890c17061eccdf80ef3fdf6412a91f358237a85c6749e31cb054f4fa012ffd" Workload="ip--172--31--30--240-k8s-coredns--674b8bbfcf--mnzbk-eth0" May 17 00:39:50.263311 env[1634]: 2025-05-17 00:39:50.257 [INFO][5274] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="b0890c17061eccdf80ef3fdf6412a91f358237a85c6749e31cb054f4fa012ffd" HandleID="k8s-pod-network.b0890c17061eccdf80ef3fdf6412a91f358237a85c6749e31cb054f4fa012ffd" Workload="ip--172--31--30--240-k8s-coredns--674b8bbfcf--mnzbk-eth0" May 17 00:39:50.263311 env[1634]: 2025-05-17 00:39:50.259 [INFO][5274] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. May 17 00:39:50.263311 env[1634]: 2025-05-17 00:39:50.261 [INFO][5264] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="b0890c17061eccdf80ef3fdf6412a91f358237a85c6749e31cb054f4fa012ffd" May 17 00:39:50.264026 env[1634]: time="2025-05-17T00:39:50.263963590Z" level=info msg="TearDown network for sandbox \"b0890c17061eccdf80ef3fdf6412a91f358237a85c6749e31cb054f4fa012ffd\" successfully" May 17 00:39:50.270701 env[1634]: time="2025-05-17T00:39:50.270645065Z" level=info msg="RemovePodSandbox \"b0890c17061eccdf80ef3fdf6412a91f358237a85c6749e31cb054f4fa012ffd\" returns successfully" May 17 00:39:50.271455 env[1634]: time="2025-05-17T00:39:50.271426790Z" level=info msg="StopPodSandbox for \"4a05250ffa992278cc3fa91d87356f3ce410516402be12593c6b89807bd78a09\"" May 17 00:39:50.352625 env[1634]: 2025-05-17 00:39:50.307 [WARNING][5288] cni-plugin/k8s.go 598: WorkloadEndpoint does not exist in the datastore, moving forward with the clean up ContainerID="4a05250ffa992278cc3fa91d87356f3ce410516402be12593c6b89807bd78a09" WorkloadEndpoint="ip--172--31--30--240-k8s-whisker--5478b65bdc--b722m-eth0" May 17 00:39:50.352625 env[1634]: 2025-05-17 00:39:50.307 [INFO][5288] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="4a05250ffa992278cc3fa91d87356f3ce410516402be12593c6b89807bd78a09" May 17 00:39:50.352625 env[1634]: 2025-05-17 00:39:50.307 [INFO][5288] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="4a05250ffa992278cc3fa91d87356f3ce410516402be12593c6b89807bd78a09" iface="eth0" netns="" May 17 00:39:50.352625 env[1634]: 2025-05-17 00:39:50.307 [INFO][5288] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="4a05250ffa992278cc3fa91d87356f3ce410516402be12593c6b89807bd78a09" May 17 00:39:50.352625 env[1634]: 2025-05-17 00:39:50.307 [INFO][5288] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="4a05250ffa992278cc3fa91d87356f3ce410516402be12593c6b89807bd78a09" May 17 00:39:50.352625 env[1634]: 2025-05-17 00:39:50.340 [INFO][5296] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="4a05250ffa992278cc3fa91d87356f3ce410516402be12593c6b89807bd78a09" HandleID="k8s-pod-network.4a05250ffa992278cc3fa91d87356f3ce410516402be12593c6b89807bd78a09" Workload="ip--172--31--30--240-k8s-whisker--5478b65bdc--b722m-eth0" May 17 00:39:50.352625 env[1634]: 2025-05-17 00:39:50.340 [INFO][5296] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. May 17 00:39:50.352625 env[1634]: 2025-05-17 00:39:50.340 [INFO][5296] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. May 17 00:39:50.352625 env[1634]: 2025-05-17 00:39:50.346 [WARNING][5296] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="4a05250ffa992278cc3fa91d87356f3ce410516402be12593c6b89807bd78a09" HandleID="k8s-pod-network.4a05250ffa992278cc3fa91d87356f3ce410516402be12593c6b89807bd78a09" Workload="ip--172--31--30--240-k8s-whisker--5478b65bdc--b722m-eth0" May 17 00:39:50.352625 env[1634]: 2025-05-17 00:39:50.346 [INFO][5296] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="4a05250ffa992278cc3fa91d87356f3ce410516402be12593c6b89807bd78a09" HandleID="k8s-pod-network.4a05250ffa992278cc3fa91d87356f3ce410516402be12593c6b89807bd78a09" Workload="ip--172--31--30--240-k8s-whisker--5478b65bdc--b722m-eth0" May 17 00:39:50.352625 env[1634]: 2025-05-17 00:39:50.348 [INFO][5296] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. May 17 00:39:50.352625 env[1634]: 2025-05-17 00:39:50.350 [INFO][5288] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="4a05250ffa992278cc3fa91d87356f3ce410516402be12593c6b89807bd78a09" May 17 00:39:50.353097 env[1634]: time="2025-05-17T00:39:50.352656746Z" level=info msg="TearDown network for sandbox \"4a05250ffa992278cc3fa91d87356f3ce410516402be12593c6b89807bd78a09\" successfully" May 17 00:39:50.353097 env[1634]: time="2025-05-17T00:39:50.352686289Z" level=info msg="StopPodSandbox for \"4a05250ffa992278cc3fa91d87356f3ce410516402be12593c6b89807bd78a09\" returns successfully" May 17 00:39:50.354327 env[1634]: time="2025-05-17T00:39:50.353342608Z" level=info msg="RemovePodSandbox for \"4a05250ffa992278cc3fa91d87356f3ce410516402be12593c6b89807bd78a09\"" May 17 00:39:50.354327 env[1634]: time="2025-05-17T00:39:50.353384879Z" level=info msg="Forcibly stopping sandbox \"4a05250ffa992278cc3fa91d87356f3ce410516402be12593c6b89807bd78a09\"" May 17 00:39:50.459497 env[1634]: 2025-05-17 00:39:50.413 [WARNING][5311] cni-plugin/k8s.go 598: WorkloadEndpoint does not exist in the datastore, moving forward with the clean up ContainerID="4a05250ffa992278cc3fa91d87356f3ce410516402be12593c6b89807bd78a09" WorkloadEndpoint="ip--172--31--30--240-k8s-whisker--5478b65bdc--b722m-eth0" May 17 00:39:50.459497 env[1634]: 2025-05-17 00:39:50.414 [INFO][5311] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="4a05250ffa992278cc3fa91d87356f3ce410516402be12593c6b89807bd78a09" May 17 00:39:50.459497 env[1634]: 2025-05-17 00:39:50.414 [INFO][5311] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="4a05250ffa992278cc3fa91d87356f3ce410516402be12593c6b89807bd78a09" iface="eth0" netns="" May 17 00:39:50.459497 env[1634]: 2025-05-17 00:39:50.414 [INFO][5311] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="4a05250ffa992278cc3fa91d87356f3ce410516402be12593c6b89807bd78a09" May 17 00:39:50.459497 env[1634]: 2025-05-17 00:39:50.414 [INFO][5311] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="4a05250ffa992278cc3fa91d87356f3ce410516402be12593c6b89807bd78a09" May 17 00:39:50.459497 env[1634]: 2025-05-17 00:39:50.437 [INFO][5319] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="4a05250ffa992278cc3fa91d87356f3ce410516402be12593c6b89807bd78a09" HandleID="k8s-pod-network.4a05250ffa992278cc3fa91d87356f3ce410516402be12593c6b89807bd78a09" Workload="ip--172--31--30--240-k8s-whisker--5478b65bdc--b722m-eth0" May 17 00:39:50.459497 env[1634]: 2025-05-17 00:39:50.437 [INFO][5319] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. May 17 00:39:50.459497 env[1634]: 2025-05-17 00:39:50.438 [INFO][5319] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. May 17 00:39:50.459497 env[1634]: 2025-05-17 00:39:50.446 [WARNING][5319] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="4a05250ffa992278cc3fa91d87356f3ce410516402be12593c6b89807bd78a09" HandleID="k8s-pod-network.4a05250ffa992278cc3fa91d87356f3ce410516402be12593c6b89807bd78a09" Workload="ip--172--31--30--240-k8s-whisker--5478b65bdc--b722m-eth0" May 17 00:39:50.459497 env[1634]: 2025-05-17 00:39:50.446 [INFO][5319] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="4a05250ffa992278cc3fa91d87356f3ce410516402be12593c6b89807bd78a09" HandleID="k8s-pod-network.4a05250ffa992278cc3fa91d87356f3ce410516402be12593c6b89807bd78a09" Workload="ip--172--31--30--240-k8s-whisker--5478b65bdc--b722m-eth0" May 17 00:39:50.459497 env[1634]: 2025-05-17 00:39:50.448 [INFO][5319] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. May 17 00:39:50.459497 env[1634]: 2025-05-17 00:39:50.450 [INFO][5311] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="4a05250ffa992278cc3fa91d87356f3ce410516402be12593c6b89807bd78a09" May 17 00:39:50.459497 env[1634]: time="2025-05-17T00:39:50.456951607Z" level=info msg="TearDown network for sandbox \"4a05250ffa992278cc3fa91d87356f3ce410516402be12593c6b89807bd78a09\" successfully" May 17 00:39:50.465628 env[1634]: time="2025-05-17T00:39:50.465578491Z" level=info msg="RemovePodSandbox \"4a05250ffa992278cc3fa91d87356f3ce410516402be12593c6b89807bd78a09\" returns successfully" May 17 00:39:50.466207 env[1634]: time="2025-05-17T00:39:50.466026841Z" level=info msg="StopPodSandbox for \"f72c29400ab7dcac47b5302348818191b393dad721d5927699a51057264f8d9b\"" May 17 00:39:50.545704 env[1634]: 2025-05-17 00:39:50.504 [WARNING][5333] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="f72c29400ab7dcac47b5302348818191b393dad721d5927699a51057264f8d9b" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--30--240-k8s-calico--apiserver--755c444ff4--j2rw2-eth0", GenerateName:"calico-apiserver-755c444ff4-", Namespace:"calico-apiserver", SelfLink:"", UID:"dddc5262-e1f3-4b01-bd21-570d31a85d68", ResourceVersion:"1076", Generation:0, CreationTimestamp:time.Date(2025, time.May, 17, 0, 39, 3, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"755c444ff4", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-30-240", ContainerID:"99aeb3fbda4050d2676666f2321a05e9ce7cff436b677225230ee8d363a8f7b5", Pod:"calico-apiserver-755c444ff4-j2rw2", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.105.69/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calib8fef7ddc3c", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} May 17 00:39:50.545704 env[1634]: 2025-05-17 00:39:50.504 [INFO][5333] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="f72c29400ab7dcac47b5302348818191b393dad721d5927699a51057264f8d9b" May 17 00:39:50.545704 env[1634]: 2025-05-17 00:39:50.504 [INFO][5333] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="f72c29400ab7dcac47b5302348818191b393dad721d5927699a51057264f8d9b" iface="eth0" netns="" May 17 00:39:50.545704 env[1634]: 2025-05-17 00:39:50.504 [INFO][5333] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="f72c29400ab7dcac47b5302348818191b393dad721d5927699a51057264f8d9b" May 17 00:39:50.545704 env[1634]: 2025-05-17 00:39:50.504 [INFO][5333] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="f72c29400ab7dcac47b5302348818191b393dad721d5927699a51057264f8d9b" May 17 00:39:50.545704 env[1634]: 2025-05-17 00:39:50.531 [INFO][5340] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="f72c29400ab7dcac47b5302348818191b393dad721d5927699a51057264f8d9b" HandleID="k8s-pod-network.f72c29400ab7dcac47b5302348818191b393dad721d5927699a51057264f8d9b" Workload="ip--172--31--30--240-k8s-calico--apiserver--755c444ff4--j2rw2-eth0" May 17 00:39:50.545704 env[1634]: 2025-05-17 00:39:50.531 [INFO][5340] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. May 17 00:39:50.545704 env[1634]: 2025-05-17 00:39:50.531 [INFO][5340] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. May 17 00:39:50.545704 env[1634]: 2025-05-17 00:39:50.539 [WARNING][5340] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="f72c29400ab7dcac47b5302348818191b393dad721d5927699a51057264f8d9b" HandleID="k8s-pod-network.f72c29400ab7dcac47b5302348818191b393dad721d5927699a51057264f8d9b" Workload="ip--172--31--30--240-k8s-calico--apiserver--755c444ff4--j2rw2-eth0" May 17 00:39:50.545704 env[1634]: 2025-05-17 00:39:50.539 [INFO][5340] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="f72c29400ab7dcac47b5302348818191b393dad721d5927699a51057264f8d9b" HandleID="k8s-pod-network.f72c29400ab7dcac47b5302348818191b393dad721d5927699a51057264f8d9b" Workload="ip--172--31--30--240-k8s-calico--apiserver--755c444ff4--j2rw2-eth0" May 17 00:39:50.545704 env[1634]: 2025-05-17 00:39:50.541 [INFO][5340] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. May 17 00:39:50.545704 env[1634]: 2025-05-17 00:39:50.543 [INFO][5333] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="f72c29400ab7dcac47b5302348818191b393dad721d5927699a51057264f8d9b" May 17 00:39:50.547612 env[1634]: time="2025-05-17T00:39:50.545733576Z" level=info msg="TearDown network for sandbox \"f72c29400ab7dcac47b5302348818191b393dad721d5927699a51057264f8d9b\" successfully" May 17 00:39:50.547612 env[1634]: time="2025-05-17T00:39:50.545764895Z" level=info msg="StopPodSandbox for \"f72c29400ab7dcac47b5302348818191b393dad721d5927699a51057264f8d9b\" returns successfully" May 17 00:39:50.547612 env[1634]: time="2025-05-17T00:39:50.546384660Z" level=info msg="RemovePodSandbox for \"f72c29400ab7dcac47b5302348818191b393dad721d5927699a51057264f8d9b\"" May 17 00:39:50.547612 env[1634]: time="2025-05-17T00:39:50.546418638Z" level=info msg="Forcibly stopping sandbox \"f72c29400ab7dcac47b5302348818191b393dad721d5927699a51057264f8d9b\"" May 17 00:39:50.640301 env[1634]: 2025-05-17 00:39:50.593 [WARNING][5355] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="f72c29400ab7dcac47b5302348818191b393dad721d5927699a51057264f8d9b" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--30--240-k8s-calico--apiserver--755c444ff4--j2rw2-eth0", GenerateName:"calico-apiserver-755c444ff4-", Namespace:"calico-apiserver", SelfLink:"", UID:"dddc5262-e1f3-4b01-bd21-570d31a85d68", ResourceVersion:"1076", Generation:0, CreationTimestamp:time.Date(2025, time.May, 17, 0, 39, 3, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"755c444ff4", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-30-240", ContainerID:"99aeb3fbda4050d2676666f2321a05e9ce7cff436b677225230ee8d363a8f7b5", Pod:"calico-apiserver-755c444ff4-j2rw2", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.105.69/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calib8fef7ddc3c", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} May 17 00:39:50.640301 env[1634]: 2025-05-17 00:39:50.594 [INFO][5355] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="f72c29400ab7dcac47b5302348818191b393dad721d5927699a51057264f8d9b" May 17 00:39:50.640301 env[1634]: 2025-05-17 00:39:50.594 [INFO][5355] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="f72c29400ab7dcac47b5302348818191b393dad721d5927699a51057264f8d9b" iface="eth0" netns="" May 17 00:39:50.640301 env[1634]: 2025-05-17 00:39:50.594 [INFO][5355] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="f72c29400ab7dcac47b5302348818191b393dad721d5927699a51057264f8d9b" May 17 00:39:50.640301 env[1634]: 2025-05-17 00:39:50.594 [INFO][5355] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="f72c29400ab7dcac47b5302348818191b393dad721d5927699a51057264f8d9b" May 17 00:39:50.640301 env[1634]: 2025-05-17 00:39:50.621 [INFO][5362] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="f72c29400ab7dcac47b5302348818191b393dad721d5927699a51057264f8d9b" HandleID="k8s-pod-network.f72c29400ab7dcac47b5302348818191b393dad721d5927699a51057264f8d9b" Workload="ip--172--31--30--240-k8s-calico--apiserver--755c444ff4--j2rw2-eth0" May 17 00:39:50.640301 env[1634]: 2025-05-17 00:39:50.621 [INFO][5362] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. May 17 00:39:50.640301 env[1634]: 2025-05-17 00:39:50.621 [INFO][5362] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. May 17 00:39:50.640301 env[1634]: 2025-05-17 00:39:50.632 [WARNING][5362] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="f72c29400ab7dcac47b5302348818191b393dad721d5927699a51057264f8d9b" HandleID="k8s-pod-network.f72c29400ab7dcac47b5302348818191b393dad721d5927699a51057264f8d9b" Workload="ip--172--31--30--240-k8s-calico--apiserver--755c444ff4--j2rw2-eth0" May 17 00:39:50.640301 env[1634]: 2025-05-17 00:39:50.632 [INFO][5362] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="f72c29400ab7dcac47b5302348818191b393dad721d5927699a51057264f8d9b" HandleID="k8s-pod-network.f72c29400ab7dcac47b5302348818191b393dad721d5927699a51057264f8d9b" Workload="ip--172--31--30--240-k8s-calico--apiserver--755c444ff4--j2rw2-eth0" May 17 00:39:50.640301 env[1634]: 2025-05-17 00:39:50.635 [INFO][5362] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. May 17 00:39:50.640301 env[1634]: 2025-05-17 00:39:50.637 [INFO][5355] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="f72c29400ab7dcac47b5302348818191b393dad721d5927699a51057264f8d9b" May 17 00:39:50.642702 env[1634]: time="2025-05-17T00:39:50.640338915Z" level=info msg="TearDown network for sandbox \"f72c29400ab7dcac47b5302348818191b393dad721d5927699a51057264f8d9b\" successfully" May 17 00:39:50.648319 env[1634]: time="2025-05-17T00:39:50.648257666Z" level=info msg="RemovePodSandbox \"f72c29400ab7dcac47b5302348818191b393dad721d5927699a51057264f8d9b\" returns successfully" May 17 00:39:50.648909 env[1634]: time="2025-05-17T00:39:50.648876770Z" level=info msg="StopPodSandbox for \"6a80adfe9ae8a6c3e70d543cb6bf0e438152a46b17a0e937c0e216de0af8c0a1\"" May 17 00:39:50.748248 env[1634]: 2025-05-17 00:39:50.691 [WARNING][5376] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="6a80adfe9ae8a6c3e70d543cb6bf0e438152a46b17a0e937c0e216de0af8c0a1" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--30--240-k8s-csi--node--driver--g8dpg-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"ccf5c16c-a554-4978-bf48-ec245cb3b696", ResourceVersion:"1017", Generation:0, CreationTimestamp:time.Date(2025, time.May, 17, 0, 39, 8, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"78f6f74485", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-30-240", ContainerID:"2420f9d78e3421bf79b1429832b2e7215d57d0ddac779e2593254d2b33e2e967", Pod:"csi-node-driver-g8dpg", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.105.71/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali69367080dbc", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} May 17 00:39:50.748248 env[1634]: 2025-05-17 00:39:50.691 [INFO][5376] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="6a80adfe9ae8a6c3e70d543cb6bf0e438152a46b17a0e937c0e216de0af8c0a1" May 17 00:39:50.748248 env[1634]: 2025-05-17 00:39:50.692 [INFO][5376] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="6a80adfe9ae8a6c3e70d543cb6bf0e438152a46b17a0e937c0e216de0af8c0a1" iface="eth0" netns="" May 17 00:39:50.748248 env[1634]: 2025-05-17 00:39:50.692 [INFO][5376] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="6a80adfe9ae8a6c3e70d543cb6bf0e438152a46b17a0e937c0e216de0af8c0a1" May 17 00:39:50.748248 env[1634]: 2025-05-17 00:39:50.692 [INFO][5376] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="6a80adfe9ae8a6c3e70d543cb6bf0e438152a46b17a0e937c0e216de0af8c0a1" May 17 00:39:50.748248 env[1634]: 2025-05-17 00:39:50.731 [INFO][5383] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="6a80adfe9ae8a6c3e70d543cb6bf0e438152a46b17a0e937c0e216de0af8c0a1" HandleID="k8s-pod-network.6a80adfe9ae8a6c3e70d543cb6bf0e438152a46b17a0e937c0e216de0af8c0a1" Workload="ip--172--31--30--240-k8s-csi--node--driver--g8dpg-eth0" May 17 00:39:50.748248 env[1634]: 2025-05-17 00:39:50.731 [INFO][5383] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. May 17 00:39:50.748248 env[1634]: 2025-05-17 00:39:50.731 [INFO][5383] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. May 17 00:39:50.748248 env[1634]: 2025-05-17 00:39:50.739 [WARNING][5383] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="6a80adfe9ae8a6c3e70d543cb6bf0e438152a46b17a0e937c0e216de0af8c0a1" HandleID="k8s-pod-network.6a80adfe9ae8a6c3e70d543cb6bf0e438152a46b17a0e937c0e216de0af8c0a1" Workload="ip--172--31--30--240-k8s-csi--node--driver--g8dpg-eth0" May 17 00:39:50.748248 env[1634]: 2025-05-17 00:39:50.739 [INFO][5383] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="6a80adfe9ae8a6c3e70d543cb6bf0e438152a46b17a0e937c0e216de0af8c0a1" HandleID="k8s-pod-network.6a80adfe9ae8a6c3e70d543cb6bf0e438152a46b17a0e937c0e216de0af8c0a1" Workload="ip--172--31--30--240-k8s-csi--node--driver--g8dpg-eth0" May 17 00:39:50.748248 env[1634]: 2025-05-17 00:39:50.741 [INFO][5383] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. May 17 00:39:50.748248 env[1634]: 2025-05-17 00:39:50.744 [INFO][5376] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="6a80adfe9ae8a6c3e70d543cb6bf0e438152a46b17a0e937c0e216de0af8c0a1" May 17 00:39:50.750455 env[1634]: time="2025-05-17T00:39:50.748210002Z" level=info msg="TearDown network for sandbox \"6a80adfe9ae8a6c3e70d543cb6bf0e438152a46b17a0e937c0e216de0af8c0a1\" successfully" May 17 00:39:50.750455 env[1634]: time="2025-05-17T00:39:50.749863929Z" level=info msg="StopPodSandbox for \"6a80adfe9ae8a6c3e70d543cb6bf0e438152a46b17a0e937c0e216de0af8c0a1\" returns successfully" May 17 00:39:50.750455 env[1634]: time="2025-05-17T00:39:50.750375796Z" level=info msg="RemovePodSandbox for \"6a80adfe9ae8a6c3e70d543cb6bf0e438152a46b17a0e937c0e216de0af8c0a1\"" May 17 00:39:50.750455 env[1634]: time="2025-05-17T00:39:50.750403188Z" level=info msg="Forcibly stopping sandbox \"6a80adfe9ae8a6c3e70d543cb6bf0e438152a46b17a0e937c0e216de0af8c0a1\"" May 17 00:39:50.836376 env[1634]: 2025-05-17 00:39:50.793 [WARNING][5397] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="6a80adfe9ae8a6c3e70d543cb6bf0e438152a46b17a0e937c0e216de0af8c0a1" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--30--240-k8s-csi--node--driver--g8dpg-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"ccf5c16c-a554-4978-bf48-ec245cb3b696", ResourceVersion:"1168", Generation:0, CreationTimestamp:time.Date(2025, time.May, 17, 0, 39, 8, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"78f6f74485", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-30-240", ContainerID:"2420f9d78e3421bf79b1429832b2e7215d57d0ddac779e2593254d2b33e2e967", Pod:"csi-node-driver-g8dpg", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.105.71/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali69367080dbc", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} May 17 00:39:50.836376 env[1634]: 2025-05-17 00:39:50.794 [INFO][5397] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="6a80adfe9ae8a6c3e70d543cb6bf0e438152a46b17a0e937c0e216de0af8c0a1" May 17 00:39:50.836376 env[1634]: 2025-05-17 00:39:50.794 [INFO][5397] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="6a80adfe9ae8a6c3e70d543cb6bf0e438152a46b17a0e937c0e216de0af8c0a1" iface="eth0" netns="" May 17 00:39:50.836376 env[1634]: 2025-05-17 00:39:50.794 [INFO][5397] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="6a80adfe9ae8a6c3e70d543cb6bf0e438152a46b17a0e937c0e216de0af8c0a1" May 17 00:39:50.836376 env[1634]: 2025-05-17 00:39:50.794 [INFO][5397] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="6a80adfe9ae8a6c3e70d543cb6bf0e438152a46b17a0e937c0e216de0af8c0a1" May 17 00:39:50.836376 env[1634]: 2025-05-17 00:39:50.823 [INFO][5404] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="6a80adfe9ae8a6c3e70d543cb6bf0e438152a46b17a0e937c0e216de0af8c0a1" HandleID="k8s-pod-network.6a80adfe9ae8a6c3e70d543cb6bf0e438152a46b17a0e937c0e216de0af8c0a1" Workload="ip--172--31--30--240-k8s-csi--node--driver--g8dpg-eth0" May 17 00:39:50.836376 env[1634]: 2025-05-17 00:39:50.824 [INFO][5404] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. May 17 00:39:50.836376 env[1634]: 2025-05-17 00:39:50.824 [INFO][5404] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. May 17 00:39:50.836376 env[1634]: 2025-05-17 00:39:50.830 [WARNING][5404] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="6a80adfe9ae8a6c3e70d543cb6bf0e438152a46b17a0e937c0e216de0af8c0a1" HandleID="k8s-pod-network.6a80adfe9ae8a6c3e70d543cb6bf0e438152a46b17a0e937c0e216de0af8c0a1" Workload="ip--172--31--30--240-k8s-csi--node--driver--g8dpg-eth0" May 17 00:39:50.836376 env[1634]: 2025-05-17 00:39:50.831 [INFO][5404] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="6a80adfe9ae8a6c3e70d543cb6bf0e438152a46b17a0e937c0e216de0af8c0a1" HandleID="k8s-pod-network.6a80adfe9ae8a6c3e70d543cb6bf0e438152a46b17a0e937c0e216de0af8c0a1" Workload="ip--172--31--30--240-k8s-csi--node--driver--g8dpg-eth0" May 17 00:39:50.836376 env[1634]: 2025-05-17 00:39:50.832 [INFO][5404] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. May 17 00:39:50.836376 env[1634]: 2025-05-17 00:39:50.834 [INFO][5397] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="6a80adfe9ae8a6c3e70d543cb6bf0e438152a46b17a0e937c0e216de0af8c0a1" May 17 00:39:50.839065 env[1634]: time="2025-05-17T00:39:50.836390221Z" level=info msg="TearDown network for sandbox \"6a80adfe9ae8a6c3e70d543cb6bf0e438152a46b17a0e937c0e216de0af8c0a1\" successfully" May 17 00:39:50.842860 env[1634]: time="2025-05-17T00:39:50.842817119Z" level=info msg="RemovePodSandbox \"6a80adfe9ae8a6c3e70d543cb6bf0e438152a46b17a0e937c0e216de0af8c0a1\" returns successfully" May 17 00:39:50.844483 env[1634]: time="2025-05-17T00:39:50.844455589Z" level=info msg="StopPodSandbox for \"b63403821bb98f1a36e09917744185b1e1d620311f3eecdcf84978e46e4c2d4a\"" May 17 00:39:50.941366 env[1634]: 2025-05-17 00:39:50.889 [WARNING][5419] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="b63403821bb98f1a36e09917744185b1e1d620311f3eecdcf84978e46e4c2d4a" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--30--240-k8s-calico--apiserver--755c444ff4--vrn79-eth0", GenerateName:"calico-apiserver-755c444ff4-", Namespace:"calico-apiserver", SelfLink:"", UID:"127d3909-e9a9-4f5a-ade7-8eda212d791f", ResourceVersion:"1067", Generation:0, CreationTimestamp:time.Date(2025, time.May, 17, 0, 39, 3, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"755c444ff4", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-30-240", ContainerID:"8d868d9c3e4b77b85d1efa7c4bcfdabecb4bf2e61a058f8dd84ec4feaf296d67", Pod:"calico-apiserver-755c444ff4-vrn79", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.105.66/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"califbd64be8d0c", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} May 17 00:39:50.941366 env[1634]: 2025-05-17 00:39:50.889 [INFO][5419] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="b63403821bb98f1a36e09917744185b1e1d620311f3eecdcf84978e46e4c2d4a" May 17 00:39:50.941366 env[1634]: 2025-05-17 00:39:50.889 [INFO][5419] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="b63403821bb98f1a36e09917744185b1e1d620311f3eecdcf84978e46e4c2d4a" iface="eth0" netns="" May 17 00:39:50.941366 env[1634]: 2025-05-17 00:39:50.889 [INFO][5419] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="b63403821bb98f1a36e09917744185b1e1d620311f3eecdcf84978e46e4c2d4a" May 17 00:39:50.941366 env[1634]: 2025-05-17 00:39:50.889 [INFO][5419] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="b63403821bb98f1a36e09917744185b1e1d620311f3eecdcf84978e46e4c2d4a" May 17 00:39:50.941366 env[1634]: 2025-05-17 00:39:50.926 [INFO][5426] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="b63403821bb98f1a36e09917744185b1e1d620311f3eecdcf84978e46e4c2d4a" HandleID="k8s-pod-network.b63403821bb98f1a36e09917744185b1e1d620311f3eecdcf84978e46e4c2d4a" Workload="ip--172--31--30--240-k8s-calico--apiserver--755c444ff4--vrn79-eth0" May 17 00:39:50.941366 env[1634]: 2025-05-17 00:39:50.926 [INFO][5426] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. May 17 00:39:50.941366 env[1634]: 2025-05-17 00:39:50.926 [INFO][5426] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. May 17 00:39:50.941366 env[1634]: 2025-05-17 00:39:50.935 [WARNING][5426] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="b63403821bb98f1a36e09917744185b1e1d620311f3eecdcf84978e46e4c2d4a" HandleID="k8s-pod-network.b63403821bb98f1a36e09917744185b1e1d620311f3eecdcf84978e46e4c2d4a" Workload="ip--172--31--30--240-k8s-calico--apiserver--755c444ff4--vrn79-eth0" May 17 00:39:50.941366 env[1634]: 2025-05-17 00:39:50.936 [INFO][5426] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="b63403821bb98f1a36e09917744185b1e1d620311f3eecdcf84978e46e4c2d4a" HandleID="k8s-pod-network.b63403821bb98f1a36e09917744185b1e1d620311f3eecdcf84978e46e4c2d4a" Workload="ip--172--31--30--240-k8s-calico--apiserver--755c444ff4--vrn79-eth0" May 17 00:39:50.941366 env[1634]: 2025-05-17 00:39:50.937 [INFO][5426] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. May 17 00:39:50.941366 env[1634]: 2025-05-17 00:39:50.939 [INFO][5419] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="b63403821bb98f1a36e09917744185b1e1d620311f3eecdcf84978e46e4c2d4a" May 17 00:39:50.942943 env[1634]: time="2025-05-17T00:39:50.941849467Z" level=info msg="TearDown network for sandbox \"b63403821bb98f1a36e09917744185b1e1d620311f3eecdcf84978e46e4c2d4a\" successfully" May 17 00:39:50.942943 env[1634]: time="2025-05-17T00:39:50.941880459Z" level=info msg="StopPodSandbox for \"b63403821bb98f1a36e09917744185b1e1d620311f3eecdcf84978e46e4c2d4a\" returns successfully" May 17 00:39:50.942943 env[1634]: time="2025-05-17T00:39:50.942377875Z" level=info msg="RemovePodSandbox for \"b63403821bb98f1a36e09917744185b1e1d620311f3eecdcf84978e46e4c2d4a\"" May 17 00:39:50.942943 env[1634]: time="2025-05-17T00:39:50.942406274Z" level=info msg="Forcibly stopping sandbox \"b63403821bb98f1a36e09917744185b1e1d620311f3eecdcf84978e46e4c2d4a\"" May 17 00:39:51.025074 env[1634]: 2025-05-17 00:39:50.981 [WARNING][5440] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="b63403821bb98f1a36e09917744185b1e1d620311f3eecdcf84978e46e4c2d4a" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--30--240-k8s-calico--apiserver--755c444ff4--vrn79-eth0", GenerateName:"calico-apiserver-755c444ff4-", Namespace:"calico-apiserver", SelfLink:"", UID:"127d3909-e9a9-4f5a-ade7-8eda212d791f", ResourceVersion:"1067", Generation:0, CreationTimestamp:time.Date(2025, time.May, 17, 0, 39, 3, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"755c444ff4", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-30-240", ContainerID:"8d868d9c3e4b77b85d1efa7c4bcfdabecb4bf2e61a058f8dd84ec4feaf296d67", Pod:"calico-apiserver-755c444ff4-vrn79", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.105.66/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"califbd64be8d0c", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} May 17 00:39:51.025074 env[1634]: 2025-05-17 00:39:50.982 [INFO][5440] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="b63403821bb98f1a36e09917744185b1e1d620311f3eecdcf84978e46e4c2d4a" May 17 00:39:51.025074 env[1634]: 2025-05-17 00:39:50.982 [INFO][5440] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="b63403821bb98f1a36e09917744185b1e1d620311f3eecdcf84978e46e4c2d4a" iface="eth0" netns="" May 17 00:39:51.025074 env[1634]: 2025-05-17 00:39:50.982 [INFO][5440] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="b63403821bb98f1a36e09917744185b1e1d620311f3eecdcf84978e46e4c2d4a" May 17 00:39:51.025074 env[1634]: 2025-05-17 00:39:50.982 [INFO][5440] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="b63403821bb98f1a36e09917744185b1e1d620311f3eecdcf84978e46e4c2d4a" May 17 00:39:51.025074 env[1634]: 2025-05-17 00:39:51.008 [INFO][5448] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="b63403821bb98f1a36e09917744185b1e1d620311f3eecdcf84978e46e4c2d4a" HandleID="k8s-pod-network.b63403821bb98f1a36e09917744185b1e1d620311f3eecdcf84978e46e4c2d4a" Workload="ip--172--31--30--240-k8s-calico--apiserver--755c444ff4--vrn79-eth0" May 17 00:39:51.025074 env[1634]: 2025-05-17 00:39:51.008 [INFO][5448] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. May 17 00:39:51.025074 env[1634]: 2025-05-17 00:39:51.008 [INFO][5448] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. May 17 00:39:51.025074 env[1634]: 2025-05-17 00:39:51.017 [WARNING][5448] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="b63403821bb98f1a36e09917744185b1e1d620311f3eecdcf84978e46e4c2d4a" HandleID="k8s-pod-network.b63403821bb98f1a36e09917744185b1e1d620311f3eecdcf84978e46e4c2d4a" Workload="ip--172--31--30--240-k8s-calico--apiserver--755c444ff4--vrn79-eth0" May 17 00:39:51.025074 env[1634]: 2025-05-17 00:39:51.017 [INFO][5448] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="b63403821bb98f1a36e09917744185b1e1d620311f3eecdcf84978e46e4c2d4a" HandleID="k8s-pod-network.b63403821bb98f1a36e09917744185b1e1d620311f3eecdcf84978e46e4c2d4a" Workload="ip--172--31--30--240-k8s-calico--apiserver--755c444ff4--vrn79-eth0" May 17 00:39:51.025074 env[1634]: 2025-05-17 00:39:51.019 [INFO][5448] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. May 17 00:39:51.025074 env[1634]: 2025-05-17 00:39:51.022 [INFO][5440] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="b63403821bb98f1a36e09917744185b1e1d620311f3eecdcf84978e46e4c2d4a" May 17 00:39:51.027266 env[1634]: time="2025-05-17T00:39:51.025043144Z" level=info msg="TearDown network for sandbox \"b63403821bb98f1a36e09917744185b1e1d620311f3eecdcf84978e46e4c2d4a\" successfully" May 17 00:39:51.034519 env[1634]: time="2025-05-17T00:39:51.034471649Z" level=info msg="RemovePodSandbox \"b63403821bb98f1a36e09917744185b1e1d620311f3eecdcf84978e46e4c2d4a\" returns successfully" May 17 00:39:51.035347 env[1634]: time="2025-05-17T00:39:51.035306747Z" level=info msg="StopPodSandbox for \"1a626d650958c81e04f69095e4a8fff83ff1db2e2f084819d7ce4818043c475a\"" May 17 00:39:51.130696 env[1634]: 2025-05-17 00:39:51.075 [WARNING][5462] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="1a626d650958c81e04f69095e4a8fff83ff1db2e2f084819d7ce4818043c475a" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--30--240-k8s-coredns--674b8bbfcf--57lkx-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"16d78791-e942-48bb-9e38-9ea0ea348207", ResourceVersion:"1037", Generation:0, CreationTimestamp:time.Date(2025, time.May, 17, 0, 38, 52, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-30-240", ContainerID:"b9932f88bb62792bb9bd27f14154de9c8a6e1ddbc8796e79271131210b1729d6", Pod:"coredns-674b8bbfcf-57lkx", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.105.72/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali30917f858f9", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} May 17 00:39:51.130696 env[1634]: 2025-05-17 00:39:51.076 [INFO][5462] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="1a626d650958c81e04f69095e4a8fff83ff1db2e2f084819d7ce4818043c475a" May 17 00:39:51.130696 env[1634]: 2025-05-17 00:39:51.076 [INFO][5462] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="1a626d650958c81e04f69095e4a8fff83ff1db2e2f084819d7ce4818043c475a" iface="eth0" netns="" May 17 00:39:51.130696 env[1634]: 2025-05-17 00:39:51.076 [INFO][5462] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="1a626d650958c81e04f69095e4a8fff83ff1db2e2f084819d7ce4818043c475a" May 17 00:39:51.130696 env[1634]: 2025-05-17 00:39:51.076 [INFO][5462] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="1a626d650958c81e04f69095e4a8fff83ff1db2e2f084819d7ce4818043c475a" May 17 00:39:51.130696 env[1634]: 2025-05-17 00:39:51.112 [INFO][5469] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="1a626d650958c81e04f69095e4a8fff83ff1db2e2f084819d7ce4818043c475a" HandleID="k8s-pod-network.1a626d650958c81e04f69095e4a8fff83ff1db2e2f084819d7ce4818043c475a" Workload="ip--172--31--30--240-k8s-coredns--674b8bbfcf--57lkx-eth0" May 17 00:39:51.130696 env[1634]: 2025-05-17 00:39:51.112 [INFO][5469] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. May 17 00:39:51.130696 env[1634]: 2025-05-17 00:39:51.112 [INFO][5469] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. May 17 00:39:51.130696 env[1634]: 2025-05-17 00:39:51.122 [WARNING][5469] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="1a626d650958c81e04f69095e4a8fff83ff1db2e2f084819d7ce4818043c475a" HandleID="k8s-pod-network.1a626d650958c81e04f69095e4a8fff83ff1db2e2f084819d7ce4818043c475a" Workload="ip--172--31--30--240-k8s-coredns--674b8bbfcf--57lkx-eth0" May 17 00:39:51.130696 env[1634]: 2025-05-17 00:39:51.122 [INFO][5469] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="1a626d650958c81e04f69095e4a8fff83ff1db2e2f084819d7ce4818043c475a" HandleID="k8s-pod-network.1a626d650958c81e04f69095e4a8fff83ff1db2e2f084819d7ce4818043c475a" Workload="ip--172--31--30--240-k8s-coredns--674b8bbfcf--57lkx-eth0" May 17 00:39:51.130696 env[1634]: 2025-05-17 00:39:51.125 [INFO][5469] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. May 17 00:39:51.130696 env[1634]: 2025-05-17 00:39:51.128 [INFO][5462] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="1a626d650958c81e04f69095e4a8fff83ff1db2e2f084819d7ce4818043c475a" May 17 00:39:51.131465 env[1634]: time="2025-05-17T00:39:51.130724573Z" level=info msg="TearDown network for sandbox \"1a626d650958c81e04f69095e4a8fff83ff1db2e2f084819d7ce4818043c475a\" successfully" May 17 00:39:51.131465 env[1634]: time="2025-05-17T00:39:51.130756031Z" level=info msg="StopPodSandbox for \"1a626d650958c81e04f69095e4a8fff83ff1db2e2f084819d7ce4818043c475a\" returns successfully" May 17 00:39:51.131734 env[1634]: time="2025-05-17T00:39:51.131708014Z" level=info msg="RemovePodSandbox for \"1a626d650958c81e04f69095e4a8fff83ff1db2e2f084819d7ce4818043c475a\"" May 17 00:39:51.131950 env[1634]: time="2025-05-17T00:39:51.131892339Z" level=info msg="Forcibly stopping sandbox \"1a626d650958c81e04f69095e4a8fff83ff1db2e2f084819d7ce4818043c475a\"" May 17 00:39:51.141138 kubelet[2516]: I0517 00:39:51.139388 2516 csi_plugin.go:106] kubernetes.io/csi: Trying to validate a new CSI Driver with name: csi.tigera.io endpoint: /var/lib/kubelet/plugins/csi.tigera.io/csi.sock versions: 1.0.0 May 17 00:39:51.141138 kubelet[2516]: I0517 00:39:51.141109 2516 csi_plugin.go:119] kubernetes.io/csi: Register new plugin with name: csi.tigera.io at endpoint: /var/lib/kubelet/plugins/csi.tigera.io/csi.sock May 17 00:39:51.251423 env[1634]: 2025-05-17 00:39:51.184 [WARNING][5483] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="1a626d650958c81e04f69095e4a8fff83ff1db2e2f084819d7ce4818043c475a" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--30--240-k8s-coredns--674b8bbfcf--57lkx-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"16d78791-e942-48bb-9e38-9ea0ea348207", ResourceVersion:"1037", Generation:0, CreationTimestamp:time.Date(2025, time.May, 17, 0, 38, 52, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-30-240", ContainerID:"b9932f88bb62792bb9bd27f14154de9c8a6e1ddbc8796e79271131210b1729d6", Pod:"coredns-674b8bbfcf-57lkx", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.105.72/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali30917f858f9", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} May 17 00:39:51.251423 env[1634]: 2025-05-17 00:39:51.185 [INFO][5483] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="1a626d650958c81e04f69095e4a8fff83ff1db2e2f084819d7ce4818043c475a" May 17 00:39:51.251423 env[1634]: 2025-05-17 00:39:51.189 [INFO][5483] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="1a626d650958c81e04f69095e4a8fff83ff1db2e2f084819d7ce4818043c475a" iface="eth0" netns="" May 17 00:39:51.251423 env[1634]: 2025-05-17 00:39:51.190 [INFO][5483] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="1a626d650958c81e04f69095e4a8fff83ff1db2e2f084819d7ce4818043c475a" May 17 00:39:51.251423 env[1634]: 2025-05-17 00:39:51.190 [INFO][5483] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="1a626d650958c81e04f69095e4a8fff83ff1db2e2f084819d7ce4818043c475a" May 17 00:39:51.251423 env[1634]: 2025-05-17 00:39:51.231 [INFO][5490] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="1a626d650958c81e04f69095e4a8fff83ff1db2e2f084819d7ce4818043c475a" HandleID="k8s-pod-network.1a626d650958c81e04f69095e4a8fff83ff1db2e2f084819d7ce4818043c475a" Workload="ip--172--31--30--240-k8s-coredns--674b8bbfcf--57lkx-eth0" May 17 00:39:51.251423 env[1634]: 2025-05-17 00:39:51.232 [INFO][5490] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. May 17 00:39:51.251423 env[1634]: 2025-05-17 00:39:51.232 [INFO][5490] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. May 17 00:39:51.251423 env[1634]: 2025-05-17 00:39:51.240 [WARNING][5490] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="1a626d650958c81e04f69095e4a8fff83ff1db2e2f084819d7ce4818043c475a" HandleID="k8s-pod-network.1a626d650958c81e04f69095e4a8fff83ff1db2e2f084819d7ce4818043c475a" Workload="ip--172--31--30--240-k8s-coredns--674b8bbfcf--57lkx-eth0" May 17 00:39:51.251423 env[1634]: 2025-05-17 00:39:51.240 [INFO][5490] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="1a626d650958c81e04f69095e4a8fff83ff1db2e2f084819d7ce4818043c475a" HandleID="k8s-pod-network.1a626d650958c81e04f69095e4a8fff83ff1db2e2f084819d7ce4818043c475a" Workload="ip--172--31--30--240-k8s-coredns--674b8bbfcf--57lkx-eth0" May 17 00:39:51.251423 env[1634]: 2025-05-17 00:39:51.244 [INFO][5490] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. May 17 00:39:51.251423 env[1634]: 2025-05-17 00:39:51.247 [INFO][5483] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="1a626d650958c81e04f69095e4a8fff83ff1db2e2f084819d7ce4818043c475a" May 17 00:39:51.251423 env[1634]: time="2025-05-17T00:39:51.250083706Z" level=info msg="TearDown network for sandbox \"1a626d650958c81e04f69095e4a8fff83ff1db2e2f084819d7ce4818043c475a\" successfully" May 17 00:39:51.259632 env[1634]: time="2025-05-17T00:39:51.258826593Z" level=info msg="RemovePodSandbox \"1a626d650958c81e04f69095e4a8fff83ff1db2e2f084819d7ce4818043c475a\" returns successfully" May 17 00:39:51.267880 env[1634]: time="2025-05-17T00:39:51.267826747Z" level=info msg="StopPodSandbox for \"2d982bb0c54d82a0eb9ac6679458b41ef0396c928f4b44e6521a8bc4eddb39ff\"" May 17 00:39:51.366092 env[1634]: 2025-05-17 00:39:51.327 [WARNING][5504] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="2d982bb0c54d82a0eb9ac6679458b41ef0396c928f4b44e6521a8bc4eddb39ff" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--30--240-k8s-goldmane--78d55f7ddc--d97gj-eth0", GenerateName:"goldmane-78d55f7ddc-", Namespace:"calico-system", SelfLink:"", UID:"3ebcad15-5d11-4ed3-b1bb-3bd7f1c5d1af", ResourceVersion:"1101", Generation:0, CreationTimestamp:time.Date(2025, time.May, 17, 0, 39, 7, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"78d55f7ddc", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-30-240", ContainerID:"c5389b9734c0cad02d240507469d8521c76cf3330ae5f81cd6f1ef31ef6493e2", Pod:"goldmane-78d55f7ddc-d97gj", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.105.70/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"cali958124fc6a9", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} May 17 00:39:51.366092 env[1634]: 2025-05-17 00:39:51.327 [INFO][5504] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="2d982bb0c54d82a0eb9ac6679458b41ef0396c928f4b44e6521a8bc4eddb39ff" May 17 00:39:51.366092 env[1634]: 2025-05-17 00:39:51.327 [INFO][5504] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="2d982bb0c54d82a0eb9ac6679458b41ef0396c928f4b44e6521a8bc4eddb39ff" iface="eth0" netns="" May 17 00:39:51.366092 env[1634]: 2025-05-17 00:39:51.328 [INFO][5504] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="2d982bb0c54d82a0eb9ac6679458b41ef0396c928f4b44e6521a8bc4eddb39ff" May 17 00:39:51.366092 env[1634]: 2025-05-17 00:39:51.328 [INFO][5504] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="2d982bb0c54d82a0eb9ac6679458b41ef0396c928f4b44e6521a8bc4eddb39ff" May 17 00:39:51.366092 env[1634]: 2025-05-17 00:39:51.352 [INFO][5511] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="2d982bb0c54d82a0eb9ac6679458b41ef0396c928f4b44e6521a8bc4eddb39ff" HandleID="k8s-pod-network.2d982bb0c54d82a0eb9ac6679458b41ef0396c928f4b44e6521a8bc4eddb39ff" Workload="ip--172--31--30--240-k8s-goldmane--78d55f7ddc--d97gj-eth0" May 17 00:39:51.366092 env[1634]: 2025-05-17 00:39:51.352 [INFO][5511] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. May 17 00:39:51.366092 env[1634]: 2025-05-17 00:39:51.352 [INFO][5511] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. May 17 00:39:51.366092 env[1634]: 2025-05-17 00:39:51.360 [WARNING][5511] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="2d982bb0c54d82a0eb9ac6679458b41ef0396c928f4b44e6521a8bc4eddb39ff" HandleID="k8s-pod-network.2d982bb0c54d82a0eb9ac6679458b41ef0396c928f4b44e6521a8bc4eddb39ff" Workload="ip--172--31--30--240-k8s-goldmane--78d55f7ddc--d97gj-eth0" May 17 00:39:51.366092 env[1634]: 2025-05-17 00:39:51.360 [INFO][5511] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="2d982bb0c54d82a0eb9ac6679458b41ef0396c928f4b44e6521a8bc4eddb39ff" HandleID="k8s-pod-network.2d982bb0c54d82a0eb9ac6679458b41ef0396c928f4b44e6521a8bc4eddb39ff" Workload="ip--172--31--30--240-k8s-goldmane--78d55f7ddc--d97gj-eth0" May 17 00:39:51.366092 env[1634]: 2025-05-17 00:39:51.362 [INFO][5511] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. May 17 00:39:51.366092 env[1634]: 2025-05-17 00:39:51.364 [INFO][5504] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="2d982bb0c54d82a0eb9ac6679458b41ef0396c928f4b44e6521a8bc4eddb39ff" May 17 00:39:51.367398 env[1634]: time="2025-05-17T00:39:51.366508171Z" level=info msg="TearDown network for sandbox \"2d982bb0c54d82a0eb9ac6679458b41ef0396c928f4b44e6521a8bc4eddb39ff\" successfully" May 17 00:39:51.367398 env[1634]: time="2025-05-17T00:39:51.366541298Z" level=info msg="StopPodSandbox for \"2d982bb0c54d82a0eb9ac6679458b41ef0396c928f4b44e6521a8bc4eddb39ff\" returns successfully" May 17 00:39:51.367636 env[1634]: time="2025-05-17T00:39:51.367604448Z" level=info msg="RemovePodSandbox for \"2d982bb0c54d82a0eb9ac6679458b41ef0396c928f4b44e6521a8bc4eddb39ff\"" May 17 00:39:51.367816 env[1634]: time="2025-05-17T00:39:51.367637986Z" level=info msg="Forcibly stopping sandbox \"2d982bb0c54d82a0eb9ac6679458b41ef0396c928f4b44e6521a8bc4eddb39ff\"" May 17 00:39:51.466615 env[1634]: 2025-05-17 00:39:51.406 [WARNING][5527] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="2d982bb0c54d82a0eb9ac6679458b41ef0396c928f4b44e6521a8bc4eddb39ff" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--30--240-k8s-goldmane--78d55f7ddc--d97gj-eth0", GenerateName:"goldmane-78d55f7ddc-", Namespace:"calico-system", SelfLink:"", UID:"3ebcad15-5d11-4ed3-b1bb-3bd7f1c5d1af", ResourceVersion:"1101", Generation:0, CreationTimestamp:time.Date(2025, time.May, 17, 0, 39, 7, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"78d55f7ddc", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-30-240", ContainerID:"c5389b9734c0cad02d240507469d8521c76cf3330ae5f81cd6f1ef31ef6493e2", Pod:"goldmane-78d55f7ddc-d97gj", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.105.70/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"cali958124fc6a9", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} May 17 00:39:51.466615 env[1634]: 2025-05-17 00:39:51.406 [INFO][5527] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="2d982bb0c54d82a0eb9ac6679458b41ef0396c928f4b44e6521a8bc4eddb39ff" May 17 00:39:51.466615 env[1634]: 2025-05-17 00:39:51.406 [INFO][5527] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="2d982bb0c54d82a0eb9ac6679458b41ef0396c928f4b44e6521a8bc4eddb39ff" iface="eth0" netns="" May 17 00:39:51.466615 env[1634]: 2025-05-17 00:39:51.406 [INFO][5527] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="2d982bb0c54d82a0eb9ac6679458b41ef0396c928f4b44e6521a8bc4eddb39ff" May 17 00:39:51.466615 env[1634]: 2025-05-17 00:39:51.406 [INFO][5527] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="2d982bb0c54d82a0eb9ac6679458b41ef0396c928f4b44e6521a8bc4eddb39ff" May 17 00:39:51.466615 env[1634]: 2025-05-17 00:39:51.445 [INFO][5534] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="2d982bb0c54d82a0eb9ac6679458b41ef0396c928f4b44e6521a8bc4eddb39ff" HandleID="k8s-pod-network.2d982bb0c54d82a0eb9ac6679458b41ef0396c928f4b44e6521a8bc4eddb39ff" Workload="ip--172--31--30--240-k8s-goldmane--78d55f7ddc--d97gj-eth0" May 17 00:39:51.466615 env[1634]: 2025-05-17 00:39:51.451 [INFO][5534] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. May 17 00:39:51.466615 env[1634]: 2025-05-17 00:39:51.452 [INFO][5534] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. May 17 00:39:51.466615 env[1634]: 2025-05-17 00:39:51.460 [WARNING][5534] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="2d982bb0c54d82a0eb9ac6679458b41ef0396c928f4b44e6521a8bc4eddb39ff" HandleID="k8s-pod-network.2d982bb0c54d82a0eb9ac6679458b41ef0396c928f4b44e6521a8bc4eddb39ff" Workload="ip--172--31--30--240-k8s-goldmane--78d55f7ddc--d97gj-eth0" May 17 00:39:51.466615 env[1634]: 2025-05-17 00:39:51.460 [INFO][5534] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="2d982bb0c54d82a0eb9ac6679458b41ef0396c928f4b44e6521a8bc4eddb39ff" HandleID="k8s-pod-network.2d982bb0c54d82a0eb9ac6679458b41ef0396c928f4b44e6521a8bc4eddb39ff" Workload="ip--172--31--30--240-k8s-goldmane--78d55f7ddc--d97gj-eth0" May 17 00:39:51.466615 env[1634]: 2025-05-17 00:39:51.461 [INFO][5534] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. May 17 00:39:51.466615 env[1634]: 2025-05-17 00:39:51.464 [INFO][5527] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="2d982bb0c54d82a0eb9ac6679458b41ef0396c928f4b44e6521a8bc4eddb39ff" May 17 00:39:51.467435 env[1634]: time="2025-05-17T00:39:51.466664515Z" level=info msg="TearDown network for sandbox \"2d982bb0c54d82a0eb9ac6679458b41ef0396c928f4b44e6521a8bc4eddb39ff\" successfully" May 17 00:39:51.474662 env[1634]: time="2025-05-17T00:39:51.474599660Z" level=info msg="RemovePodSandbox \"2d982bb0c54d82a0eb9ac6679458b41ef0396c928f4b44e6521a8bc4eddb39ff\" returns successfully" May 17 00:39:54.877417 systemd[1]: Started sshd@12-172.31.30.240:22-139.178.68.195:57080.service. May 17 00:39:54.890371 kernel: kauditd_printk_skb: 47 callbacks suppressed May 17 00:39:54.890471 kernel: audit: type=1130 audit(1747442394.878:1413): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-172.31.30.240:22-139.178.68.195:57080 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:39:54.878000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-172.31.30.240:22-139.178.68.195:57080 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:39:55.166000 audit[5573]: USER_ACCT pid=5573 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' May 17 00:39:55.172492 sshd[5573]: Accepted publickey for core from 139.178.68.195 port 57080 ssh2: RSA SHA256:I5cGDzOOPhNK8a4J4SFPiuUQivu3TK8ocBzhX4AkN30 May 17 00:39:55.174000 audit[5573]: CRED_ACQ pid=5573 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' May 17 00:39:55.182456 kernel: audit: type=1101 audit(1747442395.166:1414): pid=5573 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' May 17 00:39:55.182539 kernel: audit: type=1103 audit(1747442395.174:1415): pid=5573 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' May 17 00:39:55.182566 kernel: audit: type=1006 audit(1747442395.174:1416): pid=5573 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=13 res=1 May 17 00:39:55.185044 sshd[5573]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) May 17 00:39:55.187060 kernel: audit: type=1300 audit(1747442395.174:1416): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc41687580 a2=3 a3=0 items=0 ppid=1 pid=5573 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:55.174000 audit[5573]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc41687580 a2=3 a3=0 items=0 ppid=1 pid=5573 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:39:55.197917 kernel: audit: type=1327 audit(1747442395.174:1416): proctitle=737368643A20636F7265205B707269765D May 17 00:39:55.174000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D May 17 00:39:55.220836 systemd-logind[1620]: New session 13 of user core. May 17 00:39:55.221352 systemd[1]: Started session-13.scope. May 17 00:39:55.227000 audit[5573]: USER_START pid=5573 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' May 17 00:39:55.236024 kernel: audit: type=1105 audit(1747442395.227:1417): pid=5573 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' May 17 00:39:55.236000 audit[5575]: CRED_ACQ pid=5575 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' May 17 00:39:55.242897 kernel: audit: type=1103 audit(1747442395.236:1418): pid=5575 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' May 17 00:39:55.591124 env[1634]: time="2025-05-17T00:39:55.590999848Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.0\"" May 17 00:39:55.768222 env[1634]: time="2025-05-17T00:39:55.768165165Z" level=info msg="trying next host" error="failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" host=ghcr.io May 17 00:39:55.770811 env[1634]: time="2025-05-17T00:39:55.770667685Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.0\" failed" error="failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.0\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" May 17 00:39:55.785502 kubelet[2516]: E0517 00:39:55.785427 2516 log.go:32] "PullImage from image service failed" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.0\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/goldmane:v3.30.0" May 17 00:39:55.786244 kubelet[2516]: E0517 00:39:55.785516 2516 kuberuntime_image.go:42] "Failed to pull image" err="failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.0\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/goldmane:v3.30.0" May 17 00:39:55.801064 kubelet[2516]: E0517 00:39:55.800178 2516 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:goldmane,Image:ghcr.io/flatcar/calico/goldmane:v3.30.0,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:INFO,ValueFrom:nil,},EnvVar{Name:PORT,Value:7443,ValueFrom:nil,},EnvVar{Name:SERVER_CERT_PATH,Value:/goldmane-key-pair/tls.crt,ValueFrom:nil,},EnvVar{Name:SERVER_KEY_PATH,Value:/goldmane-key-pair/tls.key,ValueFrom:nil,},EnvVar{Name:CA_CERT_PATH,Value:/etc/pki/tls/certs/tigera-ca-bundle.crt,ValueFrom:nil,},EnvVar{Name:PUSH_URL,Value:https://guardian.calico-system.svc.cluster.local:443/api/v1/flows/bulk,ValueFrom:nil,},EnvVar{Name:FILE_CONFIG_PATH,Value:/config/config.json,ValueFrom:nil,},EnvVar{Name:HEALTH_ENABLED,Value:true,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:config,ReadOnly:true,MountPath:/config,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:goldmane-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:goldmane-key-pair,ReadOnly:true,MountPath:/goldmane-key-pair,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-lklcj,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/health -live],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/health -ready],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:30,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod goldmane-78d55f7ddc-d97gj_calico-system(3ebcad15-5d11-4ed3-b1bb-3bd7f1c5d1af): ErrImagePull: failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.0\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" logger="UnhandledError" May 17 00:39:55.801582 kubelet[2516]: E0517 00:39:55.801530 2516 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"goldmane\" with ErrImagePull: \"failed to pull and unpack image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.0\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/goldmane:v3.30.0\\\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden\"" pod="calico-system/goldmane-78d55f7ddc-d97gj" podUID="3ebcad15-5d11-4ed3-b1bb-3bd7f1c5d1af" May 17 00:39:55.847460 kubelet[2516]: I0517 00:39:55.815910 2516 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/csi-node-driver-g8dpg" podStartSLOduration=35.505844711 podStartE2EDuration="47.769058285s" podCreationTimestamp="2025-05-17 00:39:08 +0000 UTC" firstStartedPulling="2025-05-17 00:39:37.025892759 +0000 UTC m=+48.896153974" lastFinishedPulling="2025-05-17 00:39:49.289106353 +0000 UTC m=+61.159367548" observedRunningTime="2025-05-17 00:39:50.759086309 +0000 UTC m=+62.629347525" watchObservedRunningTime="2025-05-17 00:39:55.769058285 +0000 UTC m=+67.639319502" May 17 00:39:56.337667 sshd[5573]: pam_unix(sshd:session): session closed for user core May 17 00:39:56.353213 kernel: audit: type=1106 audit(1747442396.338:1419): pid=5573 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' May 17 00:39:56.353292 kernel: audit: type=1104 audit(1747442396.338:1420): pid=5573 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' May 17 00:39:56.338000 audit[5573]: USER_END pid=5573 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' May 17 00:39:56.338000 audit[5573]: CRED_DISP pid=5573 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' May 17 00:39:56.346000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-172.31.30.240:22-139.178.68.195:57080 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:39:56.348564 systemd[1]: sshd@12-172.31.30.240:22-139.178.68.195:57080.service: Deactivated successfully. May 17 00:39:56.350084 systemd[1]: session-13.scope: Deactivated successfully. May 17 00:39:56.353258 systemd-logind[1620]: Session 13 logged out. Waiting for processes to exit. May 17 00:39:56.354276 systemd-logind[1620]: Removed session 13. May 17 00:40:01.465381 systemd[1]: Started sshd@13-172.31.30.240:22-139.178.68.195:57094.service. May 17 00:40:01.464000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-172.31.30.240:22-139.178.68.195:57094 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:40:01.520900 kernel: kauditd_printk_skb: 1 callbacks suppressed May 17 00:40:01.521267 kernel: audit: type=1130 audit(1747442401.464:1422): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-172.31.30.240:22-139.178.68.195:57094 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:40:02.003000 audit[5588]: USER_ACCT pid=5588 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' May 17 00:40:02.078418 kernel: audit: type=1101 audit(1747442402.003:1423): pid=5588 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' May 17 00:40:02.083577 sshd[5588]: Accepted publickey for core from 139.178.68.195 port 57094 ssh2: RSA SHA256:I5cGDzOOPhNK8a4J4SFPiuUQivu3TK8ocBzhX4AkN30 May 17 00:40:02.100304 sshd[5588]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) May 17 00:40:02.135936 kernel: audit: type=1103 audit(1747442402.069:1424): pid=5588 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' May 17 00:40:02.069000 audit[5588]: CRED_ACQ pid=5588 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' May 17 00:40:02.151317 kernel: audit: type=1006 audit(1747442402.077:1425): pid=5588 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=14 res=1 May 17 00:40:02.151865 kernel: audit: type=1300 audit(1747442402.077:1425): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff47f8c540 a2=3 a3=0 items=0 ppid=1 pid=5588 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:40:02.077000 audit[5588]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff47f8c540 a2=3 a3=0 items=0 ppid=1 pid=5588 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:40:02.077000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D May 17 00:40:02.179825 kernel: audit: type=1327 audit(1747442402.077:1425): proctitle=737368643A20636F7265205B707269765D May 17 00:40:02.194644 systemd-logind[1620]: New session 14 of user core. May 17 00:40:02.196136 systemd[1]: Started session-14.scope. May 17 00:40:02.211000 audit[5588]: USER_START pid=5588 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' May 17 00:40:02.227000 audit[5590]: CRED_ACQ pid=5590 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' May 17 00:40:02.242628 kernel: audit: type=1105 audit(1747442402.211:1426): pid=5588 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' May 17 00:40:02.253686 kernel: audit: type=1103 audit(1747442402.227:1427): pid=5590 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' May 17 00:40:02.474326 kubelet[2516]: E0517 00:40:02.474172 2516 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"whisker\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker:v3.30.0\\\": ErrImagePull: failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker:v3.30.0\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker:v3.30.0\\\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden\", failed to \"StartContainer\" for \"whisker-backend\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.0\\\": ErrImagePull: failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.0\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.0\\\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden\"]" pod="calico-system/whisker-74cd64d847-wzdsv" podUID="9a1d6802-818f-497c-bada-09fc52fbf432" May 17 00:40:03.517564 sshd[5588]: pam_unix(sshd:session): session closed for user core May 17 00:40:03.523000 audit[5588]: USER_END pid=5588 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' May 17 00:40:03.531820 systemd-logind[1620]: Session 14 logged out. Waiting for processes to exit. May 17 00:40:03.533301 systemd[1]: sshd@13-172.31.30.240:22-139.178.68.195:57094.service: Deactivated successfully. May 17 00:40:03.534297 systemd[1]: session-14.scope: Deactivated successfully. May 17 00:40:03.536049 systemd-logind[1620]: Removed session 14. May 17 00:40:03.537805 kernel: audit: type=1106 audit(1747442403.523:1428): pid=5588 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' May 17 00:40:03.524000 audit[5588]: CRED_DISP pid=5588 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' May 17 00:40:03.532000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-172.31.30.240:22-139.178.68.195:57094 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:40:03.544937 kernel: audit: type=1104 audit(1747442403.524:1429): pid=5588 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' May 17 00:40:06.457789 kubelet[2516]: E0517 00:40:06.457724 2516 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"goldmane\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.0\\\": ErrImagePull: failed to pull and unpack image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.0\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/goldmane:v3.30.0\\\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden\"" pod="calico-system/goldmane-78d55f7ddc-d97gj" podUID="3ebcad15-5d11-4ed3-b1bb-3bd7f1c5d1af" May 17 00:40:08.543340 systemd[1]: Started sshd@14-172.31.30.240:22-139.178.68.195:35636.service. May 17 00:40:08.543000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-172.31.30.240:22-139.178.68.195:35636 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:40:08.545644 kernel: kauditd_printk_skb: 1 callbacks suppressed May 17 00:40:08.545715 kernel: audit: type=1130 audit(1747442408.543:1431): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-172.31.30.240:22-139.178.68.195:35636 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:40:08.681596 systemd[1]: run-containerd-runc-k8s.io-e777fb60a0010b29124aa0b04a8472137dd90de26b131c07332bc276b5846713-runc.TZJad8.mount: Deactivated successfully. May 17 00:40:08.812952 sshd[5602]: Accepted publickey for core from 139.178.68.195 port 35636 ssh2: RSA SHA256:I5cGDzOOPhNK8a4J4SFPiuUQivu3TK8ocBzhX4AkN30 May 17 00:40:08.810000 audit[5602]: USER_ACCT pid=5602 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' May 17 00:40:08.821867 kernel: audit: type=1101 audit(1747442408.810:1432): pid=5602 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' May 17 00:40:08.821000 audit[5602]: CRED_ACQ pid=5602 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' May 17 00:40:08.830879 kernel: audit: type=1103 audit(1747442408.821:1433): pid=5602 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' May 17 00:40:08.837095 sshd[5602]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) May 17 00:40:08.837799 kernel: audit: type=1006 audit(1747442408.821:1434): pid=5602 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 May 17 00:40:08.821000 audit[5602]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc86fb8180 a2=3 a3=0 items=0 ppid=1 pid=5602 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:40:08.848813 kernel: audit: type=1300 audit(1747442408.821:1434): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc86fb8180 a2=3 a3=0 items=0 ppid=1 pid=5602 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:40:08.821000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D May 17 00:40:08.854792 kernel: audit: type=1327 audit(1747442408.821:1434): proctitle=737368643A20636F7265205B707269765D May 17 00:40:08.859989 systemd[1]: Started session-15.scope. May 17 00:40:08.860503 systemd-logind[1620]: New session 15 of user core. May 17 00:40:08.866000 audit[5602]: USER_START pid=5602 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' May 17 00:40:08.877963 kernel: audit: type=1105 audit(1747442408.866:1435): pid=5602 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' May 17 00:40:08.877000 audit[5625]: CRED_ACQ pid=5625 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' May 17 00:40:08.886869 kernel: audit: type=1103 audit(1747442408.877:1436): pid=5625 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' May 17 00:40:09.421977 sshd[5602]: pam_unix(sshd:session): session closed for user core May 17 00:40:09.439156 kernel: audit: type=1106 audit(1747442409.426:1437): pid=5602 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' May 17 00:40:09.426000 audit[5602]: USER_END pid=5602 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' May 17 00:40:09.456948 systemd[1]: Started sshd@15-172.31.30.240:22-139.178.68.195:35652.service. May 17 00:40:09.426000 audit[5602]: CRED_DISP pid=5602 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' May 17 00:40:09.461480 systemd[1]: sshd@14-172.31.30.240:22-139.178.68.195:35636.service: Deactivated successfully. May 17 00:40:09.468642 systemd[1]: session-15.scope: Deactivated successfully. May 17 00:40:09.469335 kernel: audit: type=1104 audit(1747442409.426:1438): pid=5602 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' May 17 00:40:09.472522 systemd-logind[1620]: Session 15 logged out. Waiting for processes to exit. May 17 00:40:09.456000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-172.31.30.240:22-139.178.68.195:35652 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:40:09.460000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-172.31.30.240:22-139.178.68.195:35636 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:40:09.475354 systemd-logind[1620]: Removed session 15. May 17 00:40:09.670121 sshd[5634]: Accepted publickey for core from 139.178.68.195 port 35652 ssh2: RSA SHA256:I5cGDzOOPhNK8a4J4SFPiuUQivu3TK8ocBzhX4AkN30 May 17 00:40:09.668000 audit[5634]: USER_ACCT pid=5634 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' May 17 00:40:09.669000 audit[5634]: CRED_ACQ pid=5634 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' May 17 00:40:09.669000 audit[5634]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffdbe841cf0 a2=3 a3=0 items=0 ppid=1 pid=5634 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:40:09.669000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D May 17 00:40:09.672324 sshd[5634]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) May 17 00:40:09.683707 systemd-logind[1620]: New session 16 of user core. May 17 00:40:09.684457 systemd[1]: Started session-16.scope. May 17 00:40:09.692000 audit[5634]: USER_START pid=5634 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' May 17 00:40:09.695000 audit[5637]: CRED_ACQ pid=5637 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' May 17 00:40:10.607658 sshd[5634]: pam_unix(sshd:session): session closed for user core May 17 00:40:10.624888 systemd[1]: Started sshd@16-172.31.30.240:22-139.178.68.195:35654.service. May 17 00:40:10.624000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-172.31.30.240:22-139.178.68.195:35654 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:40:10.627000 audit[5634]: USER_END pid=5634 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' May 17 00:40:10.627000 audit[5634]: CRED_DISP pid=5634 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' May 17 00:40:10.630224 systemd[1]: sshd@15-172.31.30.240:22-139.178.68.195:35652.service: Deactivated successfully. May 17 00:40:10.629000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-172.31.30.240:22-139.178.68.195:35652 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:40:10.631998 systemd[1]: session-16.scope: Deactivated successfully. May 17 00:40:10.633413 systemd-logind[1620]: Session 16 logged out. Waiting for processes to exit. May 17 00:40:10.636427 systemd-logind[1620]: Removed session 16. May 17 00:40:10.847000 audit[5644]: USER_ACCT pid=5644 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' May 17 00:40:10.848642 sshd[5644]: Accepted publickey for core from 139.178.68.195 port 35654 ssh2: RSA SHA256:I5cGDzOOPhNK8a4J4SFPiuUQivu3TK8ocBzhX4AkN30 May 17 00:40:10.848000 audit[5644]: CRED_ACQ pid=5644 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' May 17 00:40:10.848000 audit[5644]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffce071c550 a2=3 a3=0 items=0 ppid=1 pid=5644 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:40:10.848000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D May 17 00:40:10.851063 sshd[5644]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) May 17 00:40:10.858474 systemd[1]: Started session-17.scope. May 17 00:40:10.858838 systemd-logind[1620]: New session 17 of user core. May 17 00:40:10.864000 audit[5644]: USER_START pid=5644 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' May 17 00:40:10.865000 audit[5647]: CRED_ACQ pid=5647 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' May 17 00:40:12.455887 sshd[5644]: pam_unix(sshd:session): session closed for user core May 17 00:40:12.460000 audit[5644]: USER_END pid=5644 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' May 17 00:40:12.461000 audit[5644]: CRED_DISP pid=5644 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' May 17 00:40:12.473000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-172.31.30.240:22-139.178.68.195:35654 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:40:12.474175 systemd[1]: sshd@16-172.31.30.240:22-139.178.68.195:35654.service: Deactivated successfully. May 17 00:40:12.475102 systemd[1]: session-17.scope: Deactivated successfully. May 17 00:40:12.479651 systemd-logind[1620]: Session 17 logged out. Waiting for processes to exit. May 17 00:40:12.481114 systemd[1]: Started sshd@17-172.31.30.240:22-139.178.68.195:35670.service. May 17 00:40:12.480000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-172.31.30.240:22-139.178.68.195:35670 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:40:12.482485 systemd-logind[1620]: Removed session 17. May 17 00:40:12.551000 audit[5667]: NETFILTER_CFG table=filter:130 family=2 entries=24 op=nft_register_rule pid=5667 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" May 17 00:40:12.551000 audit[5667]: SYSCALL arch=c000003e syscall=46 success=yes exit=13432 a0=3 a1=7fff3bb69aa0 a2=0 a3=7fff3bb69a8c items=0 ppid=2660 pid=5667 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:40:12.551000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 May 17 00:40:12.555000 audit[5667]: NETFILTER_CFG table=nat:131 family=2 entries=22 op=nft_register_rule pid=5667 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" May 17 00:40:12.555000 audit[5667]: SYSCALL arch=c000003e syscall=46 success=yes exit=6540 a0=3 a1=7fff3bb69aa0 a2=0 a3=0 items=0 ppid=2660 pid=5667 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:40:12.555000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 May 17 00:40:12.589000 audit[5669]: NETFILTER_CFG table=filter:132 family=2 entries=36 op=nft_register_rule pid=5669 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" May 17 00:40:12.589000 audit[5669]: SYSCALL arch=c000003e syscall=46 success=yes exit=13432 a0=3 a1=7ffd759c7d70 a2=0 a3=7ffd759c7d5c items=0 ppid=2660 pid=5669 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:40:12.589000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 May 17 00:40:12.593000 audit[5669]: NETFILTER_CFG table=nat:133 family=2 entries=22 op=nft_register_rule pid=5669 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" May 17 00:40:12.593000 audit[5669]: SYSCALL arch=c000003e syscall=46 success=yes exit=6540 a0=3 a1=7ffd759c7d70 a2=0 a3=0 items=0 ppid=2660 pid=5669 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:40:12.593000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 May 17 00:40:12.694051 sshd[5664]: Accepted publickey for core from 139.178.68.195 port 35670 ssh2: RSA SHA256:I5cGDzOOPhNK8a4J4SFPiuUQivu3TK8ocBzhX4AkN30 May 17 00:40:12.693000 audit[5664]: USER_ACCT pid=5664 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' May 17 00:40:12.694000 audit[5664]: CRED_ACQ pid=5664 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' May 17 00:40:12.694000 audit[5664]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff8bffc1a0 a2=3 a3=0 items=0 ppid=1 pid=5664 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:40:12.694000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D May 17 00:40:12.697148 sshd[5664]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) May 17 00:40:12.705845 systemd[1]: Started session-18.scope. May 17 00:40:12.707202 systemd-logind[1620]: New session 18 of user core. May 17 00:40:12.712000 audit[5664]: USER_START pid=5664 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' May 17 00:40:12.713000 audit[5670]: CRED_ACQ pid=5670 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' May 17 00:40:13.839431 sshd[5664]: pam_unix(sshd:session): session closed for user core May 17 00:40:13.859705 kernel: kauditd_printk_skb: 43 callbacks suppressed May 17 00:40:13.869918 kernel: audit: type=1106 audit(1747442413.840:1468): pid=5664 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' May 17 00:40:13.871264 kernel: audit: type=1104 audit(1747442413.840:1469): pid=5664 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' May 17 00:40:13.872863 kernel: audit: type=1131 audit(1747442413.849:1470): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-172.31.30.240:22-139.178.68.195:35670 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:40:13.840000 audit[5664]: USER_END pid=5664 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' May 17 00:40:13.840000 audit[5664]: CRED_DISP pid=5664 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' May 17 00:40:13.849000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-172.31.30.240:22-139.178.68.195:35670 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:40:13.850345 systemd[1]: sshd@17-172.31.30.240:22-139.178.68.195:35670.service: Deactivated successfully. May 17 00:40:13.851185 systemd[1]: session-18.scope: Deactivated successfully. May 17 00:40:13.852659 systemd-logind[1620]: Session 18 logged out. Waiting for processes to exit. May 17 00:40:13.870520 systemd-logind[1620]: Removed session 18. May 17 00:40:13.872407 systemd[1]: Started sshd@18-172.31.30.240:22-139.178.68.195:44468.service. May 17 00:40:13.888799 kernel: audit: type=1130 audit(1747442413.871:1471): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-172.31.30.240:22-139.178.68.195:44468 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:40:13.871000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-172.31.30.240:22-139.178.68.195:44468 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:40:14.122339 kernel: audit: type=1101 audit(1747442414.108:1472): pid=5679 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' May 17 00:40:14.108000 audit[5679]: USER_ACCT pid=5679 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' May 17 00:40:14.122122 sshd[5679]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) May 17 00:40:14.123171 sshd[5679]: Accepted publickey for core from 139.178.68.195 port 44468 ssh2: RSA SHA256:I5cGDzOOPhNK8a4J4SFPiuUQivu3TK8ocBzhX4AkN30 May 17 00:40:14.144694 systemd[1]: Started session-19.scope. May 17 00:40:14.145540 systemd-logind[1620]: New session 19 of user core. May 17 00:40:14.110000 audit[5679]: CRED_ACQ pid=5679 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' May 17 00:40:14.157940 kernel: audit: type=1103 audit(1747442414.110:1473): pid=5679 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' May 17 00:40:14.174370 kernel: audit: type=1006 audit(1747442414.110:1474): pid=5679 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=19 res=1 May 17 00:40:14.110000 audit[5679]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe6a866960 a2=3 a3=0 items=0 ppid=1 pid=5679 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:40:14.183824 kernel: audit: type=1300 audit(1747442414.110:1474): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe6a866960 a2=3 a3=0 items=0 ppid=1 pid=5679 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:40:14.110000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D May 17 00:40:14.187824 kernel: audit: type=1327 audit(1747442414.110:1474): proctitle=737368643A20636F7265205B707269765D May 17 00:40:14.185000 audit[5679]: USER_START pid=5679 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' May 17 00:40:14.197836 kernel: audit: type=1105 audit(1747442414.185:1475): pid=5679 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' May 17 00:40:14.194000 audit[5681]: CRED_ACQ pid=5681 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' May 17 00:40:15.522521 sshd[5679]: pam_unix(sshd:session): session closed for user core May 17 00:40:15.528000 audit[5679]: USER_END pid=5679 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' May 17 00:40:15.529000 audit[5679]: CRED_DISP pid=5679 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' May 17 00:40:15.536069 systemd[1]: sshd@18-172.31.30.240:22-139.178.68.195:44468.service: Deactivated successfully. May 17 00:40:15.535000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-172.31.30.240:22-139.178.68.195:44468 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:40:15.537271 systemd[1]: session-19.scope: Deactivated successfully. May 17 00:40:15.538237 systemd-logind[1620]: Session 19 logged out. Waiting for processes to exit. May 17 00:40:15.540536 systemd-logind[1620]: Removed session 19. May 17 00:40:15.580193 env[1634]: time="2025-05-17T00:40:15.580011999Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.0\"" May 17 00:40:15.804596 env[1634]: time="2025-05-17T00:40:15.804446204Z" level=info msg="trying next host" error="failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" host=ghcr.io May 17 00:40:15.806804 env[1634]: time="2025-05-17T00:40:15.806710786Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.0\" failed" error="failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.0\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" May 17 00:40:15.816950 kubelet[2516]: E0517 00:40:15.811942 2516 log.go:32] "PullImage from image service failed" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.0\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/whisker:v3.30.0" May 17 00:40:15.824552 kubelet[2516]: E0517 00:40:15.820005 2516 kuberuntime_image.go:42] "Failed to pull image" err="failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.0\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/whisker:v3.30.0" May 17 00:40:15.829086 kubelet[2516]: E0517 00:40:15.827979 2516 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:whisker,Image:ghcr.io/flatcar/calico/whisker:v3.30.0,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:INFO,ValueFrom:nil,},EnvVar{Name:CALICO_VERSION,Value:v3.30.0,ValueFrom:nil,},EnvVar{Name:CLUSTER_ID,Value:9374fdf540ca4afdb7eee51ad827df9d,ValueFrom:nil,},EnvVar{Name:CLUSTER_TYPE,Value:typha,kdd,k8s,operator,bgp,kubeadm,ValueFrom:nil,},EnvVar{Name:NOTIFICATIONS,Value:Enabled,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:kube-api-access-5f82j,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod whisker-74cd64d847-wzdsv_calico-system(9a1d6802-818f-497c-bada-09fc52fbf432): ErrImagePull: failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.0\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" logger="UnhandledError" May 17 00:40:15.837349 env[1634]: time="2025-05-17T00:40:15.832646597Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.0\"" May 17 00:40:16.026006 env[1634]: time="2025-05-17T00:40:16.025936426Z" level=info msg="trying next host" error="failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" host=ghcr.io May 17 00:40:16.028143 env[1634]: time="2025-05-17T00:40:16.028071963Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.0\" failed" error="failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.0\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" May 17 00:40:16.028391 kubelet[2516]: E0517 00:40:16.028359 2516 log.go:32] "PullImage from image service failed" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.0\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/whisker-backend:v3.30.0" May 17 00:40:16.028458 kubelet[2516]: E0517 00:40:16.028407 2516 kuberuntime_image.go:42] "Failed to pull image" err="failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.0\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/whisker-backend:v3.30.0" May 17 00:40:16.028592 kubelet[2516]: E0517 00:40:16.028548 2516 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:whisker-backend,Image:ghcr.io/flatcar/calico/whisker-backend:v3.30.0,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:INFO,ValueFrom:nil,},EnvVar{Name:PORT,Value:3002,ValueFrom:nil,},EnvVar{Name:GOLDMANE_HOST,Value:goldmane.calico-system.svc.cluster.local:7443,ValueFrom:nil,},EnvVar{Name:TLS_CERT_PATH,Value:/whisker-backend-key-pair/tls.crt,ValueFrom:nil,},EnvVar{Name:TLS_KEY_PATH,Value:/whisker-backend-key-pair/tls.key,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:whisker-backend-key-pair,ReadOnly:true,MountPath:/whisker-backend-key-pair,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:whisker-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-5f82j,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod whisker-74cd64d847-wzdsv_calico-system(9a1d6802-818f-497c-bada-09fc52fbf432): ErrImagePull: failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.0\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" logger="UnhandledError" May 17 00:40:16.037468 kubelet[2516]: E0517 00:40:16.037405 2516 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"whisker\" with ErrImagePull: \"failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker:v3.30.0\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker:v3.30.0\\\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden\", failed to \"StartContainer\" for \"whisker-backend\" with ErrImagePull: \"failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.0\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.0\\\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden\"]" pod="calico-system/whisker-74cd64d847-wzdsv" podUID="9a1d6802-818f-497c-bada-09fc52fbf432" May 17 00:40:17.153821 kubelet[2516]: I0517 00:40:17.153589 2516 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" May 17 00:40:17.551000 audit[5713]: NETFILTER_CFG table=filter:134 family=2 entries=36 op=nft_register_rule pid=5713 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" May 17 00:40:17.551000 audit[5713]: SYSCALL arch=c000003e syscall=46 success=yes exit=13432 a0=3 a1=7ffedb645290 a2=0 a3=7ffedb64527c items=0 ppid=2660 pid=5713 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:40:17.551000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 May 17 00:40:17.557000 audit[5713]: NETFILTER_CFG table=nat:135 family=2 entries=34 op=nft_register_chain pid=5713 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" May 17 00:40:17.557000 audit[5713]: SYSCALL arch=c000003e syscall=46 success=yes exit=11236 a0=3 a1=7ffedb645290 a2=0 a3=7ffedb64527c items=0 ppid=2660 pid=5713 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:40:17.557000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 May 17 00:40:18.597000 audit[5715]: NETFILTER_CFG table=filter:136 family=2 entries=24 op=nft_register_rule pid=5715 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" May 17 00:40:18.597000 audit[5715]: SYSCALL arch=c000003e syscall=46 success=yes exit=4504 a0=3 a1=7ffcbede5280 a2=0 a3=7ffcbede526c items=0 ppid=2660 pid=5715 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:40:18.597000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 May 17 00:40:18.604000 audit[5715]: NETFILTER_CFG table=nat:137 family=2 entries=106 op=nft_register_chain pid=5715 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" May 17 00:40:18.604000 audit[5715]: SYSCALL arch=c000003e syscall=46 success=yes exit=49452 a0=3 a1=7ffcbede5280 a2=0 a3=7ffcbede526c items=0 ppid=2660 pid=5715 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:40:18.604000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 May 17 00:40:20.568839 kernel: kauditd_printk_skb: 16 callbacks suppressed May 17 00:40:20.571919 kernel: audit: type=1130 audit(1747442420.560:1484): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-172.31.30.240:22-139.178.68.195:44480 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:40:20.560000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-172.31.30.240:22-139.178.68.195:44480 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:40:20.560645 systemd[1]: Started sshd@19-172.31.30.240:22-139.178.68.195:44480.service. May 17 00:40:20.857000 audit[5717]: USER_ACCT pid=5717 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' May 17 00:40:20.880658 kernel: audit: type=1101 audit(1747442420.857:1485): pid=5717 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' May 17 00:40:20.880762 kernel: audit: type=1103 audit(1747442420.865:1486): pid=5717 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' May 17 00:40:20.880821 kernel: audit: type=1006 audit(1747442420.865:1487): pid=5717 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=20 res=1 May 17 00:40:20.880846 kernel: audit: type=1300 audit(1747442420.865:1487): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffeb3a39c70 a2=3 a3=0 items=0 ppid=1 pid=5717 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:40:20.865000 audit[5717]: CRED_ACQ pid=5717 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' May 17 00:40:20.865000 audit[5717]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffeb3a39c70 a2=3 a3=0 items=0 ppid=1 pid=5717 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:40:20.894812 kernel: audit: type=1327 audit(1747442420.865:1487): proctitle=737368643A20636F7265205B707269765D May 17 00:40:20.865000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D May 17 00:40:20.895990 sshd[5717]: Accepted publickey for core from 139.178.68.195 port 44480 ssh2: RSA SHA256:I5cGDzOOPhNK8a4J4SFPiuUQivu3TK8ocBzhX4AkN30 May 17 00:40:20.871635 sshd[5717]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) May 17 00:40:20.901123 systemd[1]: Started session-20.scope. May 17 00:40:20.901681 systemd-logind[1620]: New session 20 of user core. May 17 00:40:20.909000 audit[5717]: USER_START pid=5717 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' May 17 00:40:20.919137 kernel: audit: type=1105 audit(1747442420.909:1488): pid=5717 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' May 17 00:40:20.919000 audit[5719]: CRED_ACQ pid=5719 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' May 17 00:40:20.928793 kernel: audit: type=1103 audit(1747442420.919:1489): pid=5719 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' May 17 00:40:21.535055 env[1634]: time="2025-05-17T00:40:21.534892331Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.0\"" May 17 00:40:21.716501 env[1634]: time="2025-05-17T00:40:21.716395141Z" level=info msg="trying next host" error="failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" host=ghcr.io May 17 00:40:21.724828 env[1634]: time="2025-05-17T00:40:21.724662148Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.0\" failed" error="failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.0\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" May 17 00:40:21.767387 kubelet[2516]: E0517 00:40:21.767319 2516 log.go:32] "PullImage from image service failed" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.0\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/goldmane:v3.30.0" May 17 00:40:21.775469 kubelet[2516]: E0517 00:40:21.771753 2516 kuberuntime_image.go:42] "Failed to pull image" err="failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.0\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/goldmane:v3.30.0" May 17 00:40:21.779808 kubelet[2516]: E0517 00:40:21.778989 2516 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:goldmane,Image:ghcr.io/flatcar/calico/goldmane:v3.30.0,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:INFO,ValueFrom:nil,},EnvVar{Name:PORT,Value:7443,ValueFrom:nil,},EnvVar{Name:SERVER_CERT_PATH,Value:/goldmane-key-pair/tls.crt,ValueFrom:nil,},EnvVar{Name:SERVER_KEY_PATH,Value:/goldmane-key-pair/tls.key,ValueFrom:nil,},EnvVar{Name:CA_CERT_PATH,Value:/etc/pki/tls/certs/tigera-ca-bundle.crt,ValueFrom:nil,},EnvVar{Name:PUSH_URL,Value:https://guardian.calico-system.svc.cluster.local:443/api/v1/flows/bulk,ValueFrom:nil,},EnvVar{Name:FILE_CONFIG_PATH,Value:/config/config.json,ValueFrom:nil,},EnvVar{Name:HEALTH_ENABLED,Value:true,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:config,ReadOnly:true,MountPath:/config,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:goldmane-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:goldmane-key-pair,ReadOnly:true,MountPath:/goldmane-key-pair,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-lklcj,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/health -live],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/health -ready],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:30,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod goldmane-78d55f7ddc-d97gj_calico-system(3ebcad15-5d11-4ed3-b1bb-3bd7f1c5d1af): ErrImagePull: failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.0\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" logger="UnhandledError" May 17 00:40:21.781123 kubelet[2516]: E0517 00:40:21.781084 2516 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"goldmane\" with ErrImagePull: \"failed to pull and unpack image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.0\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/goldmane:v3.30.0\\\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden\"" pod="calico-system/goldmane-78d55f7ddc-d97gj" podUID="3ebcad15-5d11-4ed3-b1bb-3bd7f1c5d1af" May 17 00:40:22.100591 sshd[5717]: pam_unix(sshd:session): session closed for user core May 17 00:40:22.101000 audit[5717]: USER_END pid=5717 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' May 17 00:40:22.111441 kernel: audit: type=1106 audit(1747442422.101:1490): pid=5717 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' May 17 00:40:22.111649 kernel: audit: type=1104 audit(1747442422.101:1491): pid=5717 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' May 17 00:40:22.101000 audit[5717]: CRED_DISP pid=5717 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' May 17 00:40:22.112887 systemd[1]: sshd@19-172.31.30.240:22-139.178.68.195:44480.service: Deactivated successfully. May 17 00:40:22.110000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-172.31.30.240:22-139.178.68.195:44480 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:40:22.114038 systemd[1]: session-20.scope: Deactivated successfully. May 17 00:40:22.119010 systemd-logind[1620]: Session 20 logged out. Waiting for processes to exit. May 17 00:40:22.120858 systemd-logind[1620]: Removed session 20. May 17 00:40:27.120264 systemd[1]: Started sshd@20-172.31.30.240:22-139.178.68.195:37180.service. May 17 00:40:27.130584 kernel: kauditd_printk_skb: 1 callbacks suppressed May 17 00:40:27.130727 kernel: audit: type=1130 audit(1747442427.122:1493): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-172.31.30.240:22-139.178.68.195:37180 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:40:27.122000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-172.31.30.240:22-139.178.68.195:37180 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:40:27.416000 audit[5731]: USER_ACCT pid=5731 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' May 17 00:40:27.427570 kernel: audit: type=1101 audit(1747442427.416:1494): pid=5731 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' May 17 00:40:27.427654 kernel: audit: type=1103 audit(1747442427.425:1495): pid=5731 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' May 17 00:40:27.425000 audit[5731]: CRED_ACQ pid=5731 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' May 17 00:40:27.427859 sshd[5731]: Accepted publickey for core from 139.178.68.195 port 37180 ssh2: RSA SHA256:I5cGDzOOPhNK8a4J4SFPiuUQivu3TK8ocBzhX4AkN30 May 17 00:40:27.451854 kernel: audit: type=1006 audit(1747442427.425:1496): pid=5731 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=21 res=1 May 17 00:40:27.451997 kernel: audit: type=1300 audit(1747442427.425:1496): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc93652090 a2=3 a3=0 items=0 ppid=1 pid=5731 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:40:27.425000 audit[5731]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc93652090 a2=3 a3=0 items=0 ppid=1 pid=5731 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:40:27.461889 kernel: audit: type=1327 audit(1747442427.425:1496): proctitle=737368643A20636F7265205B707269765D May 17 00:40:27.425000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D May 17 00:40:27.462545 sshd[5731]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) May 17 00:40:27.472467 systemd[1]: Started session-21.scope. May 17 00:40:27.474792 systemd-logind[1620]: New session 21 of user core. May 17 00:40:27.492644 kernel: audit: type=1105 audit(1747442427.481:1497): pid=5731 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' May 17 00:40:27.481000 audit[5731]: USER_START pid=5731 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' May 17 00:40:27.492000 audit[5733]: CRED_ACQ pid=5733 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' May 17 00:40:27.501894 kernel: audit: type=1103 audit(1747442427.492:1498): pid=5733 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' May 17 00:40:28.254816 sshd[5731]: pam_unix(sshd:session): session closed for user core May 17 00:40:28.269844 kernel: audit: type=1106 audit(1747442428.255:1499): pid=5731 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' May 17 00:40:28.255000 audit[5731]: USER_END pid=5731 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' May 17 00:40:28.267692 systemd[1]: sshd@20-172.31.30.240:22-139.178.68.195:37180.service: Deactivated successfully. May 17 00:40:28.268793 systemd[1]: session-21.scope: Deactivated successfully. May 17 00:40:28.270512 systemd-logind[1620]: Session 21 logged out. Waiting for processes to exit. May 17 00:40:28.272645 systemd-logind[1620]: Removed session 21. May 17 00:40:28.256000 audit[5731]: CRED_DISP pid=5731 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' May 17 00:40:28.281908 kernel: audit: type=1104 audit(1747442428.256:1500): pid=5731 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' May 17 00:40:28.267000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-172.31.30.240:22-139.178.68.195:37180 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:40:30.528463 kubelet[2516]: E0517 00:40:30.528406 2516 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"whisker\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker:v3.30.0\\\": ErrImagePull: failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker:v3.30.0\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker:v3.30.0\\\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden\", failed to \"StartContainer\" for \"whisker-backend\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.0\\\": ErrImagePull: failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.0\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.0\\\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden\"]" pod="calico-system/whisker-74cd64d847-wzdsv" podUID="9a1d6802-818f-497c-bada-09fc52fbf432" May 17 00:40:33.282069 systemd[1]: Started sshd@21-172.31.30.240:22-139.178.68.195:37188.service. May 17 00:40:33.290870 kernel: kauditd_printk_skb: 1 callbacks suppressed May 17 00:40:33.291133 kernel: audit: type=1130 audit(1747442433.281:1502): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-172.31.30.240:22-139.178.68.195:37188 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:40:33.281000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-172.31.30.240:22-139.178.68.195:37188 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:40:33.578432 sshd[5743]: Accepted publickey for core from 139.178.68.195 port 37188 ssh2: RSA SHA256:I5cGDzOOPhNK8a4J4SFPiuUQivu3TK8ocBzhX4AkN30 May 17 00:40:33.598489 kernel: audit: type=1101 audit(1747442433.576:1503): pid=5743 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' May 17 00:40:33.598590 kernel: audit: type=1103 audit(1747442433.588:1504): pid=5743 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' May 17 00:40:33.576000 audit[5743]: USER_ACCT pid=5743 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' May 17 00:40:33.604224 kernel: audit: type=1006 audit(1747442433.588:1505): pid=5743 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=22 res=1 May 17 00:40:33.588000 audit[5743]: CRED_ACQ pid=5743 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' May 17 00:40:33.618397 kernel: audit: type=1300 audit(1747442433.588:1505): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffa40b3d80 a2=3 a3=0 items=0 ppid=1 pid=5743 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:40:33.618601 kernel: audit: type=1327 audit(1747442433.588:1505): proctitle=737368643A20636F7265205B707269765D May 17 00:40:33.588000 audit[5743]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffa40b3d80 a2=3 a3=0 items=0 ppid=1 pid=5743 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:40:33.588000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D May 17 00:40:33.619140 sshd[5743]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) May 17 00:40:33.628265 systemd[1]: Started session-22.scope. May 17 00:40:33.629859 systemd-logind[1620]: New session 22 of user core. May 17 00:40:33.648569 kernel: audit: type=1105 audit(1747442433.636:1506): pid=5743 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' May 17 00:40:33.636000 audit[5743]: USER_START pid=5743 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' May 17 00:40:33.648000 audit[5745]: CRED_ACQ pid=5745 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' May 17 00:40:33.658626 kernel: audit: type=1103 audit(1747442433.648:1507): pid=5745 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' May 17 00:40:34.374590 sshd[5743]: pam_unix(sshd:session): session closed for user core May 17 00:40:34.375000 audit[5743]: USER_END pid=5743 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' May 17 00:40:34.383823 kernel: audit: type=1106 audit(1747442434.375:1508): pid=5743 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' May 17 00:40:34.385802 systemd[1]: sshd@21-172.31.30.240:22-139.178.68.195:37188.service: Deactivated successfully. May 17 00:40:34.375000 audit[5743]: CRED_DISP pid=5743 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' May 17 00:40:34.386959 systemd[1]: session-22.scope: Deactivated successfully. May 17 00:40:34.389062 systemd-logind[1620]: Session 22 logged out. Waiting for processes to exit. May 17 00:40:34.391307 systemd-logind[1620]: Removed session 22. May 17 00:40:34.397997 kernel: audit: type=1104 audit(1747442434.375:1509): pid=5743 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' May 17 00:40:34.385000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-172.31.30.240:22-139.178.68.195:37188 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:40:35.487594 kubelet[2516]: E0517 00:40:35.487540 2516 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"goldmane\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.0\\\": ErrImagePull: failed to pull and unpack image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.0\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/goldmane:v3.30.0\\\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden\"" pod="calico-system/goldmane-78d55f7ddc-d97gj" podUID="3ebcad15-5d11-4ed3-b1bb-3bd7f1c5d1af" May 17 00:40:39.415086 systemd[1]: Started sshd@22-172.31.30.240:22-139.178.68.195:39936.service. May 17 00:40:39.427125 kernel: kauditd_printk_skb: 1 callbacks suppressed May 17 00:40:39.430077 kernel: audit: type=1130 audit(1747442439.414:1511): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-172.31.30.240:22-139.178.68.195:39936 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:40:39.414000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-172.31.30.240:22-139.178.68.195:39936 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:40:39.752000 audit[5777]: USER_ACCT pid=5777 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' May 17 00:40:39.766230 kernel: audit: type=1101 audit(1747442439.752:1512): pid=5777 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' May 17 00:40:39.766862 kernel: audit: type=1103 audit(1747442439.760:1513): pid=5777 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' May 17 00:40:39.760000 audit[5777]: CRED_ACQ pid=5777 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' May 17 00:40:39.767902 sshd[5777]: Accepted publickey for core from 139.178.68.195 port 39936 ssh2: RSA SHA256:I5cGDzOOPhNK8a4J4SFPiuUQivu3TK8ocBzhX4AkN30 May 17 00:40:39.772372 kernel: audit: type=1006 audit(1747442439.760:1514): pid=5777 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=23 res=1 May 17 00:40:39.776861 kernel: audit: type=1300 audit(1747442439.760:1514): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff658f35c0 a2=3 a3=0 items=0 ppid=1 pid=5777 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:40:39.760000 audit[5777]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff658f35c0 a2=3 a3=0 items=0 ppid=1 pid=5777 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:40:39.793587 kernel: audit: type=1327 audit(1747442439.760:1514): proctitle=737368643A20636F7265205B707269765D May 17 00:40:39.760000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D May 17 00:40:39.781482 sshd[5777]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) May 17 00:40:39.809702 systemd-logind[1620]: New session 23 of user core. May 17 00:40:39.811531 systemd[1]: Started session-23.scope. May 17 00:40:39.816000 audit[5777]: USER_START pid=5777 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' May 17 00:40:39.830877 kernel: audit: type=1105 audit(1747442439.816:1515): pid=5777 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' May 17 00:40:39.830947 kernel: audit: type=1103 audit(1747442439.817:1516): pid=5779 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' May 17 00:40:39.817000 audit[5779]: CRED_ACQ pid=5779 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' May 17 00:40:40.960000 audit[4920]: AVC avc: denied { watch } for pid=4920 comm="apiserver" path="/calico-apiserver-certs/..2025_05_17_00_39_20.2217887946/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c755,c764 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c755,c764 tclass=file permissive=0 May 17 00:40:40.984093 kernel: audit: type=1400 audit(1747442440.960:1517): avc: denied { watch } for pid=4920 comm="apiserver" path="/calico-apiserver-certs/..2025_05_17_00_39_20.2217887946/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c755,c764 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c755,c764 tclass=file permissive=0 May 17 00:40:40.986988 kernel: audit: type=1300 audit(1747442440.960:1517): arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c000efc340 a2=fc6 a3=0 items=0 ppid=4171 pid=4920 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c755,c764 key=(null) May 17 00:40:40.960000 audit[4920]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c000efc340 a2=fc6 a3=0 items=0 ppid=4171 pid=4920 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c755,c764 key=(null) May 17 00:40:40.960000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 May 17 00:40:41.610000 audit[4969]: AVC avc: denied { watch } for pid=4969 comm="apiserver" path="/calico-apiserver-certs/..2025_05_17_00_39_20.3617611156/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c192,c952 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c192,c952 tclass=file permissive=0 May 17 00:40:41.610000 audit[4969]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c001e8a8e0 a2=fc6 a3=0 items=0 ppid=4436 pid=4969 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c192,c952 key=(null) May 17 00:40:41.610000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 May 17 00:40:42.967715 kubelet[2516]: E0517 00:40:42.960020 2516 kubelet.go:2627] "Housekeeping took longer than expected" err="housekeeping took too long" expected="1s" actual="2.313s" May 17 00:40:43.267561 sshd[5777]: pam_unix(sshd:session): session closed for user core May 17 00:40:43.302000 audit[5777]: USER_END pid=5777 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' May 17 00:40:43.304000 audit[5777]: CRED_DISP pid=5777 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' May 17 00:40:43.341370 systemd[1]: sshd@22-172.31.30.240:22-139.178.68.195:39936.service: Deactivated successfully. May 17 00:40:43.350000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-172.31.30.240:22-139.178.68.195:39936 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' May 17 00:40:43.353012 systemd[1]: session-23.scope: Deactivated successfully. May 17 00:40:43.356455 systemd-logind[1620]: Session 23 logged out. Waiting for processes to exit. May 17 00:40:43.367657 systemd-logind[1620]: Removed session 23. May 17 00:40:43.389000 audit[2384]: AVC avc: denied { watch } for pid=2384 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520978 scontext=system_u:system_r:svirt_lxc_net_t:s0:c777,c806 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 May 17 00:40:43.389000 audit[2384]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c002a4d620 a2=fc6 a3=0 items=0 ppid=2248 pid=2384 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c777,c806 key=(null) May 17 00:40:43.389000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 May 17 00:40:43.389000 audit[2384]: AVC avc: denied { watch } for pid=2384 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c777,c806 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 May 17 00:40:43.389000 audit[2384]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c002dad9e0 a2=fc6 a3=0 items=0 ppid=2248 pid=2384 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c777,c806 key=(null) May 17 00:40:43.389000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 May 17 00:40:43.579383 kubelet[2516]: E0517 00:40:43.579118 2516 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"whisker\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker:v3.30.0\\\": ErrImagePull: failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker:v3.30.0\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker:v3.30.0\\\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden\", failed to \"StartContainer\" for \"whisker-backend\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.0\\\": ErrImagePull: failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.0\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.0\\\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden\"]" pod="calico-system/whisker-74cd64d847-wzdsv" podUID="9a1d6802-818f-497c-bada-09fc52fbf432" May 17 00:40:43.820000 audit[2370]: AVC avc: denied { watch } for pid=2370 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520978 scontext=system_u:system_r:svirt_lxc_net_t:s0:c562,c1015 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 May 17 00:40:43.820000 audit[2370]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7a a1=c008254ed0 a2=fc6 a3=0 items=0 ppid=2221 pid=2370 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c562,c1015 key=(null) May 17 00:40:43.820000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E33302E323430002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 May 17 00:40:43.821000 audit[2370]: AVC avc: denied { watch } for pid=2370 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c562,c1015 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 May 17 00:40:43.821000 audit[2370]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7a a1=c006b09ce0 a2=fc6 a3=0 items=0 ppid=2221 pid=2370 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c562,c1015 key=(null) May 17 00:40:43.821000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E33302E323430002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 May 17 00:40:43.821000 audit[2370]: AVC avc: denied { watch } for pid=2370 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=520974 scontext=system_u:system_r:svirt_lxc_net_t:s0:c562,c1015 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 May 17 00:40:43.821000 audit[2370]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=79 a1=c010281f20 a2=fc6 a3=0 items=0 ppid=2221 pid=2370 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c562,c1015 key=(null) May 17 00:40:43.821000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E33302E323430002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 May 17 00:40:43.829000 audit[2370]: AVC avc: denied { watch } for pid=2370 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=520980 scontext=system_u:system_r:svirt_lxc_net_t:s0:c562,c1015 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 May 17 00:40:43.829000 audit[2370]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=79 a1=c008254f30 a2=fc6 a3=0 items=0 ppid=2221 pid=2370 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c562,c1015 key=(null) May 17 00:40:43.829000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E33302E323430002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 May 17 00:40:43.847000 audit[2370]: AVC avc: denied { watch } for pid=2370 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c562,c1015 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 May 17 00:40:43.847000 audit[2370]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=79 a1=c006b084c0 a2=fc6 a3=0 items=0 ppid=2221 pid=2370 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c562,c1015 key=(null) May 17 00:40:43.847000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E33302E323430002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 May 17 00:40:43.848000 audit[2370]: AVC avc: denied { watch } for pid=2370 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520978 scontext=system_u:system_r:svirt_lxc_net_t:s0:c562,c1015 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 May 17 00:40:43.848000 audit[2370]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=79 a1=c008254360 a2=fc6 a3=0 items=0 ppid=2221 pid=2370 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c562,c1015 key=(null) May 17 00:40:43.848000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E33302E323430002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 May 17 00:40:46.490468 kernel: kauditd_printk_skb: 31 callbacks suppressed May 17 00:40:46.505399 kernel: audit: type=1400 audit(1747442446.480:1530): avc: denied { watch } for pid=2384 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c777,c806 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 May 17 00:40:46.505510 kernel: audit: type=1300 audit(1747442446.480:1530): arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c001649240 a2=fc6 a3=0 items=0 ppid=2248 pid=2384 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c777,c806 key=(null) May 17 00:40:46.480000 audit[2384]: AVC avc: denied { watch } for pid=2384 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c777,c806 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 May 17 00:40:46.480000 audit[2384]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c001649240 a2=fc6 a3=0 items=0 ppid=2248 pid=2384 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c777,c806 key=(null) May 17 00:40:46.480000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 May 17 00:40:46.522804 kernel: audit: type=1327 audit(1747442446.480:1530): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 May 17 00:40:46.500000 audit[2384]: AVC avc: denied { watch } for pid=2384 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c777,c806 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 May 17 00:40:46.533789 kernel: audit: type=1400 audit(1747442446.500:1531): avc: denied { watch } for pid=2384 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c777,c806 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 May 17 00:40:46.500000 audit[2384]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c002dadd60 a2=fc6 a3=0 items=0 ppid=2248 pid=2384 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c777,c806 key=(null) May 17 00:40:46.544787 kernel: audit: type=1300 audit(1747442446.500:1531): arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c002dadd60 a2=fc6 a3=0 items=0 ppid=2248 pid=2384 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c777,c806 key=(null) May 17 00:40:46.500000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 May 17 00:40:46.554834 kernel: audit: type=1327 audit(1747442446.500:1531): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 May 17 00:40:46.509000 audit[2384]: AVC avc: denied { watch } for pid=2384 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c777,c806 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 May 17 00:40:46.562890 kernel: audit: type=1400 audit(1747442446.509:1532): avc: denied { watch } for pid=2384 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c777,c806 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 May 17 00:40:46.573165 kernel: audit: type=1300 audit(1747442446.509:1532): arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c0016498c0 a2=fc6 a3=0 items=0 ppid=2248 pid=2384 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c777,c806 key=(null) May 17 00:40:46.509000 audit[2384]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c0016498c0 a2=fc6 a3=0 items=0 ppid=2248 pid=2384 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c777,c806 key=(null) May 17 00:40:46.509000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 May 17 00:40:46.591076 kernel: audit: type=1327 audit(1747442446.509:1532): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 May 17 00:40:46.591892 kernel: audit: type=1400 audit(1747442446.520:1533): avc: denied { watch } for pid=2384 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c777,c806 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 May 17 00:40:46.520000 audit[2384]: AVC avc: denied { watch } for pid=2384 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c777,c806 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 May 17 00:40:46.520000 audit[2384]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c001649a80 a2=fc6 a3=0 items=0 ppid=2248 pid=2384 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c777,c806 key=(null) May 17 00:40:46.520000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 May 17 00:40:47.499421 kubelet[2516]: E0517 00:40:47.499329 2516 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"goldmane\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.0\\\": ErrImagePull: failed to pull and unpack image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.0\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/goldmane:v3.30.0\\\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden\"" pod="calico-system/goldmane-78d55f7ddc-d97gj" podUID="3ebcad15-5d11-4ed3-b1bb-3bd7f1c5d1af" May 17 00:40:54.010530 systemd[1]: run-containerd-runc-k8s.io-a0779426ca278c47e96a3526d5c7ac854166103cbf173556d3a9ec9202a5f8b1-runc.4jptvM.mount: Deactivated successfully. May 17 00:40:56.478590 env[1634]: time="2025-05-17T00:40:56.478540364Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.0\"" May 17 00:40:56.646147 env[1634]: time="2025-05-17T00:40:56.646061274Z" level=info msg="trying next host" error="failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" host=ghcr.io May 17 00:40:56.649345 env[1634]: time="2025-05-17T00:40:56.649283737Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.0\" failed" error="failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.0\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" May 17 00:40:56.662740 kubelet[2516]: E0517 00:40:56.656227 2516 log.go:32] "PullImage from image service failed" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.0\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/whisker:v3.30.0" May 17 00:40:56.665820 kubelet[2516]: E0517 00:40:56.665748 2516 kuberuntime_image.go:42] "Failed to pull image" err="failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.0\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/whisker:v3.30.0" May 17 00:40:56.678591 kubelet[2516]: E0517 00:40:56.678515 2516 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:whisker,Image:ghcr.io/flatcar/calico/whisker:v3.30.0,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:INFO,ValueFrom:nil,},EnvVar{Name:CALICO_VERSION,Value:v3.30.0,ValueFrom:nil,},EnvVar{Name:CLUSTER_ID,Value:9374fdf540ca4afdb7eee51ad827df9d,ValueFrom:nil,},EnvVar{Name:CLUSTER_TYPE,Value:typha,kdd,k8s,operator,bgp,kubeadm,ValueFrom:nil,},EnvVar{Name:NOTIFICATIONS,Value:Enabled,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:kube-api-access-5f82j,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod whisker-74cd64d847-wzdsv_calico-system(9a1d6802-818f-497c-bada-09fc52fbf432): ErrImagePull: failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker:v3.30.0\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker:v3.30.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" logger="UnhandledError" May 17 00:40:56.680613 env[1634]: time="2025-05-17T00:40:56.680577512Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.0\"" May 17 00:40:56.841908 env[1634]: time="2025-05-17T00:40:56.841706528Z" level=info msg="trying next host" error="failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" host=ghcr.io May 17 00:40:56.844443 env[1634]: time="2025-05-17T00:40:56.844382821Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.0\" failed" error="failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.0\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" May 17 00:40:56.844844 kubelet[2516]: E0517 00:40:56.844785 2516 log.go:32] "PullImage from image service failed" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.0\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/whisker-backend:v3.30.0" May 17 00:40:56.844980 kubelet[2516]: E0517 00:40:56.844851 2516 kuberuntime_image.go:42] "Failed to pull image" err="failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.0\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/whisker-backend:v3.30.0" May 17 00:40:56.845054 kubelet[2516]: E0517 00:40:56.845016 2516 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:whisker-backend,Image:ghcr.io/flatcar/calico/whisker-backend:v3.30.0,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:INFO,ValueFrom:nil,},EnvVar{Name:PORT,Value:3002,ValueFrom:nil,},EnvVar{Name:GOLDMANE_HOST,Value:goldmane.calico-system.svc.cluster.local:7443,ValueFrom:nil,},EnvVar{Name:TLS_CERT_PATH,Value:/whisker-backend-key-pair/tls.crt,ValueFrom:nil,},EnvVar{Name:TLS_KEY_PATH,Value:/whisker-backend-key-pair/tls.key,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:whisker-backend-key-pair,ReadOnly:true,MountPath:/whisker-backend-key-pair,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:whisker-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-5f82j,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod whisker-74cd64d847-wzdsv_calico-system(9a1d6802-818f-497c-bada-09fc52fbf432): ErrImagePull: failed to pull and unpack image \"ghcr.io/flatcar/calico/whisker-backend:v3.30.0\": failed to resolve reference \"ghcr.io/flatcar/calico/whisker-backend:v3.30.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" logger="UnhandledError" May 17 00:40:56.846375 kubelet[2516]: E0517 00:40:56.846326 2516 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"whisker\" with ErrImagePull: \"failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker:v3.30.0\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker:v3.30.0\\\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden\", failed to \"StartContainer\" for \"whisker-backend\" with ErrImagePull: \"failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.0\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.0\\\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden\"]" pod="calico-system/whisker-74cd64d847-wzdsv" podUID="9a1d6802-818f-497c-bada-09fc52fbf432" May 17 00:40:57.130732 systemd[1]: cri-containerd-d548ee2acb0d393fd88c84e29843adc15c60d3b441b9951623712d26ed93a845.scope: Deactivated successfully. May 17 00:40:57.130000 audit: BPF prog-id=123 op=UNLOAD May 17 00:40:57.139001 kernel: kauditd_printk_skb: 2 callbacks suppressed May 17 00:40:57.142285 kernel: audit: type=1334 audit(1747442457.130:1534): prog-id=123 op=UNLOAD May 17 00:40:57.142362 kernel: audit: type=1334 audit(1747442457.137:1535): prog-id=126 op=UNLOAD May 17 00:40:57.137000 audit: BPF prog-id=126 op=UNLOAD May 17 00:40:57.131140 systemd[1]: cri-containerd-d548ee2acb0d393fd88c84e29843adc15c60d3b441b9951623712d26ed93a845.scope: Consumed 10.488s CPU time. May 17 00:40:57.173310 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-d548ee2acb0d393fd88c84e29843adc15c60d3b441b9951623712d26ed93a845-rootfs.mount: Deactivated successfully. May 17 00:40:57.176512 env[1634]: time="2025-05-17T00:40:57.175895731Z" level=info msg="shim disconnected" id=d548ee2acb0d393fd88c84e29843adc15c60d3b441b9951623712d26ed93a845 May 17 00:40:57.176512 env[1634]: time="2025-05-17T00:40:57.176511064Z" level=warning msg="cleaning up after shim disconnected" id=d548ee2acb0d393fd88c84e29843adc15c60d3b441b9951623712d26ed93a845 namespace=k8s.io May 17 00:40:57.176700 env[1634]: time="2025-05-17T00:40:57.176521867Z" level=info msg="cleaning up dead shim" May 17 00:40:57.184532 env[1634]: time="2025-05-17T00:40:57.184488027Z" level=warning msg="cleanup warnings time=\"2025-05-17T00:40:57Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=5852 runtime=io.containerd.runc.v2\n" May 17 00:40:57.254850 systemd[1]: cri-containerd-c2bdd09449cb0f71eb6711a0eb9478d45cfa10020383168e3e28b11840c63290.scope: Deactivated successfully. May 17 00:40:57.255099 systemd[1]: cri-containerd-c2bdd09449cb0f71eb6711a0eb9478d45cfa10020383168e3e28b11840c63290.scope: Consumed 4.765s CPU time. May 17 00:40:57.263653 kernel: audit: type=1334 audit(1747442457.259:1536): prog-id=90 op=UNLOAD May 17 00:40:57.263819 kernel: audit: type=1334 audit(1747442457.259:1537): prog-id=107 op=UNLOAD May 17 00:40:57.259000 audit: BPF prog-id=90 op=UNLOAD May 17 00:40:57.259000 audit: BPF prog-id=107 op=UNLOAD May 17 00:40:57.282131 env[1634]: time="2025-05-17T00:40:57.282088777Z" level=info msg="shim disconnected" id=c2bdd09449cb0f71eb6711a0eb9478d45cfa10020383168e3e28b11840c63290 May 17 00:40:57.282422 env[1634]: time="2025-05-17T00:40:57.282394907Z" level=warning msg="cleaning up after shim disconnected" id=c2bdd09449cb0f71eb6711a0eb9478d45cfa10020383168e3e28b11840c63290 namespace=k8s.io May 17 00:40:57.282505 env[1634]: time="2025-05-17T00:40:57.282494301Z" level=info msg="cleaning up dead shim" May 17 00:40:57.287990 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-c2bdd09449cb0f71eb6711a0eb9478d45cfa10020383168e3e28b11840c63290-rootfs.mount: Deactivated successfully. May 17 00:40:57.298514 env[1634]: time="2025-05-17T00:40:57.298467010Z" level=warning msg="cleanup warnings time=\"2025-05-17T00:40:57Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=5880 runtime=io.containerd.runc.v2\n" May 17 00:40:57.421398 kubelet[2516]: I0517 00:40:57.420471 2516 scope.go:117] "RemoveContainer" containerID="d548ee2acb0d393fd88c84e29843adc15c60d3b441b9951623712d26ed93a845" May 17 00:40:57.426937 kubelet[2516]: I0517 00:40:57.426908 2516 scope.go:117] "RemoveContainer" containerID="c2bdd09449cb0f71eb6711a0eb9478d45cfa10020383168e3e28b11840c63290" May 17 00:40:57.454360 env[1634]: time="2025-05-17T00:40:57.454205520Z" level=info msg="CreateContainer within sandbox \"756081b9066e92973707e8c91d18afbf2b0fadbecc3a0b84a5b7300a84c5a587\" for container &ContainerMetadata{Name:tigera-operator,Attempt:1,}" May 17 00:40:57.454360 env[1634]: time="2025-05-17T00:40:57.454235559Z" level=info msg="CreateContainer within sandbox \"ddd5306b4024236e083e6f2fa246f4ba8900d0ba8f2138bbdeda57dbc45e5ff3\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:1,}" May 17 00:40:57.488887 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2285650354.mount: Deactivated successfully. May 17 00:40:57.499657 env[1634]: time="2025-05-17T00:40:57.499601223Z" level=info msg="CreateContainer within sandbox \"756081b9066e92973707e8c91d18afbf2b0fadbecc3a0b84a5b7300a84c5a587\" for &ContainerMetadata{Name:tigera-operator,Attempt:1,} returns container id \"f7ce5341a8d35195adfd8f6f04a23bb553da58188129cbfb51575af751bb728e\"" May 17 00:40:57.502093 env[1634]: time="2025-05-17T00:40:57.502059865Z" level=info msg="StartContainer for \"f7ce5341a8d35195adfd8f6f04a23bb553da58188129cbfb51575af751bb728e\"" May 17 00:40:57.505682 env[1634]: time="2025-05-17T00:40:57.505629236Z" level=info msg="CreateContainer within sandbox \"ddd5306b4024236e083e6f2fa246f4ba8900d0ba8f2138bbdeda57dbc45e5ff3\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:1,} returns container id \"5030320e988f0582e3a7a5ffc23ebca8f710e16572a53c4a10373589c7aac800\"" May 17 00:40:57.506375 env[1634]: time="2025-05-17T00:40:57.506345839Z" level=info msg="StartContainer for \"5030320e988f0582e3a7a5ffc23ebca8f710e16572a53c4a10373589c7aac800\"" May 17 00:40:57.526972 systemd[1]: Started cri-containerd-f7ce5341a8d35195adfd8f6f04a23bb553da58188129cbfb51575af751bb728e.scope. May 17 00:40:57.534806 systemd[1]: Started cri-containerd-5030320e988f0582e3a7a5ffc23ebca8f710e16572a53c4a10373589c7aac800.scope. May 17 00:40:57.571222 kernel: audit: type=1400 audit(1747442457.558:1538): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:40:57.571384 kernel: audit: type=1400 audit(1747442457.558:1539): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:40:57.558000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:40:57.590745 kernel: audit: type=1400 audit(1747442457.558:1540): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:40:57.590866 kernel: audit: type=1400 audit(1747442457.558:1541): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:40:57.590908 kernel: audit: type=1400 audit(1747442457.558:1542): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:40:57.590940 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 May 17 00:40:57.558000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:40:57.558000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:40:57.558000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:40:57.558000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:40:57.558000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:40:57.558000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:40:57.558000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:40:57.558000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:40:57.564000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:40:57.564000 audit: BPF prog-id=225 op=LOAD May 17 00:40:57.565000 audit[5901]: AVC avc: denied { bpf } for pid=5901 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:40:57.565000 audit[5901]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=2615 pid=5901 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:40:57.565000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6637636535333431613864333531393561646664386636663034613233 May 17 00:40:57.565000 audit[5901]: AVC avc: denied { perfmon } for pid=5901 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:40:57.565000 audit[5901]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=2615 pid=5901 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:40:57.565000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6637636535333431613864333531393561646664386636663034613233 May 17 00:40:57.565000 audit[5901]: AVC avc: denied { bpf } for pid=5901 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:40:57.565000 audit[5901]: AVC avc: denied { bpf } for pid=5901 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:40:57.565000 audit[5901]: AVC avc: denied { bpf } for pid=5901 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:40:57.565000 audit[5901]: AVC avc: denied { perfmon } for pid=5901 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:40:57.565000 audit[5901]: AVC avc: denied { perfmon } for pid=5901 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:40:57.565000 audit[5901]: AVC avc: denied { perfmon } for pid=5901 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:40:57.565000 audit[5901]: AVC avc: denied { perfmon } for pid=5901 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:40:57.565000 audit[5901]: AVC avc: denied { perfmon } for pid=5901 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:40:57.565000 audit[5901]: AVC avc: denied { bpf } for pid=5901 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:40:57.565000 audit[5901]: AVC avc: denied { bpf } for pid=5901 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:40:57.565000 audit: BPF prog-id=226 op=LOAD May 17 00:40:57.565000 audit[5901]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c000398e60 items=0 ppid=2615 pid=5901 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:40:57.565000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6637636535333431613864333531393561646664386636663034613233 May 17 00:40:57.571000 audit[5901]: AVC avc: denied { bpf } for pid=5901 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:40:57.571000 audit[5901]: AVC avc: denied { bpf } for pid=5901 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:40:57.571000 audit[5901]: AVC avc: denied { perfmon } for pid=5901 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:40:57.571000 audit[5901]: AVC avc: denied { perfmon } for pid=5901 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:40:57.571000 audit[5901]: AVC avc: denied { perfmon } for pid=5901 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:40:57.571000 audit[5901]: AVC avc: denied { perfmon } for pid=5901 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:40:57.571000 audit[5901]: AVC avc: denied { perfmon } for pid=5901 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:40:57.571000 audit[5901]: AVC avc: denied { bpf } for pid=5901 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:40:57.571000 audit[5901]: AVC avc: denied { bpf } for pid=5901 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:40:57.571000 audit: BPF prog-id=227 op=LOAD May 17 00:40:57.571000 audit[5901]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c000398ea8 items=0 ppid=2615 pid=5901 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:40:57.571000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6637636535333431613864333531393561646664386636663034613233 May 17 00:40:57.577000 audit: BPF prog-id=227 op=UNLOAD May 17 00:40:57.577000 audit: BPF prog-id=226 op=UNLOAD May 17 00:40:57.577000 audit[5901]: AVC avc: denied { bpf } for pid=5901 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:40:57.577000 audit[5901]: AVC avc: denied { bpf } for pid=5901 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:40:57.577000 audit[5901]: AVC avc: denied { bpf } for pid=5901 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:40:57.577000 audit[5901]: AVC avc: denied { perfmon } for pid=5901 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:40:57.577000 audit[5901]: AVC avc: denied { perfmon } for pid=5901 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:40:57.577000 audit[5901]: AVC avc: denied { perfmon } for pid=5901 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:40:57.577000 audit[5901]: AVC avc: denied { perfmon } for pid=5901 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:40:57.577000 audit[5901]: AVC avc: denied { perfmon } for pid=5901 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:40:57.577000 audit[5901]: AVC avc: denied { bpf } for pid=5901 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:40:57.582000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:40:57.582000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:40:57.582000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:40:57.582000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:40:57.582000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:40:57.582000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:40:57.582000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:40:57.582000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:40:57.582000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:40:57.583000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:40:57.583000 audit: BPF prog-id=228 op=LOAD May 17 00:40:57.584000 audit[5913]: AVC avc: denied { bpf } for pid=5913 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:40:57.584000 audit[5913]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=2248 pid=5913 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:40:57.577000 audit: BPF prog-id=229 op=LOAD May 17 00:40:57.584000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3530333033323065393838663035383265336137613566666332336562 May 17 00:40:57.592000 audit[5913]: AVC avc: denied { perfmon } for pid=5913 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:40:57.592000 audit[5913]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=2248 pid=5913 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:40:57.592000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3530333033323065393838663035383265336137613566666332336562 May 17 00:40:57.592000 audit[5913]: AVC avc: denied { bpf } for pid=5913 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:40:57.592000 audit[5913]: AVC avc: denied { bpf } for pid=5913 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:40:57.592000 audit[5913]: AVC avc: denied { bpf } for pid=5913 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:40:57.592000 audit[5913]: AVC avc: denied { perfmon } for pid=5913 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:40:57.592000 audit[5913]: AVC avc: denied { perfmon } for pid=5913 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:40:57.592000 audit[5913]: AVC avc: denied { perfmon } for pid=5913 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:40:57.592000 audit[5913]: AVC avc: denied { perfmon } for pid=5913 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:40:57.592000 audit[5913]: AVC avc: denied { perfmon } for pid=5913 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:40:57.592000 audit[5913]: AVC avc: denied { bpf } for pid=5913 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:40:57.592000 audit[5913]: AVC avc: denied { bpf } for pid=5913 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:40:57.592000 audit: BPF prog-id=230 op=LOAD May 17 00:40:57.592000 audit[5913]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c000219f40 items=0 ppid=2248 pid=5913 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:40:57.592000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3530333033323065393838663035383265336137613566666332336562 May 17 00:40:57.592000 audit[5913]: AVC avc: denied { bpf } for pid=5913 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:40:57.592000 audit[5913]: AVC avc: denied { bpf } for pid=5913 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:40:57.592000 audit[5913]: AVC avc: denied { perfmon } for pid=5913 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:40:57.592000 audit[5913]: AVC avc: denied { perfmon } for pid=5913 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:40:57.592000 audit[5913]: AVC avc: denied { perfmon } for pid=5913 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:40:57.592000 audit[5913]: AVC avc: denied { perfmon } for pid=5913 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:40:57.592000 audit[5913]: AVC avc: denied { perfmon } for pid=5913 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:40:57.592000 audit[5913]: AVC avc: denied { bpf } for pid=5913 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:40:57.592000 audit[5913]: AVC avc: denied { bpf } for pid=5913 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:40:57.592000 audit: BPF prog-id=231 op=LOAD May 17 00:40:57.592000 audit[5913]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c000219f88 items=0 ppid=2248 pid=5913 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:40:57.592000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3530333033323065393838663035383265336137613566666332336562 May 17 00:40:57.592000 audit: BPF prog-id=231 op=UNLOAD May 17 00:40:57.592000 audit: BPF prog-id=230 op=UNLOAD May 17 00:40:57.592000 audit[5913]: AVC avc: denied { bpf } for pid=5913 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:40:57.592000 audit[5913]: AVC avc: denied { bpf } for pid=5913 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:40:57.592000 audit[5913]: AVC avc: denied { bpf } for pid=5913 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:40:57.592000 audit[5913]: AVC avc: denied { perfmon } for pid=5913 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:40:57.592000 audit[5913]: AVC avc: denied { perfmon } for pid=5913 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:40:57.592000 audit[5913]: AVC avc: denied { perfmon } for pid=5913 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:40:57.592000 audit[5913]: AVC avc: denied { perfmon } for pid=5913 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:40:57.592000 audit[5913]: AVC avc: denied { perfmon } for pid=5913 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:40:57.592000 audit[5913]: AVC avc: denied { bpf } for pid=5913 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:40:57.592000 audit[5913]: AVC avc: denied { bpf } for pid=5913 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:40:57.592000 audit: BPF prog-id=232 op=LOAD May 17 00:40:57.592000 audit[5913]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c000260398 items=0 ppid=2248 pid=5913 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:40:57.592000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3530333033323065393838663035383265336137613566666332336562 May 17 00:40:57.577000 audit[5901]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0003992b8 items=0 ppid=2615 pid=5901 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:40:57.577000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6637636535333431613864333531393561646664386636663034613233 May 17 00:40:57.619354 env[1634]: time="2025-05-17T00:40:57.615397134Z" level=info msg="StartContainer for \"f7ce5341a8d35195adfd8f6f04a23bb553da58188129cbfb51575af751bb728e\" returns successfully" May 17 00:40:57.645893 env[1634]: time="2025-05-17T00:40:57.645843207Z" level=info msg="StartContainer for \"5030320e988f0582e3a7a5ffc23ebca8f710e16572a53c4a10373589c7aac800\" returns successfully" May 17 00:40:58.177176 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount158426733.mount: Deactivated successfully. May 17 00:40:59.458174 kubelet[2516]: E0517 00:40:59.458125 2516 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"goldmane\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.0\\\": ErrImagePull: failed to pull and unpack image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.0\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/goldmane:v3.30.0\\\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden\"" pod="calico-system/goldmane-78d55f7ddc-d97gj" podUID="3ebcad15-5d11-4ed3-b1bb-3bd7f1c5d1af" May 17 00:40:59.737000 audit[5933]: AVC avc: denied { watch } for pid=5933 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520978 scontext=system_u:system_r:svirt_lxc_net_t:s0:c777,c806 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 May 17 00:40:59.737000 audit[5933]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6 a1=c000585110 a2=fc6 a3=0 items=0 ppid=2248 pid=5933 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c777,c806 key=(null) May 17 00:40:59.737000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 May 17 00:40:59.738000 audit[5933]: AVC avc: denied { watch } for pid=5933 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c777,c806 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 May 17 00:40:59.738000 audit[5933]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6 a1=c0003deae0 a2=fc6 a3=0 items=0 ppid=2248 pid=5933 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c777,c806 key=(null) May 17 00:40:59.738000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 May 17 00:41:02.279916 systemd[1]: cri-containerd-d3f6de2666252f3f9669ba58bd99c55564b69b0fbbf03f9de4919f2fcf964c42.scope: Deactivated successfully. May 17 00:41:02.280603 systemd[1]: cri-containerd-d3f6de2666252f3f9669ba58bd99c55564b69b0fbbf03f9de4919f2fcf964c42.scope: Consumed 2.117s CPU time. May 17 00:41:02.306842 kernel: kauditd_printk_skb: 116 callbacks suppressed May 17 00:41:02.307167 kernel: audit: type=1334 audit(1747442462.291:1576): prog-id=82 op=UNLOAD May 17 00:41:02.307376 kernel: audit: type=1334 audit(1747442462.291:1577): prog-id=98 op=UNLOAD May 17 00:41:02.291000 audit: BPF prog-id=82 op=UNLOAD May 17 00:41:02.291000 audit: BPF prog-id=98 op=UNLOAD May 17 00:41:02.382723 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-d3f6de2666252f3f9669ba58bd99c55564b69b0fbbf03f9de4919f2fcf964c42-rootfs.mount: Deactivated successfully. May 17 00:41:02.397630 env[1634]: time="2025-05-17T00:41:02.397577252Z" level=info msg="shim disconnected" id=d3f6de2666252f3f9669ba58bd99c55564b69b0fbbf03f9de4919f2fcf964c42 May 17 00:41:02.398693 env[1634]: time="2025-05-17T00:41:02.398657659Z" level=warning msg="cleaning up after shim disconnected" id=d3f6de2666252f3f9669ba58bd99c55564b69b0fbbf03f9de4919f2fcf964c42 namespace=k8s.io May 17 00:41:02.398910 env[1634]: time="2025-05-17T00:41:02.398889274Z" level=info msg="cleaning up dead shim" May 17 00:41:02.415438 env[1634]: time="2025-05-17T00:41:02.415381731Z" level=warning msg="cleanup warnings time=\"2025-05-17T00:41:02Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=5977 runtime=io.containerd.runc.v2\n" May 17 00:41:03.291682 kubelet[2516]: E0517 00:41:03.291596 2516 controller.go:195] "Failed to update lease" err="Put \"https://172.31.30.240:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-30-240?timeout=10s\": context deadline exceeded (Client.Timeout exceeded while awaiting headers)" May 17 00:41:03.475656 kubelet[2516]: I0517 00:41:03.475612 2516 scope.go:117] "RemoveContainer" containerID="d3f6de2666252f3f9669ba58bd99c55564b69b0fbbf03f9de4919f2fcf964c42" May 17 00:41:03.478211 env[1634]: time="2025-05-17T00:41:03.478158576Z" level=info msg="CreateContainer within sandbox \"4a5f3fed77bf8731532a7194c09d9bc646d7ccf15f8b9a169b532b919ed9fc2c\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:1,}" May 17 00:41:03.504919 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1932380849.mount: Deactivated successfully. May 17 00:41:03.520381 env[1634]: time="2025-05-17T00:41:03.520324716Z" level=info msg="CreateContainer within sandbox \"4a5f3fed77bf8731532a7194c09d9bc646d7ccf15f8b9a169b532b919ed9fc2c\" for &ContainerMetadata{Name:kube-scheduler,Attempt:1,} returns container id \"7fd15fd3a7ce348248ec3df070cf033b45383bec9637c2c27442f63f56646aa3\"" May 17 00:41:03.521916 env[1634]: time="2025-05-17T00:41:03.520973569Z" level=info msg="StartContainer for \"7fd15fd3a7ce348248ec3df070cf033b45383bec9637c2c27442f63f56646aa3\"" May 17 00:41:03.668200 systemd[1]: Started cri-containerd-7fd15fd3a7ce348248ec3df070cf033b45383bec9637c2c27442f63f56646aa3.scope. May 17 00:41:03.680000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:41:03.693325 kernel: audit: type=1400 audit(1747442463.680:1578): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:41:03.693498 kernel: audit: type=1400 audit(1747442463.680:1579): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:41:03.680000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:41:03.699446 kernel: audit: type=1400 audit(1747442463.680:1580): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:41:03.680000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:41:03.705456 kernel: audit: type=1400 audit(1747442463.680:1581): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:41:03.680000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:41:03.680000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:41:03.711361 kernel: audit: type=1400 audit(1747442463.680:1582): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:41:03.711543 kernel: audit: type=1400 audit(1747442463.680:1583): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:41:03.680000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:41:03.723483 kernel: audit: type=1400 audit(1747442463.680:1584): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:41:03.723649 kernel: audit: type=1400 audit(1747442463.680:1585): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:41:03.680000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:41:03.680000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:41:03.680000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:41:03.686000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:41:03.686000 audit: BPF prog-id=233 op=LOAD May 17 00:41:03.686000 audit[6012]: AVC avc: denied { bpf } for pid=6012 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:41:03.686000 audit[6012]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bdc48 a2=10 a3=1c items=0 ppid=2197 pid=6012 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:41:03.686000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3766643135666433613763653334383234386563336466303730636630 May 17 00:41:03.686000 audit[6012]: AVC avc: denied { perfmon } for pid=6012 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:41:03.686000 audit[6012]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001bd6b0 a2=3c a3=8 items=0 ppid=2197 pid=6012 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:41:03.686000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3766643135666433613763653334383234386563336466303730636630 May 17 00:41:03.686000 audit[6012]: AVC avc: denied { bpf } for pid=6012 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:41:03.686000 audit[6012]: AVC avc: denied { bpf } for pid=6012 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:41:03.686000 audit[6012]: AVC avc: denied { bpf } for pid=6012 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:41:03.686000 audit[6012]: AVC avc: denied { perfmon } for pid=6012 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:41:03.686000 audit[6012]: AVC avc: denied { perfmon } for pid=6012 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:41:03.686000 audit[6012]: AVC avc: denied { perfmon } for pid=6012 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:41:03.686000 audit[6012]: AVC avc: denied { perfmon } for pid=6012 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:41:03.686000 audit[6012]: AVC avc: denied { perfmon } for pid=6012 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:41:03.686000 audit[6012]: AVC avc: denied { bpf } for pid=6012 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:41:03.686000 audit[6012]: AVC avc: denied { bpf } for pid=6012 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:41:03.686000 audit: BPF prog-id=234 op=LOAD May 17 00:41:03.686000 audit[6012]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bd9d8 a2=78 a3=c000310800 items=0 ppid=2197 pid=6012 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:41:03.686000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3766643135666433613763653334383234386563336466303730636630 May 17 00:41:03.693000 audit[6012]: AVC avc: denied { bpf } for pid=6012 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:41:03.693000 audit[6012]: AVC avc: denied { bpf } for pid=6012 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:41:03.693000 audit[6012]: AVC avc: denied { perfmon } for pid=6012 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:41:03.693000 audit[6012]: AVC avc: denied { perfmon } for pid=6012 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:41:03.693000 audit[6012]: AVC avc: denied { perfmon } for pid=6012 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:41:03.693000 audit[6012]: AVC avc: denied { perfmon } for pid=6012 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:41:03.693000 audit[6012]: AVC avc: denied { perfmon } for pid=6012 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:41:03.693000 audit[6012]: AVC avc: denied { bpf } for pid=6012 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:41:03.693000 audit[6012]: AVC avc: denied { bpf } for pid=6012 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:41:03.693000 audit: BPF prog-id=235 op=LOAD May 17 00:41:03.693000 audit[6012]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bd770 a2=78 a3=c000310848 items=0 ppid=2197 pid=6012 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:41:03.693000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3766643135666433613763653334383234386563336466303730636630 May 17 00:41:03.693000 audit: BPF prog-id=235 op=UNLOAD May 17 00:41:03.693000 audit: BPF prog-id=234 op=UNLOAD May 17 00:41:03.693000 audit[6012]: AVC avc: denied { bpf } for pid=6012 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:41:03.693000 audit[6012]: AVC avc: denied { bpf } for pid=6012 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:41:03.693000 audit[6012]: AVC avc: denied { bpf } for pid=6012 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:41:03.693000 audit[6012]: AVC avc: denied { perfmon } for pid=6012 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:41:03.693000 audit[6012]: AVC avc: denied { perfmon } for pid=6012 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:41:03.693000 audit[6012]: AVC avc: denied { perfmon } for pid=6012 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:41:03.693000 audit[6012]: AVC avc: denied { perfmon } for pid=6012 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:41:03.693000 audit[6012]: AVC avc: denied { perfmon } for pid=6012 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:41:03.693000 audit[6012]: AVC avc: denied { bpf } for pid=6012 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:41:03.693000 audit[6012]: AVC avc: denied { bpf } for pid=6012 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 May 17 00:41:03.693000 audit: BPF prog-id=236 op=LOAD May 17 00:41:03.693000 audit[6012]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bdc30 a2=78 a3=c000310c58 items=0 ppid=2197 pid=6012 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) May 17 00:41:03.693000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3766643135666433613763653334383234386563336466303730636630 May 17 00:41:03.786305 env[1634]: time="2025-05-17T00:41:03.784645962Z" level=info msg="StartContainer for \"7fd15fd3a7ce348248ec3df070cf033b45383bec9637c2c27442f63f56646aa3\" returns successfully" May 17 00:41:09.408664 systemd[1]: cri-containerd-f7ce5341a8d35195adfd8f6f04a23bb553da58188129cbfb51575af751bb728e.scope: Deactivated successfully. May 17 00:41:09.412865 kernel: kauditd_printk_skb: 49 callbacks suppressed May 17 00:41:09.413082 kernel: audit: type=1334 audit(1747442469.408:1596): prog-id=225 op=UNLOAD May 17 00:41:09.408000 audit: BPF prog-id=225 op=UNLOAD May 17 00:41:09.413000 audit: BPF prog-id=229 op=UNLOAD May 17 00:41:09.416786 kernel: audit: type=1334 audit(1747442469.413:1597): prog-id=229 op=UNLOAD May 17 00:41:09.437522 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-f7ce5341a8d35195adfd8f6f04a23bb553da58188129cbfb51575af751bb728e-rootfs.mount: Deactivated successfully. May 17 00:41:09.461083 env[1634]: time="2025-05-17T00:41:09.461026058Z" level=info msg="shim disconnected" id=f7ce5341a8d35195adfd8f6f04a23bb553da58188129cbfb51575af751bb728e May 17 00:41:09.461083 env[1634]: time="2025-05-17T00:41:09.461073792Z" level=warning msg="cleaning up after shim disconnected" id=f7ce5341a8d35195adfd8f6f04a23bb553da58188129cbfb51575af751bb728e namespace=k8s.io May 17 00:41:09.461083 env[1634]: time="2025-05-17T00:41:09.461082780Z" level=info msg="cleaning up dead shim" May 17 00:41:09.471915 env[1634]: time="2025-05-17T00:41:09.471865120Z" level=warning msg="cleanup warnings time=\"2025-05-17T00:41:09Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=6080 runtime=io.containerd.runc.v2\n" May 17 00:41:09.492280 kubelet[2516]: I0517 00:41:09.492180 2516 scope.go:117] "RemoveContainer" containerID="d548ee2acb0d393fd88c84e29843adc15c60d3b441b9951623712d26ed93a845" May 17 00:41:09.494388 kubelet[2516]: I0517 00:41:09.492467 2516 scope.go:117] "RemoveContainer" containerID="f7ce5341a8d35195adfd8f6f04a23bb553da58188129cbfb51575af751bb728e" May 17 00:41:09.501693 kubelet[2516]: E0517 00:41:09.501630 2516 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"tigera-operator\" with CrashLoopBackOff: \"back-off 10s restarting failed container=tigera-operator pod=tigera-operator-844669ff44-ksvbv_tigera-operator(f068bd1b-193a-44f0-aa54-140294162060)\"" pod="tigera-operator/tigera-operator-844669ff44-ksvbv" podUID="f068bd1b-193a-44f0-aa54-140294162060" May 17 00:41:09.516199 env[1634]: time="2025-05-17T00:41:09.516156796Z" level=info msg="RemoveContainer for \"d548ee2acb0d393fd88c84e29843adc15c60d3b441b9951623712d26ed93a845\"" May 17 00:41:09.523395 env[1634]: time="2025-05-17T00:41:09.523330157Z" level=info msg="RemoveContainer for \"d548ee2acb0d393fd88c84e29843adc15c60d3b441b9951623712d26ed93a845\" returns successfully" May 17 00:41:10.454909 kubelet[2516]: E0517 00:41:10.454872 2516 pod_workers.go:1301] "Error syncing pod, skipping" err="[failed to \"StartContainer\" for \"whisker\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker:v3.30.0\\\": ErrImagePull: failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker:v3.30.0\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker:v3.30.0\\\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden\", failed to \"StartContainer\" for \"whisker-backend\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.0\\\": ErrImagePull: failed to pull and unpack image \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.0\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.0\\\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden\"]" pod="calico-system/whisker-74cd64d847-wzdsv" podUID="9a1d6802-818f-497c-bada-09fc52fbf432" May 17 00:41:12.458848 env[1634]: time="2025-05-17T00:41:12.458067521Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.0\"" May 17 00:41:12.641249 env[1634]: time="2025-05-17T00:41:12.641173805Z" level=info msg="trying next host" error="failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" host=ghcr.io May 17 00:41:12.643538 env[1634]: time="2025-05-17T00:41:12.643463387Z" level=error msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.0\" failed" error="failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.0\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" May 17 00:41:12.649744 kubelet[2516]: E0517 00:41:12.648302 2516 log.go:32] "PullImage from image service failed" err="rpc error: code = Unknown desc = failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.0\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/goldmane:v3.30.0" May 17 00:41:12.651515 kubelet[2516]: E0517 00:41:12.651453 2516 kuberuntime_image.go:42] "Failed to pull image" err="failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.0\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" image="ghcr.io/flatcar/calico/goldmane:v3.30.0" May 17 00:41:12.657564 kubelet[2516]: E0517 00:41:12.657479 2516 kuberuntime_manager.go:1358] "Unhandled Error" err="container &Container{Name:goldmane,Image:ghcr.io/flatcar/calico/goldmane:v3.30.0,Command:[],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:LOG_LEVEL,Value:INFO,ValueFrom:nil,},EnvVar{Name:PORT,Value:7443,ValueFrom:nil,},EnvVar{Name:SERVER_CERT_PATH,Value:/goldmane-key-pair/tls.crt,ValueFrom:nil,},EnvVar{Name:SERVER_KEY_PATH,Value:/goldmane-key-pair/tls.key,ValueFrom:nil,},EnvVar{Name:CA_CERT_PATH,Value:/etc/pki/tls/certs/tigera-ca-bundle.crt,ValueFrom:nil,},EnvVar{Name:PUSH_URL,Value:https://guardian.calico-system.svc.cluster.local:443/api/v1/flows/bulk,ValueFrom:nil,},EnvVar{Name:FILE_CONFIG_PATH,Value:/config/config.json,ValueFrom:nil,},EnvVar{Name:HEALTH_ENABLED,Value:true,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:config,ReadOnly:true,MountPath:/config,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:goldmane-ca-bundle,ReadOnly:true,MountPath:/etc/pki/tls/certs,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:goldmane-key-pair,ReadOnly:true,MountPath:/goldmane-key-pair,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},VolumeMount{Name:kube-api-access-lklcj,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,RecursiveReadOnly:nil,},},LivenessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/health -live],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:60,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},ReadinessProbe:&Probe{ProbeHandler:ProbeHandler{Exec:&ExecAction{Command:[/health -ready],},HTTPGet:nil,TCPSocket:nil,GRPC:nil,},InitialDelaySeconds:0,TimeoutSeconds:5,PeriodSeconds:30,SuccessThreshold:1,FailureThreshold:3,TerminationGracePeriodSeconds:nil,},Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[],Drop:[ALL],},Privileged:*false,SELinuxOptions:nil,RunAsUser:*10001,RunAsNonRoot:*true,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:*false,RunAsGroup:*10001,ProcMount:nil,WindowsOptions:nil,SeccompProfile:&SeccompProfile{Type:RuntimeDefault,LocalhostProfile:nil,},AppArmorProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:File,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod goldmane-78d55f7ddc-d97gj_calico-system(3ebcad15-5d11-4ed3-b1bb-3bd7f1c5d1af): ErrImagePull: failed to pull and unpack image \"ghcr.io/flatcar/calico/goldmane:v3.30.0\": failed to resolve reference \"ghcr.io/flatcar/calico/goldmane:v3.30.0\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden" logger="UnhandledError" May 17 00:41:12.659054 kubelet[2516]: E0517 00:41:12.658985 2516 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"goldmane\" with ErrImagePull: \"failed to pull and unpack image \\\"ghcr.io/flatcar/calico/goldmane:v3.30.0\\\": failed to resolve reference \\\"ghcr.io/flatcar/calico/goldmane:v3.30.0\\\": failed to authorize: failed to fetch anonymous token: unexpected status: 403 Forbidden\"" pod="calico-system/goldmane-78d55f7ddc-d97gj" podUID="3ebcad15-5d11-4ed3-b1bb-3bd7f1c5d1af" May 17 00:41:13.292784 kubelet[2516]: E0517 00:41:13.292695 2516 controller.go:195] "Failed to update lease" err="Put \"https://172.31.30.240:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-30-240?timeout=10s\": net/http: request canceled (Client.Timeout exceeded while awaiting headers)" May 17 00:41:14.963703 systemd[1]: run-containerd-runc-k8s.io-a0779426ca278c47e96a3526d5c7ac854166103cbf173556d3a9ec9202a5f8b1-runc.h6vj8e.mount: Deactivated successfully.