Jul 10 00:35:48.035875 kernel: Linux version 5.15.186-flatcar (build@pony-truck.infra.kinvolk.io) (x86_64-cros-linux-gnu-gcc (Gentoo Hardened 11.3.1_p20221209 p3) 11.3.1 20221209, GNU ld (Gentoo 2.39 p5) 2.39.0) #1 SMP Wed Jul 9 23:09:45 -00 2025 Jul 10 00:35:48.035899 kernel: Command line: BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200 flatcar.first_boot=detected verity.usrhash=6cddad5f675165861f6062277cc28875548c735477e689762fc73abc16b63a3d Jul 10 00:35:48.035910 kernel: BIOS-provided physical RAM map: Jul 10 00:35:48.035917 kernel: BIOS-e820: [mem 0x0000000000000000-0x000000000009fbff] usable Jul 10 00:35:48.035924 kernel: BIOS-e820: [mem 0x000000000009fc00-0x000000000009ffff] reserved Jul 10 00:35:48.035934 kernel: BIOS-e820: [mem 0x00000000000f0000-0x00000000000fffff] reserved Jul 10 00:35:48.035943 kernel: BIOS-e820: [mem 0x0000000000100000-0x000000009cfdbfff] usable Jul 10 00:35:48.035951 kernel: BIOS-e820: [mem 0x000000009cfdc000-0x000000009cffffff] reserved Jul 10 00:35:48.035960 kernel: BIOS-e820: [mem 0x00000000b0000000-0x00000000bfffffff] reserved Jul 10 00:35:48.035967 kernel: BIOS-e820: [mem 0x00000000fed1c000-0x00000000fed1ffff] reserved Jul 10 00:35:48.035975 kernel: BIOS-e820: [mem 0x00000000feffc000-0x00000000feffffff] reserved Jul 10 00:35:48.035982 kernel: BIOS-e820: [mem 0x00000000fffc0000-0x00000000ffffffff] reserved Jul 10 00:35:48.035989 kernel: BIOS-e820: [mem 0x000000fd00000000-0x000000ffffffffff] reserved Jul 10 00:35:48.035997 kernel: NX (Execute Disable) protection: active Jul 10 00:35:48.036008 kernel: SMBIOS 2.8 present. Jul 10 00:35:48.036016 kernel: DMI: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 Jul 10 00:35:48.036024 kernel: Hypervisor detected: KVM Jul 10 00:35:48.036032 kernel: kvm-clock: Using msrs 4b564d01 and 4b564d00 Jul 10 00:35:48.036039 kernel: kvm-clock: cpu 0, msr 7819a001, primary cpu clock Jul 10 00:35:48.036047 kernel: kvm-clock: using sched offset of 2430551110 cycles Jul 10 00:35:48.036056 kernel: clocksource: kvm-clock: mask: 0xffffffffffffffff max_cycles: 0x1cd42e4dffb, max_idle_ns: 881590591483 ns Jul 10 00:35:48.036065 kernel: tsc: Detected 2794.748 MHz processor Jul 10 00:35:48.036073 kernel: e820: update [mem 0x00000000-0x00000fff] usable ==> reserved Jul 10 00:35:48.036113 kernel: e820: remove [mem 0x000a0000-0x000fffff] usable Jul 10 00:35:48.036121 kernel: last_pfn = 0x9cfdc max_arch_pfn = 0x400000000 Jul 10 00:35:48.036129 kernel: x86/PAT: Configuration [0-7]: WB WC UC- UC WB WP UC- WT Jul 10 00:35:48.036138 kernel: Using GB pages for direct mapping Jul 10 00:35:48.036146 kernel: ACPI: Early table checksum verification disabled Jul 10 00:35:48.036154 kernel: ACPI: RSDP 0x00000000000F59D0 000014 (v00 BOCHS ) Jul 10 00:35:48.036163 kernel: ACPI: RSDT 0x000000009CFE241A 000038 (v01 BOCHS BXPC 00000001 BXPC 00000001) Jul 10 00:35:48.036171 kernel: ACPI: FACP 0x000000009CFE21FA 0000F4 (v03 BOCHS BXPC 00000001 BXPC 00000001) Jul 10 00:35:48.036179 kernel: ACPI: DSDT 0x000000009CFE0040 0021BA (v01 BOCHS BXPC 00000001 BXPC 00000001) Jul 10 00:35:48.036189 kernel: ACPI: FACS 0x000000009CFE0000 000040 Jul 10 00:35:48.036197 kernel: ACPI: APIC 0x000000009CFE22EE 000090 (v01 BOCHS BXPC 00000001 BXPC 00000001) Jul 10 00:35:48.036205 kernel: ACPI: HPET 0x000000009CFE237E 000038 (v01 BOCHS BXPC 00000001 BXPC 00000001) Jul 10 00:35:48.036214 kernel: ACPI: MCFG 0x000000009CFE23B6 00003C (v01 BOCHS BXPC 00000001 BXPC 00000001) Jul 10 00:35:48.036222 kernel: ACPI: WAET 0x000000009CFE23F2 000028 (v01 BOCHS BXPC 00000001 BXPC 00000001) Jul 10 00:35:48.036230 kernel: ACPI: Reserving FACP table memory at [mem 0x9cfe21fa-0x9cfe22ed] Jul 10 00:35:48.036239 kernel: ACPI: Reserving DSDT table memory at [mem 0x9cfe0040-0x9cfe21f9] Jul 10 00:35:48.036247 kernel: ACPI: Reserving FACS table memory at [mem 0x9cfe0000-0x9cfe003f] Jul 10 00:35:48.036266 kernel: ACPI: Reserving APIC table memory at [mem 0x9cfe22ee-0x9cfe237d] Jul 10 00:35:48.036275 kernel: ACPI: Reserving HPET table memory at [mem 0x9cfe237e-0x9cfe23b5] Jul 10 00:35:48.036284 kernel: ACPI: Reserving MCFG table memory at [mem 0x9cfe23b6-0x9cfe23f1] Jul 10 00:35:48.036302 kernel: ACPI: Reserving WAET table memory at [mem 0x9cfe23f2-0x9cfe2419] Jul 10 00:35:48.036311 kernel: No NUMA configuration found Jul 10 00:35:48.036346 kernel: Faking a node at [mem 0x0000000000000000-0x000000009cfdbfff] Jul 10 00:35:48.036357 kernel: NODE_DATA(0) allocated [mem 0x9cfd6000-0x9cfdbfff] Jul 10 00:35:48.036366 kernel: Zone ranges: Jul 10 00:35:48.036375 kernel: DMA [mem 0x0000000000001000-0x0000000000ffffff] Jul 10 00:35:48.036384 kernel: DMA32 [mem 0x0000000001000000-0x000000009cfdbfff] Jul 10 00:35:48.036393 kernel: Normal empty Jul 10 00:35:48.036401 kernel: Movable zone start for each node Jul 10 00:35:48.036410 kernel: Early memory node ranges Jul 10 00:35:48.036418 kernel: node 0: [mem 0x0000000000001000-0x000000000009efff] Jul 10 00:35:48.036427 kernel: node 0: [mem 0x0000000000100000-0x000000009cfdbfff] Jul 10 00:35:48.036437 kernel: Initmem setup node 0 [mem 0x0000000000001000-0x000000009cfdbfff] Jul 10 00:35:48.036446 kernel: On node 0, zone DMA: 1 pages in unavailable ranges Jul 10 00:35:48.036455 kernel: On node 0, zone DMA: 97 pages in unavailable ranges Jul 10 00:35:48.036464 kernel: On node 0, zone DMA32: 12324 pages in unavailable ranges Jul 10 00:35:48.036472 kernel: ACPI: PM-Timer IO Port: 0x608 Jul 10 00:35:48.036481 kernel: ACPI: LAPIC_NMI (acpi_id[0xff] dfl dfl lint[0x1]) Jul 10 00:35:48.036489 kernel: IOAPIC[0]: apic_id 0, version 17, address 0xfec00000, GSI 0-23 Jul 10 00:35:48.036498 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 0 global_irq 2 dfl dfl) Jul 10 00:35:48.036507 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 5 global_irq 5 high level) Jul 10 00:35:48.036516 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 9 global_irq 9 high level) Jul 10 00:35:48.036526 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 10 global_irq 10 high level) Jul 10 00:35:48.036535 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 11 global_irq 11 high level) Jul 10 00:35:48.036543 kernel: ACPI: Using ACPI (MADT) for SMP configuration information Jul 10 00:35:48.036552 kernel: ACPI: HPET id: 0x8086a201 base: 0xfed00000 Jul 10 00:35:48.036561 kernel: TSC deadline timer available Jul 10 00:35:48.036569 kernel: smpboot: Allowing 4 CPUs, 0 hotplug CPUs Jul 10 00:35:48.036578 kernel: kvm-guest: KVM setup pv remote TLB flush Jul 10 00:35:48.036587 kernel: kvm-guest: setup PV sched yield Jul 10 00:35:48.036595 kernel: [mem 0xc0000000-0xfed1bfff] available for PCI devices Jul 10 00:35:48.036611 kernel: Booting paravirtualized kernel on KVM Jul 10 00:35:48.036621 kernel: clocksource: refined-jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1910969940391419 ns Jul 10 00:35:48.036630 kernel: setup_percpu: NR_CPUS:512 nr_cpumask_bits:512 nr_cpu_ids:4 nr_node_ids:1 Jul 10 00:35:48.036638 kernel: percpu: Embedded 56 pages/cpu s188696 r8192 d32488 u524288 Jul 10 00:35:48.036671 kernel: pcpu-alloc: s188696 r8192 d32488 u524288 alloc=1*2097152 Jul 10 00:35:48.036681 kernel: pcpu-alloc: [0] 0 1 2 3 Jul 10 00:35:48.036689 kernel: kvm-guest: setup async PF for cpu 0 Jul 10 00:35:48.036698 kernel: kvm-guest: stealtime: cpu 0, msr 9a41c0c0 Jul 10 00:35:48.036707 kernel: kvm-guest: PV spinlocks enabled Jul 10 00:35:48.036719 kernel: PV qspinlock hash table entries: 256 (order: 0, 4096 bytes, linear) Jul 10 00:35:48.036727 kernel: Built 1 zonelists, mobility grouping on. Total pages: 632732 Jul 10 00:35:48.036736 kernel: Policy zone: DMA32 Jul 10 00:35:48.036751 kernel: Kernel command line: rootflags=rw mount.usrflags=ro BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200 flatcar.first_boot=detected verity.usrhash=6cddad5f675165861f6062277cc28875548c735477e689762fc73abc16b63a3d Jul 10 00:35:48.036761 kernel: Unknown kernel command line parameters "BOOT_IMAGE=/flatcar/vmlinuz-a", will be passed to user space. Jul 10 00:35:48.036769 kernel: Dentry cache hash table entries: 524288 (order: 10, 4194304 bytes, linear) Jul 10 00:35:48.036778 kernel: Inode-cache hash table entries: 262144 (order: 9, 2097152 bytes, linear) Jul 10 00:35:48.036787 kernel: mem auto-init: stack:off, heap alloc:off, heap free:off Jul 10 00:35:48.036798 kernel: Memory: 2436696K/2571752K available (12295K kernel code, 2275K rwdata, 13724K rodata, 47472K init, 4108K bss, 134796K reserved, 0K cma-reserved) Jul 10 00:35:48.036807 kernel: SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=4, Nodes=1 Jul 10 00:35:48.036818 kernel: ftrace: allocating 34602 entries in 136 pages Jul 10 00:35:48.036827 kernel: ftrace: allocated 136 pages with 2 groups Jul 10 00:35:48.036835 kernel: rcu: Hierarchical RCU implementation. Jul 10 00:35:48.036843 kernel: rcu: RCU event tracing is enabled. Jul 10 00:35:48.036850 kernel: rcu: RCU restricting CPUs from NR_CPUS=512 to nr_cpu_ids=4. Jul 10 00:35:48.036856 kernel: Rude variant of Tasks RCU enabled. Jul 10 00:35:48.036863 kernel: Tracing variant of Tasks RCU enabled. Jul 10 00:35:48.036871 kernel: rcu: RCU calculated value of scheduler-enlistment delay is 100 jiffies. Jul 10 00:35:48.036878 kernel: rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=4 Jul 10 00:35:48.036884 kernel: NR_IRQS: 33024, nr_irqs: 456, preallocated irqs: 16 Jul 10 00:35:48.036893 kernel: random: crng init done Jul 10 00:35:48.036900 kernel: Console: colour VGA+ 80x25 Jul 10 00:35:48.036906 kernel: printk: console [ttyS0] enabled Jul 10 00:35:48.036913 kernel: ACPI: Core revision 20210730 Jul 10 00:35:48.036919 kernel: clocksource: hpet: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604467 ns Jul 10 00:35:48.036926 kernel: APIC: Switch to symmetric I/O mode setup Jul 10 00:35:48.036934 kernel: x2apic enabled Jul 10 00:35:48.036940 kernel: Switched APIC routing to physical x2apic. Jul 10 00:35:48.036947 kernel: kvm-guest: setup PV IPIs Jul 10 00:35:48.036953 kernel: ..TIMER: vector=0x30 apic1=0 pin1=2 apic2=-1 pin2=-1 Jul 10 00:35:48.036960 kernel: tsc: Marking TSC unstable due to TSCs unsynchronized Jul 10 00:35:48.036967 kernel: Calibrating delay loop (skipped) preset value.. 5589.49 BogoMIPS (lpj=2794748) Jul 10 00:35:48.036973 kernel: x86/cpu: User Mode Instruction Prevention (UMIP) activated Jul 10 00:35:48.036980 kernel: Last level iTLB entries: 4KB 512, 2MB 255, 4MB 127 Jul 10 00:35:48.036986 kernel: Last level dTLB entries: 4KB 512, 2MB 255, 4MB 127, 1GB 0 Jul 10 00:35:48.036998 kernel: Spectre V1 : Mitigation: usercopy/swapgs barriers and __user pointer sanitization Jul 10 00:35:48.037005 kernel: Spectre V2 : Mitigation: Retpolines Jul 10 00:35:48.037012 kernel: Spectre V2 : Spectre v2 / SpectreRSB: Filling RSB on context switch and VMEXIT Jul 10 00:35:48.037020 kernel: Spectre V2 : Enabling Speculation Barrier for firmware calls Jul 10 00:35:48.037027 kernel: RETBleed: Mitigation: untrained return thunk Jul 10 00:35:48.037034 kernel: Spectre V2 : mitigation: Enabling conditional Indirect Branch Prediction Barrier Jul 10 00:35:48.037041 kernel: Speculative Store Bypass: Mitigation: Speculative Store Bypass disabled via prctl and seccomp Jul 10 00:35:48.037048 kernel: x86/fpu: Supporting XSAVE feature 0x001: 'x87 floating point registers' Jul 10 00:35:48.037055 kernel: x86/fpu: Supporting XSAVE feature 0x002: 'SSE registers' Jul 10 00:35:48.037063 kernel: x86/fpu: Supporting XSAVE feature 0x004: 'AVX registers' Jul 10 00:35:48.037070 kernel: x86/fpu: xstate_offset[2]: 576, xstate_sizes[2]: 256 Jul 10 00:35:48.037076 kernel: x86/fpu: Enabled xstate features 0x7, context size is 832 bytes, using 'standard' format. Jul 10 00:35:48.037083 kernel: Freeing SMP alternatives memory: 32K Jul 10 00:35:48.037090 kernel: pid_max: default: 32768 minimum: 301 Jul 10 00:35:48.037097 kernel: LSM: Security Framework initializing Jul 10 00:35:48.037103 kernel: SELinux: Initializing. Jul 10 00:35:48.037111 kernel: Mount-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Jul 10 00:35:48.037118 kernel: Mountpoint-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Jul 10 00:35:48.037125 kernel: smpboot: CPU0: AMD EPYC 7402P 24-Core Processor (family: 0x17, model: 0x31, stepping: 0x0) Jul 10 00:35:48.037132 kernel: Performance Events: Fam17h+ core perfctr, AMD PMU driver. Jul 10 00:35:48.037139 kernel: ... version: 0 Jul 10 00:35:48.037145 kernel: ... bit width: 48 Jul 10 00:35:48.037152 kernel: ... generic registers: 6 Jul 10 00:35:48.037159 kernel: ... value mask: 0000ffffffffffff Jul 10 00:35:48.037165 kernel: ... max period: 00007fffffffffff Jul 10 00:35:48.037173 kernel: ... fixed-purpose events: 0 Jul 10 00:35:48.037180 kernel: ... event mask: 000000000000003f Jul 10 00:35:48.037187 kernel: signal: max sigframe size: 1776 Jul 10 00:35:48.037193 kernel: rcu: Hierarchical SRCU implementation. Jul 10 00:35:48.037200 kernel: smp: Bringing up secondary CPUs ... Jul 10 00:35:48.037207 kernel: x86: Booting SMP configuration: Jul 10 00:35:48.037213 kernel: .... node #0, CPUs: #1 Jul 10 00:35:48.037220 kernel: kvm-clock: cpu 1, msr 7819a041, secondary cpu clock Jul 10 00:35:48.037227 kernel: kvm-guest: setup async PF for cpu 1 Jul 10 00:35:48.037234 kernel: kvm-guest: stealtime: cpu 1, msr 9a49c0c0 Jul 10 00:35:48.037242 kernel: #2 Jul 10 00:35:48.037249 kernel: kvm-clock: cpu 2, msr 7819a081, secondary cpu clock Jul 10 00:35:48.037255 kernel: kvm-guest: setup async PF for cpu 2 Jul 10 00:35:48.037262 kernel: kvm-guest: stealtime: cpu 2, msr 9a51c0c0 Jul 10 00:35:48.037269 kernel: #3 Jul 10 00:35:48.037276 kernel: kvm-clock: cpu 3, msr 7819a0c1, secondary cpu clock Jul 10 00:35:48.037283 kernel: kvm-guest: setup async PF for cpu 3 Jul 10 00:35:48.037289 kernel: kvm-guest: stealtime: cpu 3, msr 9a59c0c0 Jul 10 00:35:48.037296 kernel: smp: Brought up 1 node, 4 CPUs Jul 10 00:35:48.037304 kernel: smpboot: Max logical packages: 1 Jul 10 00:35:48.037311 kernel: smpboot: Total of 4 processors activated (22357.98 BogoMIPS) Jul 10 00:35:48.037317 kernel: devtmpfs: initialized Jul 10 00:35:48.037324 kernel: x86/mm: Memory block size: 128MB Jul 10 00:35:48.037331 kernel: clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1911260446275000 ns Jul 10 00:35:48.037338 kernel: futex hash table entries: 1024 (order: 4, 65536 bytes, linear) Jul 10 00:35:48.037345 kernel: pinctrl core: initialized pinctrl subsystem Jul 10 00:35:48.037352 kernel: NET: Registered PF_NETLINK/PF_ROUTE protocol family Jul 10 00:35:48.037358 kernel: audit: initializing netlink subsys (disabled) Jul 10 00:35:48.037367 kernel: audit: type=2000 audit(1752107746.841:1): state=initialized audit_enabled=0 res=1 Jul 10 00:35:48.037374 kernel: thermal_sys: Registered thermal governor 'step_wise' Jul 10 00:35:48.037383 kernel: thermal_sys: Registered thermal governor 'user_space' Jul 10 00:35:48.037392 kernel: cpuidle: using governor menu Jul 10 00:35:48.037401 kernel: ACPI: bus type PCI registered Jul 10 00:35:48.037410 kernel: acpiphp: ACPI Hot Plug PCI Controller Driver version: 0.5 Jul 10 00:35:48.037419 kernel: dca service started, version 1.12.1 Jul 10 00:35:48.037428 kernel: PCI: MMCONFIG for domain 0000 [bus 00-ff] at [mem 0xb0000000-0xbfffffff] (base 0xb0000000) Jul 10 00:35:48.037437 kernel: PCI: MMCONFIG at [mem 0xb0000000-0xbfffffff] reserved in E820 Jul 10 00:35:48.037448 kernel: PCI: Using configuration type 1 for base access Jul 10 00:35:48.037458 kernel: kprobes: kprobe jump-optimization is enabled. All kprobes are optimized if possible. Jul 10 00:35:48.037467 kernel: HugeTLB registered 1.00 GiB page size, pre-allocated 0 pages Jul 10 00:35:48.037476 kernel: HugeTLB registered 2.00 MiB page size, pre-allocated 0 pages Jul 10 00:35:48.037485 kernel: ACPI: Added _OSI(Module Device) Jul 10 00:35:48.037494 kernel: ACPI: Added _OSI(Processor Device) Jul 10 00:35:48.037503 kernel: ACPI: Added _OSI(Processor Aggregator Device) Jul 10 00:35:48.037512 kernel: ACPI: Added _OSI(Linux-Dell-Video) Jul 10 00:35:48.037521 kernel: ACPI: Added _OSI(Linux-Lenovo-NV-HDMI-Audio) Jul 10 00:35:48.037532 kernel: ACPI: Added _OSI(Linux-HPI-Hybrid-Graphics) Jul 10 00:35:48.037541 kernel: ACPI: 1 ACPI AML tables successfully acquired and loaded Jul 10 00:35:48.037550 kernel: ACPI: Interpreter enabled Jul 10 00:35:48.037563 kernel: ACPI: PM: (supports S0 S3 S5) Jul 10 00:35:48.037573 kernel: ACPI: Using IOAPIC for interrupt routing Jul 10 00:35:48.037585 kernel: PCI: Using host bridge windows from ACPI; if necessary, use "pci=nocrs" and report a bug Jul 10 00:35:48.037594 kernel: ACPI: Enabled 2 GPEs in block 00 to 3F Jul 10 00:35:48.037603 kernel: ACPI: PCI Root Bridge [PCI0] (domain 0000 [bus 00-ff]) Jul 10 00:35:48.037791 kernel: acpi PNP0A08:00: _OSC: OS supports [ExtendedConfig ASPM ClockPM Segments MSI HPX-Type3] Jul 10 00:35:48.037911 kernel: acpi PNP0A08:00: _OSC: platform does not support [PCIeHotplug LTR] Jul 10 00:35:48.038014 kernel: acpi PNP0A08:00: _OSC: OS now controls [PME AER PCIeCapability] Jul 10 00:35:48.038029 kernel: PCI host bridge to bus 0000:00 Jul 10 00:35:48.038142 kernel: pci_bus 0000:00: root bus resource [io 0x0000-0x0cf7 window] Jul 10 00:35:48.038293 kernel: pci_bus 0000:00: root bus resource [io 0x0d00-0xffff window] Jul 10 00:35:48.038420 kernel: pci_bus 0000:00: root bus resource [mem 0x000a0000-0x000bffff window] Jul 10 00:35:48.038510 kernel: pci_bus 0000:00: root bus resource [mem 0x9d000000-0xafffffff window] Jul 10 00:35:48.038601 kernel: pci_bus 0000:00: root bus resource [mem 0xc0000000-0xfebfffff window] Jul 10 00:35:48.038712 kernel: pci_bus 0000:00: root bus resource [mem 0x100000000-0x8ffffffff window] Jul 10 00:35:48.038799 kernel: pci_bus 0000:00: root bus resource [bus 00-ff] Jul 10 00:35:48.038907 kernel: pci 0000:00:00.0: [8086:29c0] type 00 class 0x060000 Jul 10 00:35:48.039032 kernel: pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 Jul 10 00:35:48.039131 kernel: pci 0000:00:01.0: reg 0x10: [mem 0xfd000000-0xfdffffff pref] Jul 10 00:35:48.039230 kernel: pci 0000:00:01.0: reg 0x18: [mem 0xfebd0000-0xfebd0fff] Jul 10 00:35:48.039327 kernel: pci 0000:00:01.0: reg 0x30: [mem 0xfebc0000-0xfebcffff pref] Jul 10 00:35:48.039425 kernel: pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] Jul 10 00:35:48.039536 kernel: pci 0000:00:02.0: [1af4:1005] type 00 class 0x00ff00 Jul 10 00:35:48.039633 kernel: pci 0000:00:02.0: reg 0x10: [io 0xc0c0-0xc0df] Jul 10 00:35:48.039786 kernel: pci 0000:00:02.0: reg 0x14: [mem 0xfebd1000-0xfebd1fff] Jul 10 00:35:48.039903 kernel: pci 0000:00:02.0: reg 0x20: [mem 0xfe000000-0xfe003fff 64bit pref] Jul 10 00:35:48.040033 kernel: pci 0000:00:03.0: [1af4:1001] type 00 class 0x010000 Jul 10 00:35:48.040164 kernel: pci 0000:00:03.0: reg 0x10: [io 0xc000-0xc07f] Jul 10 00:35:48.040305 kernel: pci 0000:00:03.0: reg 0x14: [mem 0xfebd2000-0xfebd2fff] Jul 10 00:35:48.040423 kernel: pci 0000:00:03.0: reg 0x20: [mem 0xfe004000-0xfe007fff 64bit pref] Jul 10 00:35:48.040555 kernel: pci 0000:00:04.0: [1af4:1000] type 00 class 0x020000 Jul 10 00:35:48.040701 kernel: pci 0000:00:04.0: reg 0x10: [io 0xc0e0-0xc0ff] Jul 10 00:35:48.040822 kernel: pci 0000:00:04.0: reg 0x14: [mem 0xfebd3000-0xfebd3fff] Jul 10 00:35:48.040935 kernel: pci 0000:00:04.0: reg 0x20: [mem 0xfe008000-0xfe00bfff 64bit pref] Jul 10 00:35:48.041068 kernel: pci 0000:00:04.0: reg 0x30: [mem 0xfeb80000-0xfebbffff pref] Jul 10 00:35:48.041219 kernel: pci 0000:00:1f.0: [8086:2918] type 00 class 0x060100 Jul 10 00:35:48.041365 kernel: pci 0000:00:1f.0: quirk: [io 0x0600-0x067f] claimed by ICH6 ACPI/GPIO/TCO Jul 10 00:35:48.041499 kernel: pci 0000:00:1f.2: [8086:2922] type 00 class 0x010601 Jul 10 00:35:48.041638 kernel: pci 0000:00:1f.2: reg 0x20: [io 0xc100-0xc11f] Jul 10 00:35:48.041807 kernel: pci 0000:00:1f.2: reg 0x24: [mem 0xfebd4000-0xfebd4fff] Jul 10 00:35:48.041944 kernel: pci 0000:00:1f.3: [8086:2930] type 00 class 0x0c0500 Jul 10 00:35:48.042040 kernel: pci 0000:00:1f.3: reg 0x20: [io 0x0700-0x073f] Jul 10 00:35:48.042054 kernel: ACPI: PCI: Interrupt link LNKA configured for IRQ 10 Jul 10 00:35:48.042063 kernel: ACPI: PCI: Interrupt link LNKB configured for IRQ 10 Jul 10 00:35:48.042072 kernel: ACPI: PCI: Interrupt link LNKC configured for IRQ 11 Jul 10 00:35:48.042081 kernel: ACPI: PCI: Interrupt link LNKD configured for IRQ 11 Jul 10 00:35:48.042091 kernel: ACPI: PCI: Interrupt link LNKE configured for IRQ 10 Jul 10 00:35:48.042103 kernel: ACPI: PCI: Interrupt link LNKF configured for IRQ 10 Jul 10 00:35:48.042112 kernel: ACPI: PCI: Interrupt link LNKG configured for IRQ 11 Jul 10 00:35:48.042121 kernel: ACPI: PCI: Interrupt link LNKH configured for IRQ 11 Jul 10 00:35:48.042131 kernel: ACPI: PCI: Interrupt link GSIA configured for IRQ 16 Jul 10 00:35:48.042140 kernel: ACPI: PCI: Interrupt link GSIB configured for IRQ 17 Jul 10 00:35:48.042149 kernel: ACPI: PCI: Interrupt link GSIC configured for IRQ 18 Jul 10 00:35:48.042158 kernel: ACPI: PCI: Interrupt link GSID configured for IRQ 19 Jul 10 00:35:48.042167 kernel: ACPI: PCI: Interrupt link GSIE configured for IRQ 20 Jul 10 00:35:48.042176 kernel: ACPI: PCI: Interrupt link GSIF configured for IRQ 21 Jul 10 00:35:48.042187 kernel: ACPI: PCI: Interrupt link GSIG configured for IRQ 22 Jul 10 00:35:48.042196 kernel: ACPI: PCI: Interrupt link GSIH configured for IRQ 23 Jul 10 00:35:48.042206 kernel: iommu: Default domain type: Translated Jul 10 00:35:48.042215 kernel: iommu: DMA domain TLB invalidation policy: lazy mode Jul 10 00:35:48.042315 kernel: pci 0000:00:01.0: vgaarb: setting as boot VGA device Jul 10 00:35:48.042408 kernel: pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none Jul 10 00:35:48.042500 kernel: pci 0000:00:01.0: vgaarb: bridge control possible Jul 10 00:35:48.042513 kernel: vgaarb: loaded Jul 10 00:35:48.042526 kernel: pps_core: LinuxPPS API ver. 1 registered Jul 10 00:35:48.042535 kernel: pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti Jul 10 00:35:48.042544 kernel: PTP clock support registered Jul 10 00:35:48.042554 kernel: PCI: Using ACPI for IRQ routing Jul 10 00:35:48.042563 kernel: PCI: pci_cache_line_size set to 64 bytes Jul 10 00:35:48.042572 kernel: e820: reserve RAM buffer [mem 0x0009fc00-0x0009ffff] Jul 10 00:35:48.042581 kernel: e820: reserve RAM buffer [mem 0x9cfdc000-0x9fffffff] Jul 10 00:35:48.042590 kernel: hpet0: at MMIO 0xfed00000, IRQs 2, 8, 0 Jul 10 00:35:48.042599 kernel: hpet0: 3 comparators, 64-bit 100.000000 MHz counter Jul 10 00:35:48.042610 kernel: clocksource: Switched to clocksource kvm-clock Jul 10 00:35:48.042619 kernel: VFS: Disk quotas dquot_6.6.0 Jul 10 00:35:48.042628 kernel: VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes) Jul 10 00:35:48.042637 kernel: pnp: PnP ACPI init Jul 10 00:35:48.042773 kernel: system 00:05: [mem 0xb0000000-0xbfffffff window] has been reserved Jul 10 00:35:48.042789 kernel: pnp: PnP ACPI: found 6 devices Jul 10 00:35:48.042798 kernel: clocksource: acpi_pm: mask: 0xffffff max_cycles: 0xffffff, max_idle_ns: 2085701024 ns Jul 10 00:35:48.042807 kernel: NET: Registered PF_INET protocol family Jul 10 00:35:48.042817 kernel: IP idents hash table entries: 65536 (order: 7, 524288 bytes, linear) Jul 10 00:35:48.042833 kernel: tcp_listen_portaddr_hash hash table entries: 2048 (order: 3, 32768 bytes, linear) Jul 10 00:35:48.042844 kernel: Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear) Jul 10 00:35:48.042853 kernel: TCP established hash table entries: 32768 (order: 6, 262144 bytes, linear) Jul 10 00:35:48.042863 kernel: TCP bind hash table entries: 32768 (order: 7, 524288 bytes, linear) Jul 10 00:35:48.042872 kernel: TCP: Hash tables configured (established 32768 bind 32768) Jul 10 00:35:48.042886 kernel: UDP hash table entries: 2048 (order: 4, 65536 bytes, linear) Jul 10 00:35:48.042895 kernel: UDP-Lite hash table entries: 2048 (order: 4, 65536 bytes, linear) Jul 10 00:35:48.042904 kernel: NET: Registered PF_UNIX/PF_LOCAL protocol family Jul 10 00:35:48.042916 kernel: NET: Registered PF_XDP protocol family Jul 10 00:35:48.043014 kernel: pci_bus 0000:00: resource 4 [io 0x0000-0x0cf7 window] Jul 10 00:35:48.043104 kernel: pci_bus 0000:00: resource 5 [io 0x0d00-0xffff window] Jul 10 00:35:48.043187 kernel: pci_bus 0000:00: resource 6 [mem 0x000a0000-0x000bffff window] Jul 10 00:35:48.043270 kernel: pci_bus 0000:00: resource 7 [mem 0x9d000000-0xafffffff window] Jul 10 00:35:48.043352 kernel: pci_bus 0000:00: resource 8 [mem 0xc0000000-0xfebfffff window] Jul 10 00:35:48.043433 kernel: pci_bus 0000:00: resource 9 [mem 0x100000000-0x8ffffffff window] Jul 10 00:35:48.043447 kernel: PCI: CLS 0 bytes, default 64 Jul 10 00:35:48.043456 kernel: Initialise system trusted keyrings Jul 10 00:35:48.043468 kernel: workingset: timestamp_bits=39 max_order=20 bucket_order=0 Jul 10 00:35:48.043477 kernel: Key type asymmetric registered Jul 10 00:35:48.043486 kernel: Asymmetric key parser 'x509' registered Jul 10 00:35:48.043496 kernel: Block layer SCSI generic (bsg) driver version 0.4 loaded (major 249) Jul 10 00:35:48.043505 kernel: io scheduler mq-deadline registered Jul 10 00:35:48.043514 kernel: io scheduler kyber registered Jul 10 00:35:48.043523 kernel: io scheduler bfq registered Jul 10 00:35:48.043532 kernel: ioatdma: Intel(R) QuickData Technology Driver 5.00 Jul 10 00:35:48.043542 kernel: ACPI: \_SB_.GSIG: Enabled at IRQ 22 Jul 10 00:35:48.043553 kernel: ACPI: \_SB_.GSIH: Enabled at IRQ 23 Jul 10 00:35:48.043562 kernel: ACPI: \_SB_.GSIE: Enabled at IRQ 20 Jul 10 00:35:48.043572 kernel: Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled Jul 10 00:35:48.043581 kernel: 00:03: ttyS0 at I/O 0x3f8 (irq = 4, base_baud = 115200) is a 16550A Jul 10 00:35:48.043590 kernel: i8042: PNP: PS/2 Controller [PNP0303:KBD,PNP0f13:MOU] at 0x60,0x64 irq 1,12 Jul 10 00:35:48.043599 kernel: serio: i8042 KBD port at 0x60,0x64 irq 1 Jul 10 00:35:48.043608 kernel: serio: i8042 AUX port at 0x60,0x64 irq 12 Jul 10 00:35:48.043725 kernel: rtc_cmos 00:04: RTC can wake from S4 Jul 10 00:35:48.043744 kernel: input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input0 Jul 10 00:35:48.043829 kernel: rtc_cmos 00:04: registered as rtc0 Jul 10 00:35:48.043915 kernel: rtc_cmos 00:04: setting system clock to 2025-07-10T00:35:47 UTC (1752107747) Jul 10 00:35:48.044002 kernel: rtc_cmos 00:04: alarms up to one day, y3k, 242 bytes nvram, hpet irqs Jul 10 00:35:48.044015 kernel: NET: Registered PF_INET6 protocol family Jul 10 00:35:48.044024 kernel: Segment Routing with IPv6 Jul 10 00:35:48.044033 kernel: In-situ OAM (IOAM) with IPv6 Jul 10 00:35:48.044042 kernel: NET: Registered PF_PACKET protocol family Jul 10 00:35:48.044051 kernel: Key type dns_resolver registered Jul 10 00:35:48.044063 kernel: IPI shorthand broadcast: enabled Jul 10 00:35:48.044073 kernel: sched_clock: Marking stable (437311392, 100356385)->(589121053, -51453276) Jul 10 00:35:48.044082 kernel: registered taskstats version 1 Jul 10 00:35:48.044091 kernel: Loading compiled-in X.509 certificates Jul 10 00:35:48.044101 kernel: Loaded X.509 cert 'Kinvolk GmbH: Module signing key for 5.15.186-flatcar: 6ebecdd7757c0df63fc51731f0b99957f4e4af16' Jul 10 00:35:48.044110 kernel: Key type .fscrypt registered Jul 10 00:35:48.044119 kernel: Key type fscrypt-provisioning registered Jul 10 00:35:48.044128 kernel: ima: No TPM chip found, activating TPM-bypass! Jul 10 00:35:48.044139 kernel: ima: Allocated hash algorithm: sha1 Jul 10 00:35:48.044148 kernel: ima: No architecture policies found Jul 10 00:35:48.044157 kernel: clk: Disabling unused clocks Jul 10 00:35:48.044166 kernel: Freeing unused kernel image (initmem) memory: 47472K Jul 10 00:35:48.044175 kernel: Write protecting the kernel read-only data: 28672k Jul 10 00:35:48.044185 kernel: Freeing unused kernel image (text/rodata gap) memory: 2040K Jul 10 00:35:48.044194 kernel: Freeing unused kernel image (rodata/data gap) memory: 612K Jul 10 00:35:48.044203 kernel: Run /init as init process Jul 10 00:35:48.044212 kernel: with arguments: Jul 10 00:35:48.044223 kernel: /init Jul 10 00:35:48.044232 kernel: with environment: Jul 10 00:35:48.044240 kernel: HOME=/ Jul 10 00:35:48.044249 kernel: TERM=linux Jul 10 00:35:48.044258 kernel: BOOT_IMAGE=/flatcar/vmlinuz-a Jul 10 00:35:48.044270 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Jul 10 00:35:48.044282 systemd[1]: Detected virtualization kvm. Jul 10 00:35:48.044292 systemd[1]: Detected architecture x86-64. Jul 10 00:35:48.044303 systemd[1]: Running in initrd. Jul 10 00:35:48.044312 systemd[1]: No hostname configured, using default hostname. Jul 10 00:35:48.044322 systemd[1]: Hostname set to . Jul 10 00:35:48.044332 systemd[1]: Initializing machine ID from VM UUID. Jul 10 00:35:48.044342 systemd[1]: Queued start job for default target initrd.target. Jul 10 00:35:48.044352 systemd[1]: Started systemd-ask-password-console.path. Jul 10 00:35:48.044362 systemd[1]: Reached target cryptsetup.target. Jul 10 00:35:48.044372 systemd[1]: Reached target paths.target. Jul 10 00:35:48.044381 systemd[1]: Reached target slices.target. Jul 10 00:35:48.044393 systemd[1]: Reached target swap.target. Jul 10 00:35:48.044411 systemd[1]: Reached target timers.target. Jul 10 00:35:48.044423 systemd[1]: Listening on iscsid.socket. Jul 10 00:35:48.044433 systemd[1]: Listening on iscsiuio.socket. Jul 10 00:35:48.044443 systemd[1]: Listening on systemd-journald-audit.socket. Jul 10 00:35:48.044455 systemd[1]: Listening on systemd-journald-dev-log.socket. Jul 10 00:35:48.044471 systemd[1]: Listening on systemd-journald.socket. Jul 10 00:35:48.044482 systemd[1]: Listening on systemd-networkd.socket. Jul 10 00:35:48.044492 systemd[1]: Listening on systemd-udevd-control.socket. Jul 10 00:35:48.044502 systemd[1]: Listening on systemd-udevd-kernel.socket. Jul 10 00:35:48.044513 systemd[1]: Reached target sockets.target. Jul 10 00:35:48.044523 systemd[1]: Starting kmod-static-nodes.service... Jul 10 00:35:48.044533 systemd[1]: Finished network-cleanup.service. Jul 10 00:35:48.044543 systemd[1]: Starting systemd-fsck-usr.service... Jul 10 00:35:48.044560 systemd[1]: Starting systemd-journald.service... Jul 10 00:35:48.044570 systemd[1]: Starting systemd-modules-load.service... Jul 10 00:35:48.044580 systemd[1]: Starting systemd-resolved.service... Jul 10 00:35:48.044590 systemd[1]: Starting systemd-vconsole-setup.service... Jul 10 00:35:48.044603 systemd-journald[197]: Journal started Jul 10 00:35:48.044672 systemd-journald[197]: Runtime Journal (/run/log/journal/2425d785aa0e4297baa7b6071686ca59) is 6.0M, max 48.5M, 42.5M free. Jul 10 00:35:48.033829 systemd-modules-load[198]: Inserted module 'overlay' Jul 10 00:35:48.077689 systemd[1]: Finished kmod-static-nodes.service. Jul 10 00:35:48.077713 kernel: bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this. Jul 10 00:35:48.077724 kernel: audit: type=1130 audit(1752107748.069:2): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:35:48.077737 systemd[1]: Started systemd-journald.service. Jul 10 00:35:48.077747 kernel: Bridge firewalling registered Jul 10 00:35:48.077756 kernel: audit: type=1130 audit(1752107748.076:3): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:35:48.069000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:35:48.076000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:35:48.049179 systemd-resolved[199]: Positive Trust Anchors: Jul 10 00:35:48.049188 systemd-resolved[199]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Jul 10 00:35:48.085302 kernel: audit: type=1130 audit(1752107748.080:4): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:35:48.080000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:35:48.049215 systemd-resolved[199]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Jul 10 00:35:48.090000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:35:48.051501 systemd-resolved[199]: Defaulting to hostname 'linux'. Jul 10 00:35:48.075760 systemd-modules-load[198]: Inserted module 'br_netfilter' Jul 10 00:35:48.076901 systemd[1]: Started systemd-resolved.service. Jul 10 00:35:48.085350 systemd[1]: Finished systemd-fsck-usr.service. Jul 10 00:35:48.094944 kernel: audit: type=1130 audit(1752107748.090:5): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:35:48.091516 systemd[1]: Finished systemd-vconsole-setup.service. Jul 10 00:35:48.097000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:35:48.098647 systemd[1]: Reached target nss-lookup.target. Jul 10 00:35:48.102118 kernel: audit: type=1130 audit(1752107748.097:6): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:35:48.102131 kernel: SCSI subsystem initialized Jul 10 00:35:48.104335 systemd[1]: Starting dracut-cmdline-ask.service... Jul 10 00:35:48.106574 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Jul 10 00:35:48.111243 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Jul 10 00:35:48.118512 kernel: device-mapper: core: CONFIG_IMA_DISABLE_HTABLE is disabled. Duplicate IMA measurements will not be recorded in the IMA log. Jul 10 00:35:48.118527 kernel: device-mapper: uevent: version 1.0.3 Jul 10 00:35:48.118536 kernel: device-mapper: ioctl: 4.45.0-ioctl (2021-03-22) initialised: dm-devel@redhat.com Jul 10 00:35:48.118544 kernel: audit: type=1130 audit(1752107748.113:7): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:35:48.113000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:35:48.121932 systemd-modules-load[198]: Inserted module 'dm_multipath' Jul 10 00:35:48.122433 systemd[1]: Finished systemd-modules-load.service. Jul 10 00:35:48.123080 systemd[1]: Starting systemd-sysctl.service... Jul 10 00:35:48.121000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:35:48.126684 kernel: audit: type=1130 audit(1752107748.121:8): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:35:48.132890 systemd[1]: Finished systemd-sysctl.service. Jul 10 00:35:48.132000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:35:48.136675 kernel: audit: type=1130 audit(1752107748.132:9): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:35:48.137689 systemd[1]: Finished dracut-cmdline-ask.service. Jul 10 00:35:48.142298 kernel: audit: type=1130 audit(1752107748.137:10): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:35:48.137000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:35:48.142374 systemd[1]: Starting dracut-cmdline.service... Jul 10 00:35:48.151798 dracut-cmdline[220]: dracut-dracut-053 Jul 10 00:35:48.154354 dracut-cmdline[220]: Using kernel command line parameters: rd.driver.pre=btrfs rootflags=rw mount.usrflags=ro BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200 flatcar.first_boot=detected verity.usrhash=6cddad5f675165861f6062277cc28875548c735477e689762fc73abc16b63a3d Jul 10 00:35:48.212690 kernel: Loading iSCSI transport class v2.0-870. Jul 10 00:35:48.228686 kernel: iscsi: registered transport (tcp) Jul 10 00:35:48.250691 kernel: iscsi: registered transport (qla4xxx) Jul 10 00:35:48.250724 kernel: QLogic iSCSI HBA Driver Jul 10 00:35:48.277291 systemd[1]: Finished dracut-cmdline.service. Jul 10 00:35:48.276000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:35:48.279197 systemd[1]: Starting dracut-pre-udev.service... Jul 10 00:35:48.327680 kernel: raid6: avx2x4 gen() 29030 MB/s Jul 10 00:35:48.344684 kernel: raid6: avx2x4 xor() 7721 MB/s Jul 10 00:35:48.361675 kernel: raid6: avx2x2 gen() 32323 MB/s Jul 10 00:35:48.378677 kernel: raid6: avx2x2 xor() 19142 MB/s Jul 10 00:35:48.395675 kernel: raid6: avx2x1 gen() 26466 MB/s Jul 10 00:35:48.412679 kernel: raid6: avx2x1 xor() 15272 MB/s Jul 10 00:35:48.429676 kernel: raid6: sse2x4 gen() 13942 MB/s Jul 10 00:35:48.446680 kernel: raid6: sse2x4 xor() 6521 MB/s Jul 10 00:35:48.463680 kernel: raid6: sse2x2 gen() 14283 MB/s Jul 10 00:35:48.480679 kernel: raid6: sse2x2 xor() 8386 MB/s Jul 10 00:35:48.497675 kernel: raid6: sse2x1 gen() 10810 MB/s Jul 10 00:35:48.515243 kernel: raid6: sse2x1 xor() 6266 MB/s Jul 10 00:35:48.515272 kernel: raid6: using algorithm avx2x2 gen() 32323 MB/s Jul 10 00:35:48.515281 kernel: raid6: .... xor() 19142 MB/s, rmw enabled Jul 10 00:35:48.516063 kernel: raid6: using avx2x2 recovery algorithm Jul 10 00:35:48.530690 kernel: xor: automatically using best checksumming function avx Jul 10 00:35:48.626694 kernel: Btrfs loaded, crc32c=crc32c-intel, zoned=no, fsverity=no Jul 10 00:35:48.635604 systemd[1]: Finished dracut-pre-udev.service. Jul 10 00:35:48.635000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:35:48.636000 audit: BPF prog-id=7 op=LOAD Jul 10 00:35:48.636000 audit: BPF prog-id=8 op=LOAD Jul 10 00:35:48.637606 systemd[1]: Starting systemd-udevd.service... Jul 10 00:35:48.651849 systemd-udevd[399]: Using default interface naming scheme 'v252'. Jul 10 00:35:48.657247 systemd[1]: Started systemd-udevd.service. Jul 10 00:35:48.656000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:35:48.658388 systemd[1]: Starting dracut-pre-trigger.service... Jul 10 00:35:48.671912 dracut-pre-trigger[403]: rd.md=0: removing MD RAID activation Jul 10 00:35:48.701738 systemd[1]: Finished dracut-pre-trigger.service. Jul 10 00:35:48.702000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:35:48.703866 systemd[1]: Starting systemd-udev-trigger.service... Jul 10 00:35:48.740750 systemd[1]: Finished systemd-udev-trigger.service. Jul 10 00:35:48.740000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:35:48.763806 kernel: virtio_blk virtio1: [vda] 19775488 512-byte logical blocks (10.1 GB/9.43 GiB) Jul 10 00:35:48.837842 kernel: libata version 3.00 loaded. Jul 10 00:35:48.837863 kernel: cryptd: max_cpu_qlen set to 1000 Jul 10 00:35:48.837873 kernel: GPT:Primary header thinks Alt. header is not at the end of the disk. Jul 10 00:35:48.837882 kernel: GPT:9289727 != 19775487 Jul 10 00:35:48.837891 kernel: GPT:Alternate GPT header not at the end of the disk. Jul 10 00:35:48.837915 kernel: GPT:9289727 != 19775487 Jul 10 00:35:48.837923 kernel: GPT: Use GNU Parted to correct GPT errors. Jul 10 00:35:48.837931 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Jul 10 00:35:48.837940 kernel: AVX2 version of gcm_enc/dec engaged. Jul 10 00:35:48.837949 kernel: AES CTR mode by8 optimization enabled Jul 10 00:35:48.837957 kernel: ahci 0000:00:1f.2: version 3.0 Jul 10 00:35:48.838078 kernel: ACPI: \_SB_.GSIA: Enabled at IRQ 16 Jul 10 00:35:48.838087 kernel: ahci 0000:00:1f.2: AHCI 0001.0000 32 slots 6 ports 1.5 Gbps 0x3f impl SATA mode Jul 10 00:35:48.838167 kernel: ahci 0000:00:1f.2: flags: 64bit ncq only Jul 10 00:35:48.838258 kernel: scsi host0: ahci Jul 10 00:35:48.838367 kernel: scsi host1: ahci Jul 10 00:35:48.838461 kernel: scsi host2: ahci Jul 10 00:35:48.838544 kernel: scsi host3: ahci Jul 10 00:35:48.838625 kernel: scsi host4: ahci Jul 10 00:35:48.838760 kernel: scsi host5: ahci Jul 10 00:35:48.838844 kernel: ata1: SATA max UDMA/133 abar m4096@0xfebd4000 port 0xfebd4100 irq 34 Jul 10 00:35:48.838854 kernel: ata2: SATA max UDMA/133 abar m4096@0xfebd4000 port 0xfebd4180 irq 34 Jul 10 00:35:48.838863 kernel: ata3: SATA max UDMA/133 abar m4096@0xfebd4000 port 0xfebd4200 irq 34 Jul 10 00:35:48.838873 kernel: ata4: SATA max UDMA/133 abar m4096@0xfebd4000 port 0xfebd4280 irq 34 Jul 10 00:35:48.838882 kernel: ata5: SATA max UDMA/133 abar m4096@0xfebd4000 port 0xfebd4300 irq 34 Jul 10 00:35:48.838890 kernel: ata6: SATA max UDMA/133 abar m4096@0xfebd4000 port 0xfebd4380 irq 34 Jul 10 00:35:49.136259 kernel: ata4: SATA link down (SStatus 0 SControl 300) Jul 10 00:35:49.136334 kernel: ata1: SATA link down (SStatus 0 SControl 300) Jul 10 00:35:49.136344 kernel: ata2: SATA link down (SStatus 0 SControl 300) Jul 10 00:35:49.137676 kernel: ata3: SATA link up 1.5 Gbps (SStatus 113 SControl 300) Jul 10 00:35:49.138682 kernel: ata6: SATA link down (SStatus 0 SControl 300) Jul 10 00:35:49.139682 kernel: ata5: SATA link down (SStatus 0 SControl 300) Jul 10 00:35:49.140685 kernel: ata3.00: ATAPI: QEMU DVD-ROM, 2.5+, max UDMA/100 Jul 10 00:35:49.142083 kernel: ata3.00: applying bridge limits Jul 10 00:35:49.142093 kernel: ata3.00: configured for UDMA/100 Jul 10 00:35:49.142686 kernel: scsi 2:0:0:0: CD-ROM QEMU QEMU DVD-ROM 2.5+ PQ: 0 ANSI: 5 Jul 10 00:35:49.162524 systemd[1]: Found device dev-disk-by\x2dlabel-EFI\x2dSYSTEM.device. Jul 10 00:35:49.165766 kernel: BTRFS: device label OEM devid 1 transid 9 /dev/vda6 scanned by (udev-worker) (442) Jul 10 00:35:49.169490 systemd[1]: Found device dev-disk-by\x2dlabel-ROOT.device. Jul 10 00:35:49.172191 systemd[1]: Found device dev-disk-by\x2dpartlabel-USR\x2dA.device. Jul 10 00:35:49.172633 systemd[1]: Found device dev-disk-by\x2dpartuuid-7130c94a\x2d213a\x2d4e5a\x2d8e26\x2d6cce9662f132.device. Jul 10 00:35:49.178974 kernel: sr 2:0:0:0: [sr0] scsi3-mmc drive: 4x/4x cd/rw xa/form2 tray Jul 10 00:35:49.193366 kernel: cdrom: Uniform CD-ROM driver Revision: 3.20 Jul 10 00:35:49.193385 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Jul 10 00:35:49.193398 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Jul 10 00:35:49.193409 kernel: sr 2:0:0:0: Attached scsi CD-ROM sr0 Jul 10 00:35:49.177994 systemd[1]: Starting disk-uuid.service... Jul 10 00:35:49.182882 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Jul 10 00:35:49.195432 disk-uuid[540]: Primary Header is updated. Jul 10 00:35:49.195432 disk-uuid[540]: Secondary Entries is updated. Jul 10 00:35:49.195432 disk-uuid[540]: Secondary Header is updated. Jul 10 00:35:50.194679 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Jul 10 00:35:50.194908 disk-uuid[541]: The operation has completed successfully. Jul 10 00:35:50.215455 systemd[1]: disk-uuid.service: Deactivated successfully. Jul 10 00:35:50.215532 systemd[1]: Finished disk-uuid.service. Jul 10 00:35:50.216000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:35:50.216000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:35:50.224798 systemd[1]: Starting verity-setup.service... Jul 10 00:35:50.237679 kernel: device-mapper: verity: sha256 using implementation "sha256-ni" Jul 10 00:35:50.256027 systemd[1]: Found device dev-mapper-usr.device. Jul 10 00:35:50.258810 systemd[1]: Mounting sysusr-usr.mount... Jul 10 00:35:50.260771 systemd[1]: Finished verity-setup.service. Jul 10 00:35:50.261000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:35:50.360417 systemd[1]: Mounted sysusr-usr.mount. Jul 10 00:35:50.362486 kernel: EXT4-fs (dm-0): mounted filesystem without journal. Opts: norecovery. Quota mode: none. Jul 10 00:35:50.361018 systemd[1]: afterburn-network-kargs.service was skipped because no trigger condition checks were met. Jul 10 00:35:50.361720 systemd[1]: Starting ignition-setup.service... Jul 10 00:35:50.362999 systemd[1]: Starting parse-ip-for-networkd.service... Jul 10 00:35:50.371807 kernel: BTRFS info (device vda6): using crc32c (crc32c-intel) checksum algorithm Jul 10 00:35:50.371829 kernel: BTRFS info (device vda6): using free space tree Jul 10 00:35:50.371839 kernel: BTRFS info (device vda6): has skinny extents Jul 10 00:35:50.380340 systemd[1]: mnt-oem.mount: Deactivated successfully. Jul 10 00:35:50.388250 systemd[1]: Finished ignition-setup.service. Jul 10 00:35:50.388000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:35:50.389321 systemd[1]: Starting ignition-fetch-offline.service... Jul 10 00:35:50.429830 systemd[1]: Finished parse-ip-for-networkd.service. Jul 10 00:35:50.431000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:35:50.432000 audit: BPF prog-id=9 op=LOAD Jul 10 00:35:50.433193 systemd[1]: Starting systemd-networkd.service... Jul 10 00:35:50.452319 ignition[644]: Ignition 2.14.0 Jul 10 00:35:50.452330 ignition[644]: Stage: fetch-offline Jul 10 00:35:50.452386 ignition[644]: no configs at "/usr/lib/ignition/base.d" Jul 10 00:35:50.452398 ignition[644]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Jul 10 00:35:50.453108 ignition[644]: parsed url from cmdline: "" Jul 10 00:35:50.453112 ignition[644]: no config URL provided Jul 10 00:35:50.453117 ignition[644]: reading system config file "/usr/lib/ignition/user.ign" Jul 10 00:35:50.453124 ignition[644]: no config at "/usr/lib/ignition/user.ign" Jul 10 00:35:50.453140 ignition[644]: op(1): [started] loading QEMU firmware config module Jul 10 00:35:50.453148 ignition[644]: op(1): executing: "modprobe" "qemu_fw_cfg" Jul 10 00:35:50.460081 ignition[644]: op(1): [finished] loading QEMU firmware config module Jul 10 00:35:50.463734 systemd-networkd[719]: lo: Link UP Jul 10 00:35:50.463746 systemd-networkd[719]: lo: Gained carrier Jul 10 00:35:50.464713 systemd-networkd[719]: Enumeration completed Jul 10 00:35:50.463000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:35:50.464812 systemd[1]: Started systemd-networkd.service. Jul 10 00:35:50.465175 systemd[1]: Reached target network.target. Jul 10 00:35:50.465609 systemd-networkd[719]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Jul 10 00:35:50.466912 systemd-networkd[719]: eth0: Link UP Jul 10 00:35:50.466916 systemd-networkd[719]: eth0: Gained carrier Jul 10 00:35:50.468628 systemd[1]: Starting iscsiuio.service... Jul 10 00:35:50.503723 systemd[1]: Started iscsiuio.service. Jul 10 00:35:50.503000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:35:50.505000 systemd[1]: Starting iscsid.service... Jul 10 00:35:50.508756 ignition[644]: parsing config with SHA512: b24ad1f01908e41741826dfeb8f783923b7a7f23f424beb78edeb4e8132400ccdd627245c8e50845a1b70d4222e55f1f77fc64321d1218e7f3394ce8e06fafe0 Jul 10 00:35:50.509090 iscsid[725]: iscsid: can't open InitiatorName configuration file /etc/iscsi/initiatorname.iscsi Jul 10 00:35:50.509090 iscsid[725]: iscsid: Warning: InitiatorName file /etc/iscsi/initiatorname.iscsi does not exist or does not contain a properly formatted InitiatorName. If using software iscsi (iscsi_tcp or ib_iser) or partial offload (bnx2i or cxgbi iscsi), you may not be able to log into or discover targets. Please create a file /etc/iscsi/initiatorname.iscsi that contains a sting with the format: InitiatorName=iqn.yyyy-mm.[:identifier]. Jul 10 00:35:50.509090 iscsid[725]: Example: InitiatorName=iqn.2001-04.com.redhat:fc6. Jul 10 00:35:50.509090 iscsid[725]: If using hardware iscsi like qla4xxx this message can be ignored. Jul 10 00:35:50.509090 iscsid[725]: iscsid: can't open InitiatorAlias configuration file /etc/iscsi/initiatorname.iscsi Jul 10 00:35:50.509090 iscsid[725]: iscsid: can't open iscsid.safe_logout configuration file /etc/iscsi/iscsid.conf Jul 10 00:35:50.516000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:35:50.511304 systemd[1]: Started iscsid.service. Jul 10 00:35:50.517839 systemd[1]: Starting dracut-initqueue.service... Jul 10 00:35:50.531564 systemd[1]: Finished dracut-initqueue.service. Jul 10 00:35:50.531000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:35:50.531759 systemd-networkd[719]: eth0: DHCPv4 address 10.0.0.36/16, gateway 10.0.0.1 acquired from 10.0.0.1 Jul 10 00:35:50.532149 systemd[1]: Reached target remote-fs-pre.target. Jul 10 00:35:50.533300 unknown[644]: fetched base config from "system" Jul 10 00:35:50.533310 unknown[644]: fetched user config from "qemu" Jul 10 00:35:50.533970 systemd[1]: Reached target remote-cryptsetup.target. Jul 10 00:35:50.535951 systemd[1]: Reached target remote-fs.target. Jul 10 00:35:50.538263 systemd[1]: Starting dracut-pre-mount.service... Jul 10 00:35:50.541439 ignition[644]: fetch-offline: fetch-offline passed Jul 10 00:35:50.543000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:35:50.542448 systemd[1]: Finished ignition-fetch-offline.service. Jul 10 00:35:50.541498 ignition[644]: Ignition finished successfully Jul 10 00:35:50.543973 systemd[1]: ignition-fetch.service was skipped because of an unmet condition check (ConditionPathExists=!/run/ignition.json). Jul 10 00:35:50.544548 systemd[1]: Starting ignition-kargs.service... Jul 10 00:35:50.552074 systemd[1]: Finished dracut-pre-mount.service. Jul 10 00:35:50.552000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:35:50.559322 ignition[737]: Ignition 2.14.0 Jul 10 00:35:50.559332 ignition[737]: Stage: kargs Jul 10 00:35:50.559421 ignition[737]: no configs at "/usr/lib/ignition/base.d" Jul 10 00:35:50.559431 ignition[737]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Jul 10 00:35:50.560787 ignition[737]: kargs: kargs passed Jul 10 00:35:50.562680 systemd[1]: Finished ignition-kargs.service. Jul 10 00:35:50.563000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:35:50.560838 ignition[737]: Ignition finished successfully Jul 10 00:35:50.564956 systemd[1]: Starting ignition-disks.service... Jul 10 00:35:50.732724 ignition[745]: Ignition 2.14.0 Jul 10 00:35:50.732734 ignition[745]: Stage: disks Jul 10 00:35:50.732869 ignition[745]: no configs at "/usr/lib/ignition/base.d" Jul 10 00:35:50.732879 ignition[745]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Jul 10 00:35:50.736000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:35:50.735275 systemd[1]: Finished ignition-disks.service. Jul 10 00:35:50.734094 ignition[745]: disks: disks passed Jul 10 00:35:50.737186 systemd[1]: Reached target initrd-root-device.target. Jul 10 00:35:50.734137 ignition[745]: Ignition finished successfully Jul 10 00:35:50.739386 systemd[1]: Reached target local-fs-pre.target. Jul 10 00:35:50.740383 systemd[1]: Reached target local-fs.target. Jul 10 00:35:50.741358 systemd[1]: Reached target sysinit.target. Jul 10 00:35:50.743238 systemd[1]: Reached target basic.target. Jul 10 00:35:50.745475 systemd[1]: Starting systemd-fsck-root.service... Jul 10 00:35:50.763724 systemd-fsck[753]: ROOT: clean, 619/553520 files, 56023/553472 blocks Jul 10 00:35:50.892037 systemd[1]: Finished systemd-fsck-root.service. Jul 10 00:35:50.893000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:35:50.893794 systemd[1]: Mounting sysroot.mount... Jul 10 00:35:50.899676 kernel: EXT4-fs (vda9): mounted filesystem with ordered data mode. Opts: (null). Quota mode: none. Jul 10 00:35:50.900124 systemd[1]: Mounted sysroot.mount. Jul 10 00:35:50.900872 systemd[1]: Reached target initrd-root-fs.target. Jul 10 00:35:50.903469 systemd[1]: Mounting sysroot-usr.mount... Jul 10 00:35:50.904395 systemd[1]: flatcar-metadata-hostname.service was skipped because no trigger condition checks were met. Jul 10 00:35:50.904423 systemd[1]: ignition-remount-sysroot.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/sysroot). Jul 10 00:35:50.904442 systemd[1]: Reached target ignition-diskful.target. Jul 10 00:35:50.906278 systemd[1]: Mounted sysroot-usr.mount. Jul 10 00:35:50.908275 systemd[1]: Starting initrd-setup-root.service... Jul 10 00:35:50.912569 initrd-setup-root[763]: cut: /sysroot/etc/passwd: No such file or directory Jul 10 00:35:50.915956 initrd-setup-root[771]: cut: /sysroot/etc/group: No such file or directory Jul 10 00:35:50.919820 initrd-setup-root[779]: cut: /sysroot/etc/shadow: No such file or directory Jul 10 00:35:50.923147 initrd-setup-root[787]: cut: /sysroot/etc/gshadow: No such file or directory Jul 10 00:35:50.949685 systemd[1]: Finished initrd-setup-root.service. Jul 10 00:35:50.951000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:35:50.952139 systemd[1]: Starting ignition-mount.service... Jul 10 00:35:50.953388 systemd[1]: Starting sysroot-boot.service... Jul 10 00:35:50.957491 bash[804]: umount: /sysroot/usr/share/oem: not mounted. Jul 10 00:35:50.968725 ignition[805]: INFO : Ignition 2.14.0 Jul 10 00:35:50.969827 ignition[805]: INFO : Stage: mount Jul 10 00:35:50.969827 ignition[805]: INFO : no configs at "/usr/lib/ignition/base.d" Jul 10 00:35:50.969827 ignition[805]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Jul 10 00:35:50.973058 ignition[805]: INFO : mount: mount passed Jul 10 00:35:50.973058 ignition[805]: INFO : Ignition finished successfully Jul 10 00:35:50.973239 systemd[1]: Finished ignition-mount.service. Jul 10 00:35:50.975000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:35:50.977925 systemd[1]: Finished sysroot-boot.service. Jul 10 00:35:50.977000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:35:51.267636 systemd[1]: Mounting sysroot-usr-share-oem.mount... Jul 10 00:35:51.384703 kernel: BTRFS: device label OEM devid 1 transid 10 /dev/vda6 scanned by mount (814) Jul 10 00:35:51.386996 kernel: BTRFS info (device vda6): using crc32c (crc32c-intel) checksum algorithm Jul 10 00:35:51.387055 kernel: BTRFS info (device vda6): using free space tree Jul 10 00:35:51.387066 kernel: BTRFS info (device vda6): has skinny extents Jul 10 00:35:51.391068 systemd[1]: Mounted sysroot-usr-share-oem.mount. Jul 10 00:35:51.392692 systemd[1]: Starting ignition-files.service... Jul 10 00:35:51.416324 ignition[834]: INFO : Ignition 2.14.0 Jul 10 00:35:51.416324 ignition[834]: INFO : Stage: files Jul 10 00:35:51.417936 ignition[834]: INFO : no configs at "/usr/lib/ignition/base.d" Jul 10 00:35:51.417936 ignition[834]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Jul 10 00:35:51.420968 ignition[834]: DEBUG : files: compiled without relabeling support, skipping Jul 10 00:35:51.422959 ignition[834]: INFO : files: ensureUsers: op(1): [started] creating or modifying user "core" Jul 10 00:35:51.422959 ignition[834]: DEBUG : files: ensureUsers: op(1): executing: "usermod" "--root" "/sysroot" "core" Jul 10 00:35:51.427151 ignition[834]: INFO : files: ensureUsers: op(1): [finished] creating or modifying user "core" Jul 10 00:35:51.428752 ignition[834]: INFO : files: ensureUsers: op(2): [started] adding ssh keys to user "core" Jul 10 00:35:51.428752 ignition[834]: INFO : files: ensureUsers: op(2): [finished] adding ssh keys to user "core" Jul 10 00:35:51.428752 ignition[834]: INFO : files: createFilesystemsFiles: createFiles: op(3): [started] writing file "/sysroot/opt/helm-v3.17.0-linux-amd64.tar.gz" Jul 10 00:35:51.428752 ignition[834]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET https://get.helm.sh/helm-v3.17.0-linux-amd64.tar.gz: attempt #1 Jul 10 00:35:51.428013 unknown[834]: wrote ssh authorized keys file for user: core Jul 10 00:35:51.470377 ignition[834]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET result: OK Jul 10 00:35:51.829001 ignition[834]: INFO : files: createFilesystemsFiles: createFiles: op(3): [finished] writing file "/sysroot/opt/helm-v3.17.0-linux-amd64.tar.gz" Jul 10 00:35:51.831056 ignition[834]: INFO : files: createFilesystemsFiles: createFiles: op(4): [started] writing file "/sysroot/home/core/install.sh" Jul 10 00:35:51.831056 ignition[834]: INFO : files: createFilesystemsFiles: createFiles: op(4): [finished] writing file "/sysroot/home/core/install.sh" Jul 10 00:35:51.831056 ignition[834]: INFO : files: createFilesystemsFiles: createFiles: op(5): [started] writing file "/sysroot/home/core/nginx.yaml" Jul 10 00:35:51.831056 ignition[834]: INFO : files: createFilesystemsFiles: createFiles: op(5): [finished] writing file "/sysroot/home/core/nginx.yaml" Jul 10 00:35:51.831056 ignition[834]: INFO : files: createFilesystemsFiles: createFiles: op(6): [started] writing file "/sysroot/home/core/nfs-pod.yaml" Jul 10 00:35:51.831056 ignition[834]: INFO : files: createFilesystemsFiles: createFiles: op(6): [finished] writing file "/sysroot/home/core/nfs-pod.yaml" Jul 10 00:35:51.831056 ignition[834]: INFO : files: createFilesystemsFiles: createFiles: op(7): [started] writing file "/sysroot/home/core/nfs-pvc.yaml" Jul 10 00:35:51.831056 ignition[834]: INFO : files: createFilesystemsFiles: createFiles: op(7): [finished] writing file "/sysroot/home/core/nfs-pvc.yaml" Jul 10 00:35:51.831056 ignition[834]: INFO : files: createFilesystemsFiles: createFiles: op(8): [started] writing file "/sysroot/etc/flatcar/update.conf" Jul 10 00:35:51.831056 ignition[834]: INFO : files: createFilesystemsFiles: createFiles: op(8): [finished] writing file "/sysroot/etc/flatcar/update.conf" Jul 10 00:35:51.831056 ignition[834]: INFO : files: createFilesystemsFiles: createFiles: op(9): [started] writing link "/sysroot/etc/extensions/kubernetes.raw" -> "/opt/extensions/kubernetes/kubernetes-v1.32.4-x86-64.raw" Jul 10 00:35:51.831056 ignition[834]: INFO : files: createFilesystemsFiles: createFiles: op(9): [finished] writing link "/sysroot/etc/extensions/kubernetes.raw" -> "/opt/extensions/kubernetes/kubernetes-v1.32.4-x86-64.raw" Jul 10 00:35:51.831056 ignition[834]: INFO : files: createFilesystemsFiles: createFiles: op(a): [started] writing file "/sysroot/opt/extensions/kubernetes/kubernetes-v1.32.4-x86-64.raw" Jul 10 00:35:51.831056 ignition[834]: INFO : files: createFilesystemsFiles: createFiles: op(a): GET https://extensions.flatcar.org/extensions/kubernetes-v1.32.4-x86-64.raw: attempt #1 Jul 10 00:35:52.192867 systemd-networkd[719]: eth0: Gained IPv6LL Jul 10 00:35:52.538556 ignition[834]: INFO : files: createFilesystemsFiles: createFiles: op(a): GET result: OK Jul 10 00:35:53.311232 ignition[834]: INFO : files: createFilesystemsFiles: createFiles: op(a): [finished] writing file "/sysroot/opt/extensions/kubernetes/kubernetes-v1.32.4-x86-64.raw" Jul 10 00:35:53.311232 ignition[834]: INFO : files: op(b): [started] processing unit "prepare-helm.service" Jul 10 00:35:53.315338 ignition[834]: INFO : files: op(b): op(c): [started] writing unit "prepare-helm.service" at "/sysroot/etc/systemd/system/prepare-helm.service" Jul 10 00:35:53.315338 ignition[834]: INFO : files: op(b): op(c): [finished] writing unit "prepare-helm.service" at "/sysroot/etc/systemd/system/prepare-helm.service" Jul 10 00:35:53.315338 ignition[834]: INFO : files: op(b): [finished] processing unit "prepare-helm.service" Jul 10 00:35:53.315338 ignition[834]: INFO : files: op(d): [started] processing unit "coreos-metadata.service" Jul 10 00:35:53.315338 ignition[834]: INFO : files: op(d): op(e): [started] writing unit "coreos-metadata.service" at "/sysroot/etc/systemd/system/coreos-metadata.service" Jul 10 00:35:53.315338 ignition[834]: INFO : files: op(d): op(e): [finished] writing unit "coreos-metadata.service" at "/sysroot/etc/systemd/system/coreos-metadata.service" Jul 10 00:35:53.315338 ignition[834]: INFO : files: op(d): [finished] processing unit "coreos-metadata.service" Jul 10 00:35:53.315338 ignition[834]: INFO : files: op(f): [started] setting preset to enabled for "prepare-helm.service" Jul 10 00:35:53.315338 ignition[834]: INFO : files: op(f): [finished] setting preset to enabled for "prepare-helm.service" Jul 10 00:35:53.315338 ignition[834]: INFO : files: op(10): [started] setting preset to disabled for "coreos-metadata.service" Jul 10 00:35:53.315338 ignition[834]: INFO : files: op(10): op(11): [started] removing enablement symlink(s) for "coreos-metadata.service" Jul 10 00:35:53.350852 ignition[834]: INFO : files: op(10): op(11): [finished] removing enablement symlink(s) for "coreos-metadata.service" Jul 10 00:35:53.353397 ignition[834]: INFO : files: op(10): [finished] setting preset to disabled for "coreos-metadata.service" Jul 10 00:35:53.353397 ignition[834]: INFO : files: createResultFile: createFiles: op(12): [started] writing file "/sysroot/etc/.ignition-result.json" Jul 10 00:35:53.353397 ignition[834]: INFO : files: createResultFile: createFiles: op(12): [finished] writing file "/sysroot/etc/.ignition-result.json" Jul 10 00:35:53.353397 ignition[834]: INFO : files: files passed Jul 10 00:35:53.353397 ignition[834]: INFO : Ignition finished successfully Jul 10 00:35:53.376153 kernel: kauditd_printk_skb: 25 callbacks suppressed Jul 10 00:35:53.376177 kernel: audit: type=1130 audit(1752107753.352:36): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:35:53.376189 kernel: audit: type=1130 audit(1752107753.364:37): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:35:53.376202 kernel: audit: type=1130 audit(1752107753.368:38): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:35:53.376212 kernel: audit: type=1131 audit(1752107753.368:39): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:35:53.352000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:35:53.364000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:35:53.368000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:35:53.368000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:35:53.352377 systemd[1]: Finished ignition-files.service. Jul 10 00:35:53.354065 systemd[1]: Starting initrd-setup-root-after-ignition.service... Jul 10 00:35:53.359916 systemd[1]: torcx-profile-populate.service was skipped because of an unmet condition check (ConditionPathExists=/sysroot/etc/torcx/next-profile). Jul 10 00:35:53.380679 initrd-setup-root-after-ignition[857]: grep: /sysroot/usr/share/oem/oem-release: No such file or directory Jul 10 00:35:53.360423 systemd[1]: Starting ignition-quench.service... Jul 10 00:35:53.382961 initrd-setup-root-after-ignition[859]: grep: /sysroot/etc/flatcar/enabled-sysext.conf: No such file or directory Jul 10 00:35:53.362401 systemd[1]: Finished initrd-setup-root-after-ignition.service. Jul 10 00:35:53.364934 systemd[1]: ignition-quench.service: Deactivated successfully. Jul 10 00:35:53.364989 systemd[1]: Finished ignition-quench.service. Jul 10 00:35:53.393996 kernel: audit: type=1130 audit(1752107753.386:40): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:35:53.394017 kernel: audit: type=1131 audit(1752107753.386:41): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:35:53.386000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:35:53.386000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:35:53.369211 systemd[1]: Reached target ignition-complete.target. Jul 10 00:35:53.376578 systemd[1]: Starting initrd-parse-etc.service... Jul 10 00:35:53.386334 systemd[1]: initrd-parse-etc.service: Deactivated successfully. Jul 10 00:35:53.386401 systemd[1]: Finished initrd-parse-etc.service. Jul 10 00:35:53.387256 systemd[1]: Reached target initrd-fs.target. Jul 10 00:35:53.393999 systemd[1]: Reached target initrd.target. Jul 10 00:35:53.394758 systemd[1]: dracut-mount.service was skipped because no trigger condition checks were met. Jul 10 00:35:53.395252 systemd[1]: Starting dracut-pre-pivot.service... Jul 10 00:35:53.403277 systemd[1]: Finished dracut-pre-pivot.service. Jul 10 00:35:53.408723 kernel: audit: type=1130 audit(1752107753.403:42): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:35:53.403000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:35:53.404706 systemd[1]: Starting initrd-cleanup.service... Jul 10 00:35:53.412836 systemd[1]: Stopped target nss-lookup.target. Jul 10 00:35:53.413683 systemd[1]: Stopped target remote-cryptsetup.target. Jul 10 00:35:53.415159 systemd[1]: Stopped target timers.target. Jul 10 00:35:53.416637 systemd[1]: dracut-pre-pivot.service: Deactivated successfully. Jul 10 00:35:53.422266 kernel: audit: type=1131 audit(1752107753.417:43): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:35:53.417000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:35:53.416733 systemd[1]: Stopped dracut-pre-pivot.service. Jul 10 00:35:53.418096 systemd[1]: Stopped target initrd.target. Jul 10 00:35:53.422331 systemd[1]: Stopped target basic.target. Jul 10 00:35:53.423790 systemd[1]: Stopped target ignition-complete.target. Jul 10 00:35:53.425243 systemd[1]: Stopped target ignition-diskful.target. Jul 10 00:35:53.426716 systemd[1]: Stopped target initrd-root-device.target. Jul 10 00:35:53.428298 systemd[1]: Stopped target remote-fs.target. Jul 10 00:35:53.429813 systemd[1]: Stopped target remote-fs-pre.target. Jul 10 00:35:53.431372 systemd[1]: Stopped target sysinit.target. Jul 10 00:35:53.432792 systemd[1]: Stopped target local-fs.target. Jul 10 00:35:53.434240 systemd[1]: Stopped target local-fs-pre.target. Jul 10 00:35:53.435713 systemd[1]: Stopped target swap.target. Jul 10 00:35:53.442686 kernel: audit: type=1131 audit(1752107753.437:44): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:35:53.437000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:35:53.437042 systemd[1]: dracut-pre-mount.service: Deactivated successfully. Jul 10 00:35:53.437124 systemd[1]: Stopped dracut-pre-mount.service. Jul 10 00:35:53.448523 kernel: audit: type=1131 audit(1752107753.443:45): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:35:53.443000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:35:53.438622 systemd[1]: Stopped target cryptsetup.target. Jul 10 00:35:53.447000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:35:53.442724 systemd[1]: dracut-initqueue.service: Deactivated successfully. Jul 10 00:35:53.442803 systemd[1]: Stopped dracut-initqueue.service. Jul 10 00:35:53.444440 systemd[1]: ignition-fetch-offline.service: Deactivated successfully. Jul 10 00:35:53.444532 systemd[1]: Stopped ignition-fetch-offline.service. Jul 10 00:35:53.448644 systemd[1]: Stopped target paths.target. Jul 10 00:35:53.449983 systemd[1]: systemd-ask-password-console.path: Deactivated successfully. Jul 10 00:35:53.453687 systemd[1]: Stopped systemd-ask-password-console.path. Jul 10 00:35:53.454995 systemd[1]: Stopped target slices.target. Jul 10 00:35:53.456760 systemd[1]: Stopped target sockets.target. Jul 10 00:35:53.458250 systemd[1]: iscsid.socket: Deactivated successfully. Jul 10 00:35:53.460000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:35:53.458310 systemd[1]: Closed iscsid.socket. Jul 10 00:35:53.461000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:35:53.459571 systemd[1]: initrd-setup-root-after-ignition.service: Deactivated successfully. Jul 10 00:35:53.459665 systemd[1]: Stopped initrd-setup-root-after-ignition.service. Jul 10 00:35:53.461147 systemd[1]: ignition-files.service: Deactivated successfully. Jul 10 00:35:53.466000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:35:53.461222 systemd[1]: Stopped ignition-files.service. Jul 10 00:35:53.463172 systemd[1]: Stopping ignition-mount.service... Jul 10 00:35:53.463961 systemd[1]: Stopping iscsiuio.service... Jul 10 00:35:53.470000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:35:53.465457 systemd[1]: kmod-static-nodes.service: Deactivated successfully. Jul 10 00:35:53.471000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:35:53.465582 systemd[1]: Stopped kmod-static-nodes.service. Jul 10 00:35:53.468110 systemd[1]: Stopping sysroot-boot.service... Jul 10 00:35:53.474000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:35:53.469394 systemd[1]: systemd-udev-trigger.service: Deactivated successfully. Jul 10 00:35:53.469531 systemd[1]: Stopped systemd-udev-trigger.service. Jul 10 00:35:53.471056 systemd[1]: dracut-pre-trigger.service: Deactivated successfully. Jul 10 00:35:53.477000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:35:53.477000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:35:53.471172 systemd[1]: Stopped dracut-pre-trigger.service. Jul 10 00:35:53.482320 ignition[874]: INFO : Ignition 2.14.0 Jul 10 00:35:53.482320 ignition[874]: INFO : Stage: umount Jul 10 00:35:53.482320 ignition[874]: INFO : no configs at "/usr/lib/ignition/base.d" Jul 10 00:35:53.482320 ignition[874]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Jul 10 00:35:53.482320 ignition[874]: INFO : umount: umount passed Jul 10 00:35:53.482320 ignition[874]: INFO : Ignition finished successfully Jul 10 00:35:53.481000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:35:53.484000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:35:53.486000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:35:53.488000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:35:53.473955 systemd[1]: iscsiuio.service: Deactivated successfully. Jul 10 00:35:53.474025 systemd[1]: Stopped iscsiuio.service. Jul 10 00:35:53.475227 systemd[1]: iscsiuio.socket: Deactivated successfully. Jul 10 00:35:53.475288 systemd[1]: Closed iscsiuio.socket. Jul 10 00:35:53.476514 systemd[1]: initrd-cleanup.service: Deactivated successfully. Jul 10 00:35:53.476599 systemd[1]: Finished initrd-cleanup.service. Jul 10 00:35:53.481155 systemd[1]: ignition-mount.service: Deactivated successfully. Jul 10 00:35:53.498000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:35:53.481224 systemd[1]: Stopped ignition-mount.service. Jul 10 00:35:53.482380 systemd[1]: Stopped target network.target. Jul 10 00:35:53.484007 systemd[1]: ignition-disks.service: Deactivated successfully. Jul 10 00:35:53.503000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:35:53.505000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:35:53.484066 systemd[1]: Stopped ignition-disks.service. Jul 10 00:35:53.506000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:35:53.485476 systemd[1]: ignition-kargs.service: Deactivated successfully. Jul 10 00:35:53.485505 systemd[1]: Stopped ignition-kargs.service. Jul 10 00:35:53.487467 systemd[1]: ignition-setup.service: Deactivated successfully. Jul 10 00:35:53.487500 systemd[1]: Stopped ignition-setup.service. Jul 10 00:35:53.510000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:35:53.489385 systemd[1]: Stopping systemd-networkd.service... Jul 10 00:35:53.491048 systemd[1]: Stopping systemd-resolved.service... Jul 10 00:35:53.493428 systemd[1]: sysroot-boot.mount: Deactivated successfully. Jul 10 00:35:53.514000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=network-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:35:53.515000 audit: BPF prog-id=6 op=UNLOAD Jul 10 00:35:53.495736 systemd-networkd[719]: eth0: DHCPv6 lease lost Jul 10 00:35:53.515000 audit: BPF prog-id=9 op=UNLOAD Jul 10 00:35:53.497378 systemd[1]: systemd-networkd.service: Deactivated successfully. Jul 10 00:35:53.497455 systemd[1]: Stopped systemd-networkd.service. Jul 10 00:35:53.499115 systemd[1]: systemd-networkd.socket: Deactivated successfully. Jul 10 00:35:53.499145 systemd[1]: Closed systemd-networkd.socket. Jul 10 00:35:53.519000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:35:53.501792 systemd[1]: Stopping network-cleanup.service... Jul 10 00:35:53.502802 systemd[1]: parse-ip-for-networkd.service: Deactivated successfully. Jul 10 00:35:53.502839 systemd[1]: Stopped parse-ip-for-networkd.service. Jul 10 00:35:53.504398 systemd[1]: systemd-sysctl.service: Deactivated successfully. Jul 10 00:35:53.525000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:35:53.527000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:35:53.504429 systemd[1]: Stopped systemd-sysctl.service. Jul 10 00:35:53.527000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:35:53.506143 systemd[1]: systemd-modules-load.service: Deactivated successfully. Jul 10 00:35:53.530000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:35:53.506173 systemd[1]: Stopped systemd-modules-load.service. Jul 10 00:35:53.507122 systemd[1]: Stopping systemd-udevd.service... Jul 10 00:35:53.509171 systemd[1]: run-credentials-systemd\x2dsysctl.service.mount: Deactivated successfully. Jul 10 00:35:53.509524 systemd[1]: systemd-resolved.service: Deactivated successfully. Jul 10 00:35:53.534000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:35:53.534000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:35:53.509593 systemd[1]: Stopped systemd-resolved.service. Jul 10 00:35:53.513905 systemd[1]: network-cleanup.service: Deactivated successfully. Jul 10 00:35:53.513974 systemd[1]: Stopped network-cleanup.service. Jul 10 00:35:53.518863 systemd[1]: systemd-udevd.service: Deactivated successfully. Jul 10 00:35:53.518976 systemd[1]: Stopped systemd-udevd.service. Jul 10 00:35:53.521452 systemd[1]: systemd-udevd-control.socket: Deactivated successfully. Jul 10 00:35:53.521485 systemd[1]: Closed systemd-udevd-control.socket. Jul 10 00:35:53.522940 systemd[1]: systemd-udevd-kernel.socket: Deactivated successfully. Jul 10 00:35:53.522966 systemd[1]: Closed systemd-udevd-kernel.socket. Jul 10 00:35:53.524789 systemd[1]: dracut-pre-udev.service: Deactivated successfully. Jul 10 00:35:53.524836 systemd[1]: Stopped dracut-pre-udev.service. Jul 10 00:35:53.526290 systemd[1]: dracut-cmdline.service: Deactivated successfully. Jul 10 00:35:53.526320 systemd[1]: Stopped dracut-cmdline.service. Jul 10 00:35:53.527911 systemd[1]: dracut-cmdline-ask.service: Deactivated successfully. Jul 10 00:35:53.527941 systemd[1]: Stopped dracut-cmdline-ask.service. Jul 10 00:35:53.528981 systemd[1]: Starting initrd-udevadm-cleanup-db.service... Jul 10 00:35:53.530120 systemd[1]: systemd-vconsole-setup.service: Deactivated successfully. Jul 10 00:35:53.530158 systemd[1]: Stopped systemd-vconsole-setup.service. Jul 10 00:35:53.533676 systemd[1]: initrd-udevadm-cleanup-db.service: Deactivated successfully. Jul 10 00:35:53.533745 systemd[1]: Finished initrd-udevadm-cleanup-db.service. Jul 10 00:35:53.553000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:35:53.552978 systemd[1]: sysroot-boot.service: Deactivated successfully. Jul 10 00:35:53.555000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:35:53.553052 systemd[1]: Stopped sysroot-boot.service. Jul 10 00:35:53.554035 systemd[1]: Reached target initrd-switch-root.target. Jul 10 00:35:53.555584 systemd[1]: initrd-setup-root.service: Deactivated successfully. Jul 10 00:35:53.555621 systemd[1]: Stopped initrd-setup-root.service. Jul 10 00:35:53.556998 systemd[1]: Starting initrd-switch-root.service... Jul 10 00:35:53.572754 systemd[1]: Switching root. Jul 10 00:35:53.591454 iscsid[725]: iscsid shutting down. Jul 10 00:35:53.592154 systemd-journald[197]: Received SIGTERM from PID 1 (systemd). Jul 10 00:35:53.592192 systemd-journald[197]: Journal stopped Jul 10 00:35:57.523348 kernel: SELinux: Class mctp_socket not defined in policy. Jul 10 00:35:57.523399 kernel: SELinux: Class anon_inode not defined in policy. Jul 10 00:35:57.523410 kernel: SELinux: the above unknown classes and permissions will be allowed Jul 10 00:35:57.523430 kernel: SELinux: policy capability network_peer_controls=1 Jul 10 00:35:57.523439 kernel: SELinux: policy capability open_perms=1 Jul 10 00:35:57.523448 kernel: SELinux: policy capability extended_socket_class=1 Jul 10 00:35:57.523465 kernel: SELinux: policy capability always_check_network=0 Jul 10 00:35:57.523476 kernel: SELinux: policy capability cgroup_seclabel=1 Jul 10 00:35:57.523489 kernel: SELinux: policy capability nnp_nosuid_transition=1 Jul 10 00:35:57.523498 kernel: SELinux: policy capability genfs_seclabel_symlinks=0 Jul 10 00:35:57.523507 kernel: SELinux: policy capability ioctl_skip_cloexec=0 Jul 10 00:35:57.523517 systemd[1]: Successfully loaded SELinux policy in 38.616ms. Jul 10 00:35:57.523538 systemd[1]: Relabelled /dev, /dev/shm, /run, /sys/fs/cgroup in 7.828ms. Jul 10 00:35:57.523549 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Jul 10 00:35:57.523560 systemd[1]: Detected virtualization kvm. Jul 10 00:35:57.523570 systemd[1]: Detected architecture x86-64. Jul 10 00:35:57.523581 systemd[1]: Detected first boot. Jul 10 00:35:57.523590 systemd[1]: Initializing machine ID from VM UUID. Jul 10 00:35:57.523600 kernel: SELinux: Context system_u:object_r:container_file_t:s0:c1022,c1023 is not valid (left unmapped). Jul 10 00:35:57.523610 systemd[1]: Populated /etc with preset unit settings. Jul 10 00:35:57.523620 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Jul 10 00:35:57.523635 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Jul 10 00:35:57.523645 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Jul 10 00:35:57.523709 systemd[1]: iscsid.service: Deactivated successfully. Jul 10 00:35:57.523720 systemd[1]: Stopped iscsid.service. Jul 10 00:35:57.523730 systemd[1]: initrd-switch-root.service: Deactivated successfully. Jul 10 00:35:57.523741 systemd[1]: Stopped initrd-switch-root.service. Jul 10 00:35:57.523753 systemd[1]: systemd-journald.service: Scheduled restart job, restart counter is at 1. Jul 10 00:35:57.523764 systemd[1]: Created slice system-addon\x2dconfig.slice. Jul 10 00:35:57.523774 systemd[1]: Created slice system-addon\x2drun.slice. Jul 10 00:35:57.523784 systemd[1]: Created slice system-getty.slice. Jul 10 00:35:57.523794 systemd[1]: Created slice system-modprobe.slice. Jul 10 00:35:57.523804 systemd[1]: Created slice system-serial\x2dgetty.slice. Jul 10 00:35:57.523815 systemd[1]: Created slice system-system\x2dcloudinit.slice. Jul 10 00:35:57.523826 systemd[1]: Created slice system-systemd\x2dfsck.slice. Jul 10 00:35:57.523836 systemd[1]: Created slice user.slice. Jul 10 00:35:57.523846 systemd[1]: Started systemd-ask-password-console.path. Jul 10 00:35:57.523857 systemd[1]: Started systemd-ask-password-wall.path. Jul 10 00:35:57.523867 systemd[1]: Set up automount boot.automount. Jul 10 00:35:57.523877 systemd[1]: Set up automount proc-sys-fs-binfmt_misc.automount. Jul 10 00:35:57.523887 systemd[1]: Stopped target initrd-switch-root.target. Jul 10 00:35:57.523897 systemd[1]: Stopped target initrd-fs.target. Jul 10 00:35:57.523907 systemd[1]: Stopped target initrd-root-fs.target. Jul 10 00:35:57.523917 systemd[1]: Reached target integritysetup.target. Jul 10 00:35:57.523927 systemd[1]: Reached target remote-cryptsetup.target. Jul 10 00:35:57.523939 systemd[1]: Reached target remote-fs.target. Jul 10 00:35:57.523948 systemd[1]: Reached target slices.target. Jul 10 00:35:57.523958 systemd[1]: Reached target swap.target. Jul 10 00:35:57.523968 systemd[1]: Reached target torcx.target. Jul 10 00:35:57.523978 systemd[1]: Reached target veritysetup.target. Jul 10 00:35:57.523988 systemd[1]: Listening on systemd-coredump.socket. Jul 10 00:35:57.523998 systemd[1]: Listening on systemd-initctl.socket. Jul 10 00:35:57.524007 systemd[1]: Listening on systemd-networkd.socket. Jul 10 00:35:57.524017 systemd[1]: Listening on systemd-udevd-control.socket. Jul 10 00:35:57.524028 systemd[1]: Listening on systemd-udevd-kernel.socket. Jul 10 00:35:57.524038 systemd[1]: Listening on systemd-userdbd.socket. Jul 10 00:35:57.524048 systemd[1]: Mounting dev-hugepages.mount... Jul 10 00:35:57.524057 systemd[1]: Mounting dev-mqueue.mount... Jul 10 00:35:57.524068 systemd[1]: Mounting media.mount... Jul 10 00:35:57.524078 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 10 00:35:57.524087 systemd[1]: Mounting sys-kernel-debug.mount... Jul 10 00:35:57.524097 systemd[1]: Mounting sys-kernel-tracing.mount... Jul 10 00:35:57.524107 systemd[1]: Mounting tmp.mount... Jul 10 00:35:57.524116 systemd[1]: Starting flatcar-tmpfiles.service... Jul 10 00:35:57.524128 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Jul 10 00:35:57.524138 systemd[1]: Starting kmod-static-nodes.service... Jul 10 00:35:57.524148 systemd[1]: Starting modprobe@configfs.service... Jul 10 00:35:57.524158 systemd[1]: Starting modprobe@dm_mod.service... Jul 10 00:35:57.524168 systemd[1]: Starting modprobe@drm.service... Jul 10 00:35:57.524178 systemd[1]: Starting modprobe@efi_pstore.service... Jul 10 00:35:57.524190 systemd[1]: Starting modprobe@fuse.service... Jul 10 00:35:57.524201 systemd[1]: Starting modprobe@loop.service... Jul 10 00:35:57.524212 systemd[1]: setup-nsswitch.service was skipped because of an unmet condition check (ConditionPathExists=!/etc/nsswitch.conf). Jul 10 00:35:57.524225 systemd[1]: systemd-fsck-root.service: Deactivated successfully. Jul 10 00:35:57.524236 systemd[1]: Stopped systemd-fsck-root.service. Jul 10 00:35:57.524247 systemd[1]: systemd-fsck-usr.service: Deactivated successfully. Jul 10 00:35:57.524257 systemd[1]: Stopped systemd-fsck-usr.service. Jul 10 00:35:57.524266 kernel: fuse: init (API version 7.34) Jul 10 00:35:57.524277 systemd[1]: Stopped systemd-journald.service. Jul 10 00:35:57.524286 kernel: loop: module loaded Jul 10 00:35:57.524296 systemd[1]: Starting systemd-journald.service... Jul 10 00:35:57.524306 systemd[1]: Starting systemd-modules-load.service... Jul 10 00:35:57.524317 systemd[1]: Starting systemd-network-generator.service... Jul 10 00:35:57.524327 systemd[1]: Starting systemd-remount-fs.service... Jul 10 00:35:57.524336 systemd[1]: Starting systemd-udev-trigger.service... Jul 10 00:35:57.524347 systemd[1]: verity-setup.service: Deactivated successfully. Jul 10 00:35:57.524356 systemd[1]: Stopped verity-setup.service. Jul 10 00:35:57.524367 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 10 00:35:57.524377 systemd[1]: Mounted dev-hugepages.mount. Jul 10 00:35:57.524389 systemd-journald[988]: Journal started Jul 10 00:35:57.524433 systemd-journald[988]: Runtime Journal (/run/log/journal/2425d785aa0e4297baa7b6071686ca59) is 6.0M, max 48.5M, 42.5M free. Jul 10 00:35:53.650000 audit: MAC_POLICY_LOAD auid=4294967295 ses=4294967295 lsm=selinux res=1 Jul 10 00:35:54.409000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Jul 10 00:35:54.409000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Jul 10 00:35:54.409000 audit: BPF prog-id=10 op=LOAD Jul 10 00:35:54.409000 audit: BPF prog-id=10 op=UNLOAD Jul 10 00:35:54.409000 audit: BPF prog-id=11 op=LOAD Jul 10 00:35:54.409000 audit: BPF prog-id=11 op=UNLOAD Jul 10 00:35:54.448000 audit[907]: AVC avc: denied { associate } for pid=907 comm="torcx-generator" name="docker" dev="tmpfs" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:object_r:container_file_t:s0:c1022,c1023" Jul 10 00:35:54.448000 audit[907]: SYSCALL arch=c000003e syscall=188 success=yes exit=0 a0=c0001878cc a1=c00002ae40 a2=c000029100 a3=32 items=0 ppid=890 pid=907 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:35:54.448000 audit: PROCTITLE proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Jul 10 00:35:54.450000 audit[907]: AVC avc: denied { associate } for pid=907 comm="torcx-generator" name="lib" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 Jul 10 00:35:54.450000 audit[907]: SYSCALL arch=c000003e syscall=258 success=yes exit=0 a0=ffffffffffffff9c a1=c0000980d5 a2=1ed a3=0 items=2 ppid=890 pid=907 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:35:54.450000 audit: CWD cwd="/" Jul 10 00:35:54.450000 audit: PATH item=0 name=(null) inode=2 dev=00:1b mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:35:54.450000 audit: PATH item=1 name=(null) inode=3 dev=00:1b mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:35:54.450000 audit: PROCTITLE proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Jul 10 00:35:57.398000 audit: BPF prog-id=12 op=LOAD Jul 10 00:35:57.398000 audit: BPF prog-id=3 op=UNLOAD Jul 10 00:35:57.398000 audit: BPF prog-id=13 op=LOAD Jul 10 00:35:57.398000 audit: BPF prog-id=14 op=LOAD Jul 10 00:35:57.398000 audit: BPF prog-id=4 op=UNLOAD Jul 10 00:35:57.398000 audit: BPF prog-id=5 op=UNLOAD Jul 10 00:35:57.399000 audit: BPF prog-id=15 op=LOAD Jul 10 00:35:57.399000 audit: BPF prog-id=12 op=UNLOAD Jul 10 00:35:57.399000 audit: BPF prog-id=16 op=LOAD Jul 10 00:35:57.399000 audit: BPF prog-id=17 op=LOAD Jul 10 00:35:57.399000 audit: BPF prog-id=13 op=UNLOAD Jul 10 00:35:57.399000 audit: BPF prog-id=14 op=UNLOAD Jul 10 00:35:57.400000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:35:57.403000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:35:57.406000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:35:57.406000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:35:57.414000 audit: BPF prog-id=15 op=UNLOAD Jul 10 00:35:57.496000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:35:57.499000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:35:57.503000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:35:57.503000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:35:57.504000 audit: BPF prog-id=18 op=LOAD Jul 10 00:35:57.504000 audit: BPF prog-id=19 op=LOAD Jul 10 00:35:57.504000 audit: BPF prog-id=20 op=LOAD Jul 10 00:35:57.504000 audit: BPF prog-id=16 op=UNLOAD Jul 10 00:35:57.504000 audit: BPF prog-id=17 op=UNLOAD Jul 10 00:35:57.520000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:35:57.521000 audit: CONFIG_CHANGE op=set audit_enabled=1 old=1 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 res=1 Jul 10 00:35:57.521000 audit[988]: SYSCALL arch=c000003e syscall=46 success=yes exit=60 a0=3 a1=7ffd96e10200 a2=4000 a3=7ffd96e1029c items=0 ppid=1 pid=988 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-journal" exe="/usr/lib/systemd/systemd-journald" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:35:57.521000 audit: PROCTITLE proctitle="/usr/lib/systemd/systemd-journald" Jul 10 00:35:54.447239 /usr/lib/systemd/system-generators/torcx-generator[907]: time="2025-07-10T00:35:54Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.7 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.7 /var/lib/torcx/store]" Jul 10 00:35:57.396866 systemd[1]: Queued start job for default target multi-user.target. Jul 10 00:35:54.447535 /usr/lib/systemd/system-generators/torcx-generator[907]: time="2025-07-10T00:35:54Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Jul 10 00:35:57.396876 systemd[1]: Unnecessary job was removed for dev-vda6.device. Jul 10 00:35:54.447557 /usr/lib/systemd/system-generators/torcx-generator[907]: time="2025-07-10T00:35:54Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Jul 10 00:35:57.401027 systemd[1]: systemd-journald.service: Deactivated successfully. Jul 10 00:35:54.447594 /usr/lib/systemd/system-generators/torcx-generator[907]: time="2025-07-10T00:35:54Z" level=info msg="no vendor profile selected by /etc/flatcar/docker-1.12" Jul 10 00:35:54.447606 /usr/lib/systemd/system-generators/torcx-generator[907]: time="2025-07-10T00:35:54Z" level=debug msg="skipped missing lower profile" missing profile=oem Jul 10 00:35:54.447642 /usr/lib/systemd/system-generators/torcx-generator[907]: time="2025-07-10T00:35:54Z" level=warning msg="no next profile: unable to read profile file: open /etc/torcx/next-profile: no such file or directory" Jul 10 00:35:54.447672 /usr/lib/systemd/system-generators/torcx-generator[907]: time="2025-07-10T00:35:54Z" level=debug msg="apply configuration parsed" lower profiles (vendor/oem)="[vendor]" upper profile (user)= Jul 10 00:35:54.447925 /usr/lib/systemd/system-generators/torcx-generator[907]: time="2025-07-10T00:35:54Z" level=debug msg="mounted tmpfs" target=/run/torcx/unpack Jul 10 00:35:54.447964 /usr/lib/systemd/system-generators/torcx-generator[907]: time="2025-07-10T00:35:54Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Jul 10 00:35:54.447979 /usr/lib/systemd/system-generators/torcx-generator[907]: time="2025-07-10T00:35:54Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Jul 10 00:35:54.448868 /usr/lib/systemd/system-generators/torcx-generator[907]: time="2025-07-10T00:35:54Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:20.10.torcx.tgz" reference=20.10 Jul 10 00:35:54.448911 /usr/lib/systemd/system-generators/torcx-generator[907]: time="2025-07-10T00:35:54Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:com.coreos.cl.torcx.tgz" reference=com.coreos.cl Jul 10 00:35:54.448935 /usr/lib/systemd/system-generators/torcx-generator[907]: time="2025-07-10T00:35:54Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store/3510.3.7: no such file or directory" path=/usr/share/oem/torcx/store/3510.3.7 Jul 10 00:35:54.448954 /usr/lib/systemd/system-generators/torcx-generator[907]: time="2025-07-10T00:35:54Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store: no such file or directory" path=/usr/share/oem/torcx/store Jul 10 00:35:54.448975 /usr/lib/systemd/system-generators/torcx-generator[907]: time="2025-07-10T00:35:54Z" level=info msg="store skipped" err="open /var/lib/torcx/store/3510.3.7: no such file or directory" path=/var/lib/torcx/store/3510.3.7 Jul 10 00:35:54.448993 /usr/lib/systemd/system-generators/torcx-generator[907]: time="2025-07-10T00:35:54Z" level=info msg="store skipped" err="open /var/lib/torcx/store: no such file or directory" path=/var/lib/torcx/store Jul 10 00:35:57.526695 systemd[1]: Started systemd-journald.service. Jul 10 00:35:57.144943 /usr/lib/systemd/system-generators/torcx-generator[907]: time="2025-07-10T00:35:57Z" level=debug msg="image unpacked" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Jul 10 00:35:57.145196 /usr/lib/systemd/system-generators/torcx-generator[907]: time="2025-07-10T00:35:57Z" level=debug msg="binaries propagated" assets="[/bin/containerd /bin/containerd-shim /bin/ctr /bin/docker /bin/docker-containerd /bin/docker-containerd-shim /bin/docker-init /bin/docker-proxy /bin/docker-runc /bin/dockerd /bin/runc /bin/tini]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Jul 10 00:35:57.145297 /usr/lib/systemd/system-generators/torcx-generator[907]: time="2025-07-10T00:35:57Z" level=debug msg="networkd units propagated" assets="[/lib/systemd/network/50-docker.network /lib/systemd/network/90-docker-veth.network]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Jul 10 00:35:57.145477 /usr/lib/systemd/system-generators/torcx-generator[907]: time="2025-07-10T00:35:57Z" level=debug msg="systemd units propagated" assets="[/lib/systemd/system/containerd.service /lib/systemd/system/docker.service /lib/systemd/system/docker.socket /lib/systemd/system/sockets.target.wants /lib/systemd/system/multi-user.target.wants]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Jul 10 00:35:57.145523 /usr/lib/systemd/system-generators/torcx-generator[907]: time="2025-07-10T00:35:57Z" level=debug msg="profile applied" sealed profile=/run/torcx/profile.json upper profile= Jul 10 00:35:57.145576 /usr/lib/systemd/system-generators/torcx-generator[907]: time="2025-07-10T00:35:57Z" level=debug msg="system state sealed" content="[TORCX_LOWER_PROFILES=\"vendor\" TORCX_UPPER_PROFILE=\"\" TORCX_PROFILE_PATH=\"/run/torcx/profile.json\" TORCX_BINDIR=\"/run/torcx/bin\" TORCX_UNPACKDIR=\"/run/torcx/unpack\"]" path=/run/metadata/torcx Jul 10 00:35:57.526000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:35:57.527708 systemd[1]: Mounted dev-mqueue.mount. Jul 10 00:35:57.528495 systemd[1]: Mounted media.mount. Jul 10 00:35:57.529239 systemd[1]: Mounted sys-kernel-debug.mount. Jul 10 00:35:57.530082 systemd[1]: Mounted sys-kernel-tracing.mount. Jul 10 00:35:57.530969 systemd[1]: Mounted tmp.mount. Jul 10 00:35:57.531857 systemd[1]: Finished flatcar-tmpfiles.service. Jul 10 00:35:57.532000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=flatcar-tmpfiles comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:35:57.532939 systemd[1]: Finished kmod-static-nodes.service. Jul 10 00:35:57.533000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:35:57.533964 systemd[1]: modprobe@configfs.service: Deactivated successfully. Jul 10 00:35:57.534105 systemd[1]: Finished modprobe@configfs.service. Jul 10 00:35:57.534000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:35:57.534000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:35:57.535126 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Jul 10 00:35:57.535259 systemd[1]: Finished modprobe@dm_mod.service. Jul 10 00:35:57.535000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:35:57.535000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:35:57.536291 systemd[1]: modprobe@drm.service: Deactivated successfully. Jul 10 00:35:57.536408 systemd[1]: Finished modprobe@drm.service. Jul 10 00:35:57.536000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:35:57.536000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:35:57.537508 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Jul 10 00:35:57.537631 systemd[1]: Finished modprobe@efi_pstore.service. Jul 10 00:35:57.537000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:35:57.537000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:35:57.538731 systemd[1]: modprobe@fuse.service: Deactivated successfully. Jul 10 00:35:57.538852 systemd[1]: Finished modprobe@fuse.service. Jul 10 00:35:57.538000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:35:57.538000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:35:57.539822 systemd[1]: modprobe@loop.service: Deactivated successfully. Jul 10 00:35:57.539930 systemd[1]: Finished modprobe@loop.service. Jul 10 00:35:57.540000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:35:57.540000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:35:57.540976 systemd[1]: Finished systemd-modules-load.service. Jul 10 00:35:57.541000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:35:57.542109 systemd[1]: Finished systemd-network-generator.service. Jul 10 00:35:57.542000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-network-generator comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:35:57.543259 systemd[1]: Finished systemd-remount-fs.service. Jul 10 00:35:57.543000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-remount-fs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:35:57.544478 systemd[1]: Reached target network-pre.target. Jul 10 00:35:57.546350 systemd[1]: Mounting sys-fs-fuse-connections.mount... Jul 10 00:35:57.548153 systemd[1]: Mounting sys-kernel-config.mount... Jul 10 00:35:57.549173 systemd[1]: remount-root.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/). Jul 10 00:35:57.550290 systemd[1]: Starting systemd-hwdb-update.service... Jul 10 00:35:57.552193 systemd[1]: Starting systemd-journal-flush.service... Jul 10 00:35:57.553245 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Jul 10 00:35:57.554011 systemd[1]: Starting systemd-random-seed.service... Jul 10 00:35:57.555101 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Jul 10 00:35:57.556730 systemd-journald[988]: Time spent on flushing to /var/log/journal/2425d785aa0e4297baa7b6071686ca59 is 13.642ms for 1094 entries. Jul 10 00:35:57.556730 systemd-journald[988]: System Journal (/var/log/journal/2425d785aa0e4297baa7b6071686ca59) is 8.0M, max 195.6M, 187.6M free. Jul 10 00:35:57.583858 systemd-journald[988]: Received client request to flush runtime journal. Jul 10 00:35:57.563000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:35:57.565000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-random-seed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:35:57.570000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:35:57.576000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysusers comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:35:57.555983 systemd[1]: Starting systemd-sysctl.service... Jul 10 00:35:57.558714 systemd[1]: Starting systemd-sysusers.service... Jul 10 00:35:57.561669 systemd[1]: Mounted sys-fs-fuse-connections.mount. Jul 10 00:35:57.562971 systemd[1]: Finished systemd-udev-trigger.service. Jul 10 00:35:57.584959 udevadm[1011]: systemd-udev-settle.service is deprecated. Please fix lvm2-activation-early.service, lvm2-activation.service not to pull it in. Jul 10 00:35:57.563943 systemd[1]: Mounted sys-kernel-config.mount. Jul 10 00:35:57.565041 systemd[1]: Finished systemd-random-seed.service. Jul 10 00:35:57.566188 systemd[1]: Reached target first-boot-complete.target. Jul 10 00:35:57.568362 systemd[1]: Starting systemd-udev-settle.service... Jul 10 00:35:57.570208 systemd[1]: Finished systemd-sysctl.service. Jul 10 00:35:57.576043 systemd[1]: Finished systemd-sysusers.service. Jul 10 00:35:57.584563 systemd[1]: Finished systemd-journal-flush.service. Jul 10 00:35:57.584000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-flush comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:35:57.978941 systemd[1]: Finished systemd-hwdb-update.service. Jul 10 00:35:57.979000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hwdb-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:35:57.979000 audit: BPF prog-id=21 op=LOAD Jul 10 00:35:57.979000 audit: BPF prog-id=22 op=LOAD Jul 10 00:35:57.979000 audit: BPF prog-id=7 op=UNLOAD Jul 10 00:35:57.979000 audit: BPF prog-id=8 op=UNLOAD Jul 10 00:35:57.981056 systemd[1]: Starting systemd-udevd.service... Jul 10 00:35:57.994969 systemd-udevd[1013]: Using default interface naming scheme 'v252'. Jul 10 00:35:58.008512 systemd[1]: Started systemd-udevd.service. Jul 10 00:35:58.008000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:35:58.009000 audit: BPF prog-id=23 op=LOAD Jul 10 00:35:58.012714 systemd[1]: Starting systemd-networkd.service... Jul 10 00:35:58.015000 audit: BPF prog-id=24 op=LOAD Jul 10 00:35:58.015000 audit: BPF prog-id=25 op=LOAD Jul 10 00:35:58.015000 audit: BPF prog-id=26 op=LOAD Jul 10 00:35:58.017305 systemd[1]: Starting systemd-userdbd.service... Jul 10 00:35:58.027337 systemd[1]: Condition check resulted in dev-ttyS0.device being skipped. Jul 10 00:35:58.042830 systemd[1]: Started systemd-userdbd.service. Jul 10 00:35:58.043000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-userdbd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:35:58.074688 kernel: input: Power Button as /devices/LNXSYSTM:00/LNXPWRBN:00/input/input2 Jul 10 00:35:58.079250 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Jul 10 00:35:58.084049 kernel: ACPI: button: Power Button [PWRF] Jul 10 00:35:58.085534 systemd-networkd[1023]: lo: Link UP Jul 10 00:35:58.085808 systemd-networkd[1023]: lo: Gained carrier Jul 10 00:35:58.086187 systemd-networkd[1023]: Enumeration completed Jul 10 00:35:58.086344 systemd[1]: Started systemd-networkd.service. Jul 10 00:35:58.086788 systemd-networkd[1023]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Jul 10 00:35:58.086000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:35:58.088319 systemd-networkd[1023]: eth0: Link UP Jul 10 00:35:58.088327 systemd-networkd[1023]: eth0: Gained carrier Jul 10 00:35:58.090000 audit[1040]: AVC avc: denied { confidentiality } for pid=1040 comm="(udev-worker)" lockdown_reason="use of tracefs" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=1 Jul 10 00:35:58.090000 audit[1040]: SYSCALL arch=c000003e syscall=175 success=yes exit=0 a0=559295c7cbd0 a1=338ac a2=7f56e6a46bc5 a3=5 items=110 ppid=1013 pid=1040 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="(udev-worker)" exe="/usr/bin/udevadm" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:35:58.090000 audit: CWD cwd="/" Jul 10 00:35:58.090000 audit: PATH item=0 name=(null) inode=44 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:35:58.090000 audit: PATH item=1 name=(null) inode=15479 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:35:58.090000 audit: PATH item=2 name=(null) inode=15479 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:35:58.090000 audit: PATH item=3 name=(null) inode=15480 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:35:58.090000 audit: PATH item=4 name=(null) inode=15479 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:35:58.090000 audit: PATH item=5 name=(null) inode=15481 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:35:58.090000 audit: PATH item=6 name=(null) inode=15479 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:35:58.090000 audit: PATH item=7 name=(null) inode=15482 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:35:58.090000 audit: PATH item=8 name=(null) inode=15482 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:35:58.090000 audit: PATH item=9 name=(null) inode=15483 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:35:58.090000 audit: PATH item=10 name=(null) inode=15482 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:35:58.090000 audit: PATH item=11 name=(null) inode=15484 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:35:58.090000 audit: PATH item=12 name=(null) inode=15482 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:35:58.090000 audit: PATH item=13 name=(null) inode=15485 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:35:58.090000 audit: PATH item=14 name=(null) inode=15482 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:35:58.090000 audit: PATH item=15 name=(null) inode=15486 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:35:58.090000 audit: PATH item=16 name=(null) inode=15482 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:35:58.090000 audit: PATH item=17 name=(null) inode=15487 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:35:58.090000 audit: PATH item=18 name=(null) inode=15479 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:35:58.090000 audit: PATH item=19 name=(null) inode=15488 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:35:58.090000 audit: PATH item=20 name=(null) inode=15488 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:35:58.090000 audit: PATH item=21 name=(null) inode=15489 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:35:58.090000 audit: PATH item=22 name=(null) inode=15488 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:35:58.090000 audit: PATH item=23 name=(null) inode=15490 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:35:58.090000 audit: PATH item=24 name=(null) inode=15488 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:35:58.090000 audit: PATH item=25 name=(null) inode=15491 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:35:58.090000 audit: PATH item=26 name=(null) inode=15488 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:35:58.090000 audit: PATH item=27 name=(null) inode=15492 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:35:58.090000 audit: PATH item=28 name=(null) inode=15488 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:35:58.090000 audit: PATH item=29 name=(null) inode=15493 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:35:58.090000 audit: PATH item=30 name=(null) inode=15479 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:35:58.090000 audit: PATH item=31 name=(null) inode=15494 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:35:58.090000 audit: PATH item=32 name=(null) inode=15494 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:35:58.090000 audit: PATH item=33 name=(null) inode=15495 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:35:58.090000 audit: PATH item=34 name=(null) inode=15494 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:35:58.090000 audit: PATH item=35 name=(null) inode=15496 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:35:58.090000 audit: PATH item=36 name=(null) inode=15494 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:35:58.090000 audit: PATH item=37 name=(null) inode=15497 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:35:58.090000 audit: PATH item=38 name=(null) inode=15494 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:35:58.090000 audit: PATH item=39 name=(null) inode=15498 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:35:58.090000 audit: PATH item=40 name=(null) inode=15494 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:35:58.090000 audit: PATH item=41 name=(null) inode=15499 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:35:58.090000 audit: PATH item=42 name=(null) inode=15479 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:35:58.090000 audit: PATH item=43 name=(null) inode=15500 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:35:58.090000 audit: PATH item=44 name=(null) inode=15500 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:35:58.090000 audit: PATH item=45 name=(null) inode=15501 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:35:58.090000 audit: PATH item=46 name=(null) inode=15500 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:35:58.090000 audit: PATH item=47 name=(null) inode=15502 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:35:58.090000 audit: PATH item=48 name=(null) inode=15500 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:35:58.090000 audit: PATH item=49 name=(null) inode=15503 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:35:58.090000 audit: PATH item=50 name=(null) inode=15500 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:35:58.090000 audit: PATH item=51 name=(null) inode=15504 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:35:58.090000 audit: PATH item=52 name=(null) inode=15500 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:35:58.090000 audit: PATH item=53 name=(null) inode=15505 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:35:58.090000 audit: PATH item=54 name=(null) inode=44 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:35:58.090000 audit: PATH item=55 name=(null) inode=15506 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:35:58.090000 audit: PATH item=56 name=(null) inode=15506 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:35:58.090000 audit: PATH item=57 name=(null) inode=15507 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:35:58.090000 audit: PATH item=58 name=(null) inode=15506 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:35:58.090000 audit: PATH item=59 name=(null) inode=15508 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:35:58.090000 audit: PATH item=60 name=(null) inode=15506 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:35:58.090000 audit: PATH item=61 name=(null) inode=15509 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:35:58.090000 audit: PATH item=62 name=(null) inode=15509 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:35:58.090000 audit: PATH item=63 name=(null) inode=15510 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:35:58.090000 audit: PATH item=64 name=(null) inode=15509 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:35:58.090000 audit: PATH item=65 name=(null) inode=15511 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:35:58.090000 audit: PATH item=66 name=(null) inode=15509 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:35:58.090000 audit: PATH item=67 name=(null) inode=15512 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:35:58.090000 audit: PATH item=68 name=(null) inode=15509 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:35:58.090000 audit: PATH item=69 name=(null) inode=15513 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:35:58.090000 audit: PATH item=70 name=(null) inode=15509 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:35:58.090000 audit: PATH item=71 name=(null) inode=15514 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:35:58.090000 audit: PATH item=72 name=(null) inode=15506 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:35:58.090000 audit: PATH item=73 name=(null) inode=15515 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:35:58.090000 audit: PATH item=74 name=(null) inode=15515 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:35:58.090000 audit: PATH item=75 name=(null) inode=15516 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:35:58.090000 audit: PATH item=76 name=(null) inode=15515 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:35:58.090000 audit: PATH item=77 name=(null) inode=15517 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:35:58.090000 audit: PATH item=78 name=(null) inode=15515 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:35:58.090000 audit: PATH item=79 name=(null) inode=15518 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:35:58.090000 audit: PATH item=80 name=(null) inode=15515 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:35:58.090000 audit: PATH item=81 name=(null) inode=15519 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:35:58.090000 audit: PATH item=82 name=(null) inode=15515 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:35:58.090000 audit: PATH item=83 name=(null) inode=15520 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:35:58.090000 audit: PATH item=84 name=(null) inode=15506 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:35:58.090000 audit: PATH item=85 name=(null) inode=15521 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:35:58.090000 audit: PATH item=86 name=(null) inode=15521 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:35:58.090000 audit: PATH item=87 name=(null) inode=15522 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:35:58.090000 audit: PATH item=88 name=(null) inode=15521 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:35:58.090000 audit: PATH item=89 name=(null) inode=15523 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:35:58.090000 audit: PATH item=90 name=(null) inode=15521 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:35:58.090000 audit: PATH item=91 name=(null) inode=15524 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:35:58.090000 audit: PATH item=92 name=(null) inode=15521 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:35:58.090000 audit: PATH item=93 name=(null) inode=15525 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:35:58.090000 audit: PATH item=94 name=(null) inode=15521 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:35:58.090000 audit: PATH item=95 name=(null) inode=15526 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:35:58.090000 audit: PATH item=96 name=(null) inode=15506 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:35:58.090000 audit: PATH item=97 name=(null) inode=15527 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:35:58.090000 audit: PATH item=98 name=(null) inode=15527 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:35:58.090000 audit: PATH item=99 name=(null) inode=15528 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:35:58.090000 audit: PATH item=100 name=(null) inode=15527 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:35:58.090000 audit: PATH item=101 name=(null) inode=15529 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:35:58.090000 audit: PATH item=102 name=(null) inode=15527 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:35:58.090000 audit: PATH item=103 name=(null) inode=15530 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:35:58.090000 audit: PATH item=104 name=(null) inode=15527 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:35:58.090000 audit: PATH item=105 name=(null) inode=15531 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:35:58.090000 audit: PATH item=106 name=(null) inode=15527 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:35:58.090000 audit: PATH item=107 name=(null) inode=15532 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:35:58.090000 audit: PATH item=108 name=(null) inode=1 dev=00:07 mode=040700 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:debugfs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:35:58.090000 audit: PATH item=109 name=(null) inode=15533 dev=00:07 mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:debugfs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:35:58.090000 audit: PROCTITLE proctitle="(udev-worker)" Jul 10 00:35:58.102820 systemd-networkd[1023]: eth0: DHCPv4 address 10.0.0.36/16, gateway 10.0.0.1 acquired from 10.0.0.1 Jul 10 00:35:58.118693 kernel: i801_smbus 0000:00:1f.3: SMBus using PCI interrupt Jul 10 00:35:58.118896 kernel: i2c i2c-0: 1/1 memory slots populated (from DMI) Jul 10 00:35:58.119000 kernel: i2c i2c-0: Memory type 0x07 not supported yet, not instantiating SPD Jul 10 00:35:58.126670 kernel: input: ImExPS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input3 Jul 10 00:35:58.133672 kernel: mousedev: PS/2 mouse device common for all mice Jul 10 00:35:58.186754 kernel: kvm: Nested Virtualization enabled Jul 10 00:35:58.186844 kernel: SVM: kvm: Nested Paging enabled Jul 10 00:35:58.186858 kernel: SVM: Virtual VMLOAD VMSAVE supported Jul 10 00:35:58.186888 kernel: SVM: Virtual GIF supported Jul 10 00:35:58.201672 kernel: EDAC MC: Ver: 3.0.0 Jul 10 00:35:58.228070 systemd[1]: Finished systemd-udev-settle.service. Jul 10 00:35:58.228000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-settle comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:35:58.230260 systemd[1]: Starting lvm2-activation-early.service... Jul 10 00:35:58.237191 lvm[1048]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Jul 10 00:35:58.265434 systemd[1]: Finished lvm2-activation-early.service. Jul 10 00:35:58.265000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation-early comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:35:58.266525 systemd[1]: Reached target cryptsetup.target. Jul 10 00:35:58.268544 systemd[1]: Starting lvm2-activation.service... Jul 10 00:35:58.271659 lvm[1049]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Jul 10 00:35:58.295957 systemd[1]: Finished lvm2-activation.service. Jul 10 00:35:58.296000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:35:58.296931 systemd[1]: Reached target local-fs-pre.target. Jul 10 00:35:58.297746 systemd[1]: var-lib-machines.mount was skipped because of an unmet condition check (ConditionPathExists=/var/lib/machines.raw). Jul 10 00:35:58.297763 systemd[1]: Reached target local-fs.target. Jul 10 00:35:58.298518 systemd[1]: Reached target machines.target. Jul 10 00:35:58.300308 systemd[1]: Starting ldconfig.service... Jul 10 00:35:58.301222 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 10 00:35:58.301255 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 10 00:35:58.301938 systemd[1]: Starting systemd-boot-update.service... Jul 10 00:35:58.303481 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-OEM.service... Jul 10 00:35:58.305438 systemd[1]: Starting systemd-machine-id-commit.service... Jul 10 00:35:58.307265 systemd[1]: Starting systemd-sysext.service... Jul 10 00:35:58.308260 systemd[1]: boot.automount: Got automount request for /boot, triggered by 1051 (bootctl) Jul 10 00:35:58.309049 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service... Jul 10 00:35:58.311816 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-OEM.service. Jul 10 00:35:58.312000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-OEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:35:58.316482 systemd[1]: Unmounting usr-share-oem.mount... Jul 10 00:35:58.321164 systemd[1]: usr-share-oem.mount: Deactivated successfully. Jul 10 00:35:58.321289 systemd[1]: Unmounted usr-share-oem.mount. Jul 10 00:35:58.329669 kernel: loop0: detected capacity change from 0 to 224512 Jul 10 00:35:58.342445 systemd-fsck[1059]: fsck.fat 4.2 (2021-01-31) Jul 10 00:35:58.342445 systemd-fsck[1059]: /dev/vda1: 790 files, 120731/258078 clusters Jul 10 00:35:58.344722 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service. Jul 10 00:35:58.345000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:35:58.347529 systemd[1]: Mounting boot.mount... Jul 10 00:35:58.364281 systemd[1]: Mounted boot.mount. Jul 10 00:35:58.741616 systemd[1]: Finished systemd-boot-update.service. Jul 10 00:35:58.742000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-boot-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:35:58.746778 kernel: kauditd_printk_skb: 230 callbacks suppressed Jul 10 00:35:58.746837 kernel: audit: type=1130 audit(1752107758.742:154): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-boot-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:35:58.794689 kernel: squashfs: version 4.0 (2009/01/31) Phillip Lougher Jul 10 00:35:58.806680 kernel: loop1: detected capacity change from 0 to 224512 Jul 10 00:35:58.811621 (sd-sysext)[1064]: Using extensions 'kubernetes'. Jul 10 00:35:58.812035 (sd-sysext)[1064]: Merged extensions into '/usr'. Jul 10 00:35:58.829608 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 10 00:35:58.831237 systemd[1]: Mounting usr-share-oem.mount... Jul 10 00:35:58.832405 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Jul 10 00:35:58.834463 systemd[1]: Starting modprobe@dm_mod.service... Jul 10 00:35:58.836677 systemd[1]: Starting modprobe@efi_pstore.service... Jul 10 00:35:58.838856 systemd[1]: Starting modprobe@loop.service... Jul 10 00:35:58.841011 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 10 00:35:58.841144 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 10 00:35:58.841279 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 10 00:35:58.844379 systemd[1]: Mounted usr-share-oem.mount. Jul 10 00:35:58.845563 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Jul 10 00:35:58.845727 systemd[1]: Finished modprobe@dm_mod.service. Jul 10 00:35:58.846000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:35:58.847091 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Jul 10 00:35:58.847211 systemd[1]: Finished modprobe@efi_pstore.service. Jul 10 00:35:58.851675 kernel: audit: type=1130 audit(1752107758.846:155): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:35:58.851737 kernel: audit: type=1131 audit(1752107758.846:156): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:35:58.846000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:35:58.853000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:35:58.854799 systemd[1]: modprobe@loop.service: Deactivated successfully. Jul 10 00:35:58.854891 systemd[1]: Finished modprobe@loop.service. Jul 10 00:35:58.856273 ldconfig[1050]: /sbin/ldconfig: /lib/ld.so.conf is not an ELF file - it has the wrong magic bytes at the start. Jul 10 00:35:58.853000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:35:58.861208 kernel: audit: type=1130 audit(1752107758.853:157): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:35:58.861259 kernel: audit: type=1131 audit(1752107758.853:158): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:35:58.861000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:35:58.862129 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Jul 10 00:35:58.862222 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Jul 10 00:35:58.865090 kernel: audit: type=1130 audit(1752107758.861:159): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:35:58.865125 kernel: audit: type=1131 audit(1752107758.861:160): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:35:58.861000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:35:58.865375 systemd[1]: Finished systemd-sysext.service. Jul 10 00:35:58.868000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysext comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:35:58.869783 systemd[1]: Starting ensure-sysext.service... Jul 10 00:35:58.873066 kernel: audit: type=1130 audit(1752107758.868:161): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysext comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:35:58.873934 systemd[1]: Starting systemd-tmpfiles-setup.service... Jul 10 00:35:58.878450 systemd[1]: Reloading. Jul 10 00:35:58.888807 systemd-tmpfiles[1071]: /usr/lib/tmpfiles.d/legacy.conf:13: Duplicate line for path "/run/lock", ignoring. Jul 10 00:35:58.891133 systemd-tmpfiles[1071]: /usr/lib/tmpfiles.d/provision.conf:20: Duplicate line for path "/root", ignoring. Jul 10 00:35:58.895377 systemd-tmpfiles[1071]: /usr/lib/tmpfiles.d/systemd.conf:29: Duplicate line for path "/var/lib/systemd", ignoring. Jul 10 00:35:58.985848 /usr/lib/systemd/system-generators/torcx-generator[1090]: time="2025-07-10T00:35:58Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.7 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.7 /var/lib/torcx/store]" Jul 10 00:35:58.985882 /usr/lib/systemd/system-generators/torcx-generator[1090]: time="2025-07-10T00:35:58Z" level=info msg="torcx already run" Jul 10 00:35:59.024904 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Jul 10 00:35:59.024921 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Jul 10 00:35:59.041812 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Jul 10 00:35:59.092000 audit: BPF prog-id=27 op=LOAD Jul 10 00:35:59.094681 kernel: audit: type=1334 audit(1752107759.092:162): prog-id=27 op=LOAD Jul 10 00:35:59.094744 kernel: audit: type=1334 audit(1752107759.093:163): prog-id=28 op=LOAD Jul 10 00:35:59.093000 audit: BPF prog-id=28 op=LOAD Jul 10 00:35:59.094000 audit: BPF prog-id=21 op=UNLOAD Jul 10 00:35:59.094000 audit: BPF prog-id=22 op=UNLOAD Jul 10 00:35:59.095000 audit: BPF prog-id=29 op=LOAD Jul 10 00:35:59.095000 audit: BPF prog-id=23 op=UNLOAD Jul 10 00:35:59.096000 audit: BPF prog-id=30 op=LOAD Jul 10 00:35:59.096000 audit: BPF prog-id=18 op=UNLOAD Jul 10 00:35:59.096000 audit: BPF prog-id=31 op=LOAD Jul 10 00:35:59.096000 audit: BPF prog-id=32 op=LOAD Jul 10 00:35:59.096000 audit: BPF prog-id=19 op=UNLOAD Jul 10 00:35:59.096000 audit: BPF prog-id=20 op=UNLOAD Jul 10 00:35:59.097000 audit: BPF prog-id=33 op=LOAD Jul 10 00:35:59.097000 audit: BPF prog-id=24 op=UNLOAD Jul 10 00:35:59.097000 audit: BPF prog-id=34 op=LOAD Jul 10 00:35:59.097000 audit: BPF prog-id=35 op=LOAD Jul 10 00:35:59.097000 audit: BPF prog-id=25 op=UNLOAD Jul 10 00:35:59.097000 audit: BPF prog-id=26 op=UNLOAD Jul 10 00:35:59.105836 systemd[1]: etc-machine\x2did.mount: Deactivated successfully. Jul 10 00:35:59.106998 systemd[1]: Finished ldconfig.service. Jul 10 00:35:59.107000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=ldconfig comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:35:59.108186 systemd[1]: Finished systemd-machine-id-commit.service. Jul 10 00:35:59.108000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-machine-id-commit comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:35:59.110022 systemd[1]: Finished systemd-tmpfiles-setup.service. Jul 10 00:35:59.110000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:35:59.115159 systemd[1]: Starting audit-rules.service... Jul 10 00:35:59.117153 systemd[1]: Starting clean-ca-certificates.service... Jul 10 00:35:59.118968 systemd[1]: Starting systemd-journal-catalog-update.service... Jul 10 00:35:59.120000 audit: BPF prog-id=36 op=LOAD Jul 10 00:35:59.121828 systemd[1]: Starting systemd-resolved.service... Jul 10 00:35:59.122000 audit: BPF prog-id=37 op=LOAD Jul 10 00:35:59.124124 systemd[1]: Starting systemd-timesyncd.service... Jul 10 00:35:59.125776 systemd[1]: Starting systemd-update-utmp.service... Jul 10 00:35:59.127331 systemd[1]: Finished clean-ca-certificates.service. Jul 10 00:35:59.127000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=clean-ca-certificates comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:35:59.131000 audit[1145]: SYSTEM_BOOT pid=1145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' Jul 10 00:35:59.130313 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Jul 10 00:35:59.135303 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 10 00:35:59.135611 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Jul 10 00:35:59.136794 systemd[1]: Starting modprobe@dm_mod.service... Jul 10 00:35:59.138984 systemd[1]: Starting modprobe@efi_pstore.service... Jul 10 00:35:59.143866 systemd[1]: Starting modprobe@loop.service... Jul 10 00:35:59.144710 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 10 00:35:59.144864 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 10 00:35:59.145003 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Jul 10 00:35:59.145118 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 10 00:35:59.147036 systemd[1]: Finished systemd-journal-catalog-update.service. Jul 10 00:35:59.147000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-catalog-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:35:59.148631 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Jul 10 00:35:59.148756 systemd[1]: Finished modprobe@dm_mod.service. Jul 10 00:35:59.149000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:35:59.149000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:35:59.149987 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Jul 10 00:35:59.150153 systemd[1]: Finished modprobe@efi_pstore.service. Jul 10 00:35:59.150000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:35:59.150000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:35:59.152186 systemd[1]: modprobe@loop.service: Deactivated successfully. Jul 10 00:35:59.152345 systemd[1]: Finished modprobe@loop.service. Jul 10 00:35:59.152000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:35:59.152000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:35:59.153691 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Jul 10 00:35:59.153828 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Jul 10 00:35:59.156292 systemd[1]: Starting systemd-update-done.service... Jul 10 00:35:59.160028 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 10 00:35:59.160244 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Jul 10 00:35:59.161887 systemd[1]: Starting modprobe@dm_mod.service... Jul 10 00:35:59.164535 systemd[1]: Starting modprobe@efi_pstore.service... Jul 10 00:35:59.166957 systemd[1]: Starting modprobe@loop.service... Jul 10 00:35:59.167738 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 10 00:35:59.167832 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 10 00:35:59.167911 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Jul 10 00:35:59.167974 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 10 00:35:59.168932 augenrules[1158]: No rules Jul 10 00:35:59.168958 systemd[1]: Finished systemd-update-utmp.service. Jul 10 00:35:59.168000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=add_rule key=(null) list=5 res=1 Jul 10 00:35:59.168000 audit[1158]: SYSCALL arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7fffb54eba90 a2=420 a3=0 items=0 ppid=1133 pid=1158 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:35:59.168000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 Jul 10 00:35:59.170216 systemd[1]: Finished audit-rules.service. Jul 10 00:35:59.171304 systemd[1]: Finished systemd-update-done.service. Jul 10 00:35:59.172461 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Jul 10 00:35:59.172578 systemd[1]: Finished modprobe@dm_mod.service. Jul 10 00:35:59.173883 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Jul 10 00:35:59.173983 systemd[1]: Finished modprobe@efi_pstore.service. Jul 10 00:35:59.175208 systemd[1]: modprobe@loop.service: Deactivated successfully. Jul 10 00:35:59.175330 systemd[1]: Finished modprobe@loop.service. Jul 10 00:35:59.176767 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Jul 10 00:35:59.176919 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Jul 10 00:35:59.179107 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 10 00:35:59.179301 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Jul 10 00:35:59.180441 systemd[1]: Starting modprobe@dm_mod.service... Jul 10 00:35:59.182388 systemd[1]: Starting modprobe@drm.service... Jul 10 00:35:59.184096 systemd[1]: Starting modprobe@efi_pstore.service... Jul 10 00:35:59.185946 systemd[1]: Starting modprobe@loop.service... Jul 10 00:35:59.186967 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 10 00:35:59.187073 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 10 00:35:59.188309 systemd[1]: Starting systemd-networkd-wait-online.service... Jul 10 00:35:59.189407 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Jul 10 00:35:59.189503 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 10 00:35:59.189778 systemd-resolved[1142]: Positive Trust Anchors: Jul 10 00:35:59.189801 systemd-resolved[1142]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Jul 10 00:35:59.189834 systemd-resolved[1142]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Jul 10 00:35:59.190718 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Jul 10 00:35:59.190875 systemd[1]: Finished modprobe@dm_mod.service. Jul 10 00:35:59.192183 systemd[1]: modprobe@drm.service: Deactivated successfully. Jul 10 00:35:59.192279 systemd[1]: Finished modprobe@drm.service. Jul 10 00:35:59.193538 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Jul 10 00:35:59.193639 systemd[1]: Finished modprobe@efi_pstore.service. Jul 10 00:35:59.195091 systemd[1]: modprobe@loop.service: Deactivated successfully. Jul 10 00:35:59.195207 systemd[1]: Finished modprobe@loop.service. Jul 10 00:35:59.196685 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Jul 10 00:35:59.196823 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Jul 10 00:35:59.198294 systemd[1]: Finished ensure-sysext.service. Jul 10 00:35:59.199446 systemd-resolved[1142]: Defaulting to hostname 'linux'. Jul 10 00:35:59.201025 systemd[1]: Started systemd-resolved.service. Jul 10 00:35:59.201966 systemd[1]: Reached target network.target. Jul 10 00:35:59.202814 systemd[1]: Reached target nss-lookup.target. Jul 10 00:35:59.213623 systemd[1]: Started systemd-timesyncd.service. Jul 10 00:35:59.214712 systemd[1]: Reached target sysinit.target. Jul 10 00:35:59.215719 systemd[1]: Started motdgen.path. Jul 10 00:35:59.216598 systemd[1]: Started user-cloudinit@var-lib-flatcar\x2dinstall-user_data.path. Jul 10 00:35:59.218100 systemd[1]: Started systemd-tmpfiles-clean.timer. Jul 10 00:35:59.219115 systemd[1]: update-engine-stub.timer was skipped because of an unmet condition check (ConditionPathExists=/usr/.noupdate). Jul 10 00:35:59.219141 systemd-timesyncd[1144]: Contacted time server 10.0.0.1:123 (10.0.0.1). Jul 10 00:35:59.219147 systemd[1]: Reached target paths.target. Jul 10 00:35:59.220119 systemd[1]: Reached target time-set.target. Jul 10 00:35:59.220125 systemd-timesyncd[1144]: Initial clock synchronization to Thu 2025-07-10 00:35:59.043259 UTC. Jul 10 00:35:59.221233 systemd[1]: Started logrotate.timer. Jul 10 00:35:59.222187 systemd[1]: Started mdadm.timer. Jul 10 00:35:59.222958 systemd[1]: Reached target timers.target. Jul 10 00:35:59.224107 systemd[1]: Listening on dbus.socket. Jul 10 00:35:59.226013 systemd[1]: Starting docker.socket... Jul 10 00:35:59.229103 systemd[1]: Listening on sshd.socket. Jul 10 00:35:59.229940 systemd[1]: systemd-pcrphase-sysinit.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 10 00:35:59.230306 systemd[1]: Listening on docker.socket. Jul 10 00:35:59.231276 systemd[1]: Reached target sockets.target. Jul 10 00:35:59.232108 systemd[1]: Reached target basic.target. Jul 10 00:35:59.232924 systemd[1]: addon-config@usr-share-oem.service was skipped because no trigger condition checks were met. Jul 10 00:35:59.232946 systemd[1]: addon-run@usr-share-oem.service was skipped because no trigger condition checks were met. Jul 10 00:35:59.233783 systemd-networkd[1023]: eth0: Gained IPv6LL Jul 10 00:35:59.233900 systemd[1]: Starting containerd.service... Jul 10 00:35:59.235615 systemd[1]: Starting dbus.service... Jul 10 00:35:59.237170 systemd[1]: Starting enable-oem-cloudinit.service... Jul 10 00:35:59.240191 systemd[1]: Starting extend-filesystems.service... Jul 10 00:35:59.242986 jq[1176]: false Jul 10 00:35:59.241143 systemd[1]: flatcar-setup-environment.service was skipped because of an unmet condition check (ConditionPathExists=/usr/share/oem/bin/flatcar-setup-environment). Jul 10 00:35:59.243174 systemd[1]: Starting motdgen.service... Jul 10 00:35:59.245645 systemd[1]: Starting prepare-helm.service... Jul 10 00:35:59.248453 systemd[1]: Starting ssh-key-proc-cmdline.service... Jul 10 00:35:59.250954 systemd[1]: Starting sshd-keygen.service... Jul 10 00:35:59.272423 dbus-daemon[1175]: [system] SELinux support is enabled Jul 10 00:35:59.276022 extend-filesystems[1177]: Found loop1 Jul 10 00:35:59.276022 extend-filesystems[1177]: Found sr0 Jul 10 00:35:59.278842 extend-filesystems[1177]: Found vda Jul 10 00:35:59.278842 extend-filesystems[1177]: Found vda1 Jul 10 00:35:59.278842 extend-filesystems[1177]: Found vda2 Jul 10 00:35:59.278842 extend-filesystems[1177]: Found vda3 Jul 10 00:35:59.278842 extend-filesystems[1177]: Found usr Jul 10 00:35:59.278842 extend-filesystems[1177]: Found vda4 Jul 10 00:35:59.278842 extend-filesystems[1177]: Found vda6 Jul 10 00:35:59.278842 extend-filesystems[1177]: Found vda7 Jul 10 00:35:59.278842 extend-filesystems[1177]: Found vda9 Jul 10 00:35:59.278842 extend-filesystems[1177]: Checking size of /dev/vda9 Jul 10 00:35:59.303267 kernel: EXT4-fs (vda9): resizing filesystem from 553472 to 1864699 blocks Jul 10 00:35:59.279692 systemd[1]: Starting systemd-logind.service... Jul 10 00:35:59.303451 extend-filesystems[1177]: Resized partition /dev/vda9 Jul 10 00:35:59.280549 systemd[1]: systemd-pcrphase.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 10 00:35:59.306120 extend-filesystems[1200]: resize2fs 1.46.5 (30-Dec-2021) Jul 10 00:35:59.280611 systemd[1]: tcsd.service was skipped because of an unmet condition check (ConditionPathExists=/dev/tpm0). Jul 10 00:35:59.281177 systemd[1]: cgroup compatibility translation between legacy and unified hierarchy settings activated. See cgroup-compat debug messages for details. Jul 10 00:35:59.315181 jq[1197]: true Jul 10 00:35:59.281947 systemd[1]: Starting update-engine.service... Jul 10 00:35:59.283537 systemd[1]: Starting update-ssh-keys-after-ignition.service... Jul 10 00:35:59.285439 systemd[1]: Started dbus.service. Jul 10 00:35:59.288768 systemd[1]: Finished systemd-networkd-wait-online.service. Jul 10 00:35:59.315674 jq[1204]: true Jul 10 00:35:59.299510 systemd[1]: enable-oem-cloudinit.service: Skipped due to 'exec-condition'. Jul 10 00:35:59.299751 systemd[1]: Condition check resulted in enable-oem-cloudinit.service being skipped. Jul 10 00:35:59.300096 systemd[1]: motdgen.service: Deactivated successfully. Jul 10 00:35:59.300244 systemd[1]: Finished motdgen.service. Jul 10 00:35:59.302623 systemd[1]: ssh-key-proc-cmdline.service: Deactivated successfully. Jul 10 00:35:59.302841 systemd[1]: Finished ssh-key-proc-cmdline.service. Jul 10 00:35:59.307638 systemd[1]: Reached target network-online.target. Jul 10 00:35:59.317242 systemd[1]: Starting kubelet.service... Jul 10 00:35:59.318088 systemd[1]: system-cloudinit@usr-share-oem-cloud\x2dconfig.yml.service was skipped because of an unmet condition check (ConditionFileNotEmpty=/usr/share/oem/cloud-config.yml). Jul 10 00:35:59.318155 systemd[1]: Reached target system-config.target. Jul 10 00:35:59.319140 systemd[1]: user-cloudinit-proc-cmdline.service was skipped because of an unmet condition check (ConditionKernelCommandLine=cloud-config-url). Jul 10 00:35:59.319159 systemd[1]: Reached target user-config.target. Jul 10 00:35:59.326319 tar[1203]: linux-amd64/LICENSE Jul 10 00:35:59.326537 tar[1203]: linux-amd64/helm Jul 10 00:35:59.343782 kernel: EXT4-fs (vda9): resized filesystem to 1864699 Jul 10 00:35:59.412036 extend-filesystems[1200]: Filesystem at /dev/vda9 is mounted on /; on-line resizing required Jul 10 00:35:59.412036 extend-filesystems[1200]: old_desc_blocks = 1, new_desc_blocks = 1 Jul 10 00:35:59.412036 extend-filesystems[1200]: The filesystem on /dev/vda9 is now 1864699 (4k) blocks long. Jul 10 00:35:59.420969 extend-filesystems[1177]: Resized filesystem in /dev/vda9 Jul 10 00:35:59.414536 systemd[1]: extend-filesystems.service: Deactivated successfully. Jul 10 00:35:59.414710 systemd[1]: Finished extend-filesystems.service. Jul 10 00:35:59.426699 update_engine[1196]: I0710 00:35:59.426268 1196 main.cc:92] Flatcar Update Engine starting Jul 10 00:35:59.429250 systemd[1]: Started update-engine.service. Jul 10 00:35:59.430131 update_engine[1196]: I0710 00:35:59.429957 1196 update_check_scheduler.cc:74] Next update check in 8m44s Jul 10 00:35:59.430963 systemd-logind[1194]: Watching system buttons on /dev/input/event1 (Power Button) Jul 10 00:35:59.430980 systemd-logind[1194]: Watching system buttons on /dev/input/event0 (AT Translated Set 2 keyboard) Jul 10 00:35:59.431880 systemd[1]: Started locksmithd.service. Jul 10 00:35:59.433784 systemd-logind[1194]: New seat seat0. Jul 10 00:35:59.442300 systemd[1]: Started systemd-logind.service. Jul 10 00:35:59.444007 bash[1230]: Updated "/home/core/.ssh/authorized_keys" Jul 10 00:35:59.444250 systemd[1]: Finished update-ssh-keys-after-ignition.service. Jul 10 00:35:59.460915 env[1205]: time="2025-07-10T00:35:59.460853750Z" level=info msg="starting containerd" revision=92b3a9d6f1b3bcc6dc74875cfdea653fe39f09c2 version=1.6.16 Jul 10 00:35:59.510186 env[1205]: time="2025-07-10T00:35:59.510094344Z" level=info msg="loading plugin \"io.containerd.content.v1.content\"..." type=io.containerd.content.v1 Jul 10 00:35:59.511393 env[1205]: time="2025-07-10T00:35:59.510970988Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.aufs\"..." type=io.containerd.snapshotter.v1 Jul 10 00:35:59.514427 env[1205]: time="2025-07-10T00:35:59.514381223Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.aufs\"..." error="aufs is not supported (modprobe aufs failed: exit status 1 \"modprobe: FATAL: Module aufs not found in directory /lib/modules/5.15.186-flatcar\\n\"): skip plugin" type=io.containerd.snapshotter.v1 Jul 10 00:35:59.514427 env[1205]: time="2025-07-10T00:35:59.514421729Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." type=io.containerd.snapshotter.v1 Jul 10 00:35:59.514646 env[1205]: time="2025-07-10T00:35:59.514617196Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.btrfs (ext4) must be a btrfs filesystem to be used with the btrfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Jul 10 00:35:59.514646 env[1205]: time="2025-07-10T00:35:59.514640490Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.devmapper\"..." type=io.containerd.snapshotter.v1 Jul 10 00:35:59.514729 env[1205]: time="2025-07-10T00:35:59.514663914Z" level=warning msg="failed to load plugin io.containerd.snapshotter.v1.devmapper" error="devmapper not configured" Jul 10 00:35:59.514729 env[1205]: time="2025-07-10T00:35:59.514674033Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.native\"..." type=io.containerd.snapshotter.v1 Jul 10 00:35:59.514769 env[1205]: time="2025-07-10T00:35:59.514739295Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.overlayfs\"..." type=io.containerd.snapshotter.v1 Jul 10 00:35:59.515000 env[1205]: time="2025-07-10T00:35:59.514974125Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.zfs\"..." type=io.containerd.snapshotter.v1 Jul 10 00:35:59.515135 env[1205]: time="2025-07-10T00:35:59.515109349Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.zfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.zfs must be a zfs filesystem to be used with the zfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Jul 10 00:35:59.515135 env[1205]: time="2025-07-10T00:35:59.515128335Z" level=info msg="loading plugin \"io.containerd.metadata.v1.bolt\"..." type=io.containerd.metadata.v1 Jul 10 00:35:59.515201 env[1205]: time="2025-07-10T00:35:59.515170413Z" level=warning msg="could not use snapshotter devmapper in metadata plugin" error="devmapper not configured" Jul 10 00:35:59.515201 env[1205]: time="2025-07-10T00:35:59.515184450Z" level=info msg="metadata content store policy set" policy=shared Jul 10 00:35:59.520539 env[1205]: time="2025-07-10T00:35:59.520500409Z" level=info msg="loading plugin \"io.containerd.differ.v1.walking\"..." type=io.containerd.differ.v1 Jul 10 00:35:59.520584 env[1205]: time="2025-07-10T00:35:59.520543680Z" level=info msg="loading plugin \"io.containerd.event.v1.exchange\"..." type=io.containerd.event.v1 Jul 10 00:35:59.520584 env[1205]: time="2025-07-10T00:35:59.520556524Z" level=info msg="loading plugin \"io.containerd.gc.v1.scheduler\"..." type=io.containerd.gc.v1 Jul 10 00:35:59.520625 env[1205]: time="2025-07-10T00:35:59.520594766Z" level=info msg="loading plugin \"io.containerd.service.v1.introspection-service\"..." type=io.containerd.service.v1 Jul 10 00:35:59.520625 env[1205]: time="2025-07-10T00:35:59.520608301Z" level=info msg="loading plugin \"io.containerd.service.v1.containers-service\"..." type=io.containerd.service.v1 Jul 10 00:35:59.520625 env[1205]: time="2025-07-10T00:35:59.520620244Z" level=info msg="loading plugin \"io.containerd.service.v1.content-service\"..." type=io.containerd.service.v1 Jul 10 00:35:59.520710 env[1205]: time="2025-07-10T00:35:59.520630764Z" level=info msg="loading plugin \"io.containerd.service.v1.diff-service\"..." type=io.containerd.service.v1 Jul 10 00:35:59.520710 env[1205]: time="2025-07-10T00:35:59.520647074Z" level=info msg="loading plugin \"io.containerd.service.v1.images-service\"..." type=io.containerd.service.v1 Jul 10 00:35:59.520710 env[1205]: time="2025-07-10T00:35:59.520674476Z" level=info msg="loading plugin \"io.containerd.service.v1.leases-service\"..." type=io.containerd.service.v1 Jul 10 00:35:59.520710 env[1205]: time="2025-07-10T00:35:59.520689434Z" level=info msg="loading plugin \"io.containerd.service.v1.namespaces-service\"..." type=io.containerd.service.v1 Jul 10 00:35:59.520710 env[1205]: time="2025-07-10T00:35:59.520700174Z" level=info msg="loading plugin \"io.containerd.service.v1.snapshots-service\"..." type=io.containerd.service.v1 Jul 10 00:35:59.520710 env[1205]: time="2025-07-10T00:35:59.520710463Z" level=info msg="loading plugin \"io.containerd.runtime.v1.linux\"..." type=io.containerd.runtime.v1 Jul 10 00:35:59.520822 env[1205]: time="2025-07-10T00:35:59.520791816Z" level=info msg="loading plugin \"io.containerd.runtime.v2.task\"..." type=io.containerd.runtime.v2 Jul 10 00:35:59.520887 env[1205]: time="2025-07-10T00:35:59.520861997Z" level=info msg="loading plugin \"io.containerd.monitor.v1.cgroups\"..." type=io.containerd.monitor.v1 Jul 10 00:35:59.521217 env[1205]: time="2025-07-10T00:35:59.521194250Z" level=info msg="loading plugin \"io.containerd.service.v1.tasks-service\"..." type=io.containerd.service.v1 Jul 10 00:35:59.521261 env[1205]: time="2025-07-10T00:35:59.521231610Z" level=info msg="loading plugin \"io.containerd.grpc.v1.introspection\"..." type=io.containerd.grpc.v1 Jul 10 00:35:59.521261 env[1205]: time="2025-07-10T00:35:59.521245537Z" level=info msg="loading plugin \"io.containerd.internal.v1.restart\"..." type=io.containerd.internal.v1 Jul 10 00:35:59.521316 env[1205]: time="2025-07-10T00:35:59.521308585Z" level=info msg="loading plugin \"io.containerd.grpc.v1.containers\"..." type=io.containerd.grpc.v1 Jul 10 00:35:59.521341 env[1205]: time="2025-07-10T00:35:59.521321579Z" level=info msg="loading plugin \"io.containerd.grpc.v1.content\"..." type=io.containerd.grpc.v1 Jul 10 00:35:59.521341 env[1205]: time="2025-07-10T00:35:59.521335475Z" level=info msg="loading plugin \"io.containerd.grpc.v1.diff\"..." type=io.containerd.grpc.v1 Jul 10 00:35:59.521392 env[1205]: time="2025-07-10T00:35:59.521344903Z" level=info msg="loading plugin \"io.containerd.grpc.v1.events\"..." type=io.containerd.grpc.v1 Jul 10 00:35:59.521392 env[1205]: time="2025-07-10T00:35:59.521355583Z" level=info msg="loading plugin \"io.containerd.grpc.v1.healthcheck\"..." type=io.containerd.grpc.v1 Jul 10 00:35:59.521392 env[1205]: time="2025-07-10T00:35:59.521374689Z" level=info msg="loading plugin \"io.containerd.grpc.v1.images\"..." type=io.containerd.grpc.v1 Jul 10 00:35:59.521392 env[1205]: time="2025-07-10T00:35:59.521388264Z" level=info msg="loading plugin \"io.containerd.grpc.v1.leases\"..." type=io.containerd.grpc.v1 Jul 10 00:35:59.521469 env[1205]: time="2025-07-10T00:35:59.521399836Z" level=info msg="loading plugin \"io.containerd.grpc.v1.namespaces\"..." type=io.containerd.grpc.v1 Jul 10 00:35:59.521469 env[1205]: time="2025-07-10T00:35:59.521411117Z" level=info msg="loading plugin \"io.containerd.internal.v1.opt\"..." type=io.containerd.internal.v1 Jul 10 00:35:59.521535 env[1205]: time="2025-07-10T00:35:59.521511986Z" level=info msg="loading plugin \"io.containerd.grpc.v1.snapshots\"..." type=io.containerd.grpc.v1 Jul 10 00:35:59.521535 env[1205]: time="2025-07-10T00:35:59.521531984Z" level=info msg="loading plugin \"io.containerd.grpc.v1.tasks\"..." type=io.containerd.grpc.v1 Jul 10 00:35:59.521609 env[1205]: time="2025-07-10T00:35:59.521543054Z" level=info msg="loading plugin \"io.containerd.grpc.v1.version\"..." type=io.containerd.grpc.v1 Jul 10 00:35:59.521609 env[1205]: time="2025-07-10T00:35:59.521553274Z" level=info msg="loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." type=io.containerd.tracing.processor.v1 Jul 10 00:35:59.521609 env[1205]: time="2025-07-10T00:35:59.521568462Z" level=info msg="skip loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." error="no OpenTelemetry endpoint: skip plugin" type=io.containerd.tracing.processor.v1 Jul 10 00:35:59.521609 env[1205]: time="2025-07-10T00:35:59.521580775Z" level=info msg="loading plugin \"io.containerd.internal.v1.tracing\"..." type=io.containerd.internal.v1 Jul 10 00:35:59.521698 env[1205]: time="2025-07-10T00:35:59.521609359Z" level=error msg="failed to initialize a tracing processor \"otlp\"" error="no OpenTelemetry endpoint: skip plugin" Jul 10 00:35:59.521698 env[1205]: time="2025-07-10T00:35:59.521665394Z" level=info msg="loading plugin \"io.containerd.grpc.v1.cri\"..." type=io.containerd.grpc.v1 Jul 10 00:35:59.521939 env[1205]: time="2025-07-10T00:35:59.521882140Z" level=info msg="Start cri plugin with config {PluginConfig:{ContainerdConfig:{Snapshotter:overlayfs DefaultRuntimeName:runc DefaultRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} UntrustedWorkloadRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} Runtimes:map[runc:{Type:io.containerd.runc.v2 Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[SystemdCgroup:true] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0}] NoPivot:false DisableSnapshotAnnotations:true DiscardUnpackedLayers:false IgnoreRdtNotEnabledErrors:false} CniConfig:{NetworkPluginBinDir:/opt/cni/bin NetworkPluginConfDir:/etc/cni/net.d NetworkPluginMaxConfNum:1 NetworkPluginConfTemplate: IPPreference:} Registry:{ConfigPath: Mirrors:map[] Configs:map[] Auths:map[] Headers:map[]} ImageDecryption:{KeyModel:node} DisableTCPService:true StreamServerAddress:127.0.0.1 StreamServerPort:0 StreamIdleTimeout:4h0m0s EnableSelinux:true SelinuxCategoryRange:1024 SandboxImage:registry.k8s.io/pause:3.6 StatsCollectPeriod:10 SystemdCgroup:false EnableTLSStreaming:false X509KeyPairStreaming:{TLSCertFile: TLSKeyFile:} MaxContainerLogLineSize:16384 DisableCgroup:false DisableApparmor:false RestrictOOMScoreAdj:false MaxConcurrentDownloads:3 DisableProcMount:false UnsetSeccompProfile: TolerateMissingHugetlbController:true DisableHugetlbController:true DeviceOwnershipFromSecurityContext:false IgnoreImageDefinedVolumes:false NetNSMountsUnderStateDir:false EnableUnprivilegedPorts:false EnableUnprivilegedICMP:false} ContainerdRootDir:/var/lib/containerd ContainerdEndpoint:/run/containerd/containerd.sock RootDir:/var/lib/containerd/io.containerd.grpc.v1.cri StateDir:/run/containerd/io.containerd.grpc.v1.cri}" Jul 10 00:35:59.521939 env[1205]: time="2025-07-10T00:35:59.521942013Z" level=info msg="Connect containerd service" Jul 10 00:35:59.522971 env[1205]: time="2025-07-10T00:35:59.521978231Z" level=info msg="Get image filesystem path \"/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs\"" Jul 10 00:35:59.522971 env[1205]: time="2025-07-10T00:35:59.522451248Z" level=error msg="failed to load cni during init, please check CRI plugin status before setting up network for pods" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Jul 10 00:35:59.522971 env[1205]: time="2025-07-10T00:35:59.522713770Z" level=info msg="Start subscribing containerd event" Jul 10 00:35:59.522971 env[1205]: time="2025-07-10T00:35:59.522787528Z" level=info msg="Start recovering state" Jul 10 00:35:59.522971 env[1205]: time="2025-07-10T00:35:59.522864152Z" level=info msg="Start event monitor" Jul 10 00:35:59.522971 env[1205]: time="2025-07-10T00:35:59.522883769Z" level=info msg="Start snapshots syncer" Jul 10 00:35:59.522971 env[1205]: time="2025-07-10T00:35:59.522916139Z" level=info msg="Start cni network conf syncer for default" Jul 10 00:35:59.522971 env[1205]: time="2025-07-10T00:35:59.522923984Z" level=info msg="Start streaming server" Jul 10 00:35:59.523228 env[1205]: time="2025-07-10T00:35:59.523204019Z" level=info msg=serving... address=/run/containerd/containerd.sock.ttrpc Jul 10 00:35:59.523273 env[1205]: time="2025-07-10T00:35:59.523244616Z" level=info msg=serving... address=/run/containerd/containerd.sock Jul 10 00:35:59.523463 systemd[1]: Started containerd.service. Jul 10 00:35:59.530806 env[1205]: time="2025-07-10T00:35:59.530744591Z" level=info msg="containerd successfully booted in 0.071167s" Jul 10 00:35:59.688667 locksmithd[1231]: locksmithd starting currentOperation="UPDATE_STATUS_IDLE" strategy="reboot" Jul 10 00:36:00.064525 sshd_keygen[1192]: ssh-keygen: generating new host keys: RSA ECDSA ED25519 Jul 10 00:36:00.084407 systemd[1]: Finished sshd-keygen.service. Jul 10 00:36:00.086996 systemd[1]: Starting issuegen.service... Jul 10 00:36:00.092898 systemd[1]: issuegen.service: Deactivated successfully. Jul 10 00:36:00.093060 systemd[1]: Finished issuegen.service. Jul 10 00:36:00.095181 systemd[1]: Starting systemd-user-sessions.service... Jul 10 00:36:00.102579 systemd[1]: Finished systemd-user-sessions.service. Jul 10 00:36:00.104961 systemd[1]: Started getty@tty1.service. Jul 10 00:36:00.106845 systemd[1]: Started serial-getty@ttyS0.service. Jul 10 00:36:00.107905 systemd[1]: Reached target getty.target. Jul 10 00:36:00.168004 tar[1203]: linux-amd64/README.md Jul 10 00:36:00.173118 systemd[1]: Finished prepare-helm.service. Jul 10 00:36:00.711376 systemd[1]: Created slice system-sshd.slice. Jul 10 00:36:00.713839 systemd[1]: Started sshd@0-10.0.0.36:22-10.0.0.1:53542.service. Jul 10 00:36:00.825173 sshd[1260]: Accepted publickey for core from 10.0.0.1 port 53542 ssh2: RSA SHA256:suUhWV759MqU0C+Dl6JG8TPW8PqnqlsB4qushdi9Ejw Jul 10 00:36:00.826847 sshd[1260]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 00:36:00.837676 systemd-logind[1194]: New session 1 of user core. Jul 10 00:36:00.838818 systemd[1]: Created slice user-500.slice. Jul 10 00:36:00.840921 systemd[1]: Starting user-runtime-dir@500.service... Jul 10 00:36:00.850960 systemd[1]: Finished user-runtime-dir@500.service. Jul 10 00:36:00.853256 systemd[1]: Starting user@500.service... Jul 10 00:36:00.856659 (systemd)[1263]: pam_unix(systemd-user:session): session opened for user core(uid=500) by (uid=0) Jul 10 00:36:00.881241 systemd[1]: Started kubelet.service. Jul 10 00:36:00.882387 systemd[1]: Reached target multi-user.target. Jul 10 00:36:00.884157 systemd[1]: Starting systemd-update-utmp-runlevel.service... Jul 10 00:36:00.891834 systemd[1]: systemd-update-utmp-runlevel.service: Deactivated successfully. Jul 10 00:36:00.892056 systemd[1]: Finished systemd-update-utmp-runlevel.service. Jul 10 00:36:00.944554 systemd[1263]: Queued start job for default target default.target. Jul 10 00:36:00.945071 systemd[1263]: Reached target paths.target. Jul 10 00:36:00.945092 systemd[1263]: Reached target sockets.target. Jul 10 00:36:00.945104 systemd[1263]: Reached target timers.target. Jul 10 00:36:00.945115 systemd[1263]: Reached target basic.target. Jul 10 00:36:00.945153 systemd[1263]: Reached target default.target. Jul 10 00:36:00.945174 systemd[1263]: Startup finished in 82ms. Jul 10 00:36:00.945327 systemd[1]: Started user@500.service. Jul 10 00:36:00.947206 systemd[1]: Started session-1.scope. Jul 10 00:36:00.948084 systemd[1]: Startup finished in 813ms (kernel) + 5.727s (initrd) + 7.337s (userspace) = 13.878s. Jul 10 00:36:00.998781 systemd[1]: Started sshd@1-10.0.0.36:22-10.0.0.1:53544.service. Jul 10 00:36:01.039409 sshd[1281]: Accepted publickey for core from 10.0.0.1 port 53544 ssh2: RSA SHA256:suUhWV759MqU0C+Dl6JG8TPW8PqnqlsB4qushdi9Ejw Jul 10 00:36:01.040406 sshd[1281]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 00:36:01.043854 systemd-logind[1194]: New session 2 of user core. Jul 10 00:36:01.044578 systemd[1]: Started session-2.scope. Jul 10 00:36:01.099079 sshd[1281]: pam_unix(sshd:session): session closed for user core Jul 10 00:36:01.101995 systemd[1]: sshd@1-10.0.0.36:22-10.0.0.1:53544.service: Deactivated successfully. Jul 10 00:36:01.102534 systemd[1]: session-2.scope: Deactivated successfully. Jul 10 00:36:01.103020 systemd-logind[1194]: Session 2 logged out. Waiting for processes to exit. Jul 10 00:36:01.105172 systemd[1]: Started sshd@2-10.0.0.36:22-10.0.0.1:53546.service. Jul 10 00:36:01.106262 systemd-logind[1194]: Removed session 2. Jul 10 00:36:01.143861 sshd[1287]: Accepted publickey for core from 10.0.0.1 port 53546 ssh2: RSA SHA256:suUhWV759MqU0C+Dl6JG8TPW8PqnqlsB4qushdi9Ejw Jul 10 00:36:01.145010 sshd[1287]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 00:36:01.148577 systemd-logind[1194]: New session 3 of user core. Jul 10 00:36:01.149278 systemd[1]: Started session-3.scope. Jul 10 00:36:01.197835 sshd[1287]: pam_unix(sshd:session): session closed for user core Jul 10 00:36:01.201198 systemd[1]: sshd@2-10.0.0.36:22-10.0.0.1:53546.service: Deactivated successfully. Jul 10 00:36:01.201708 systemd[1]: session-3.scope: Deactivated successfully. Jul 10 00:36:01.202160 systemd-logind[1194]: Session 3 logged out. Waiting for processes to exit. Jul 10 00:36:01.203192 systemd[1]: Started sshd@3-10.0.0.36:22-10.0.0.1:53548.service. Jul 10 00:36:01.204048 systemd-logind[1194]: Removed session 3. Jul 10 00:36:01.255124 sshd[1294]: Accepted publickey for core from 10.0.0.1 port 53548 ssh2: RSA SHA256:suUhWV759MqU0C+Dl6JG8TPW8PqnqlsB4qushdi9Ejw Jul 10 00:36:01.256098 sshd[1294]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 00:36:01.259353 systemd-logind[1194]: New session 4 of user core. Jul 10 00:36:01.260061 systemd[1]: Started session-4.scope. Jul 10 00:36:01.312393 sshd[1294]: pam_unix(sshd:session): session closed for user core Jul 10 00:36:01.315843 systemd[1]: Started sshd@4-10.0.0.36:22-10.0.0.1:53552.service. Jul 10 00:36:01.316265 systemd[1]: sshd@3-10.0.0.36:22-10.0.0.1:53548.service: Deactivated successfully. Jul 10 00:36:01.316902 systemd[1]: session-4.scope: Deactivated successfully. Jul 10 00:36:01.317690 systemd-logind[1194]: Session 4 logged out. Waiting for processes to exit. Jul 10 00:36:01.318678 systemd-logind[1194]: Removed session 4. Jul 10 00:36:01.356934 sshd[1300]: Accepted publickey for core from 10.0.0.1 port 53552 ssh2: RSA SHA256:suUhWV759MqU0C+Dl6JG8TPW8PqnqlsB4qushdi9Ejw Jul 10 00:36:01.379689 sshd[1300]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 00:36:01.383185 systemd-logind[1194]: New session 5 of user core. Jul 10 00:36:01.383933 systemd[1]: Started session-5.scope. Jul 10 00:36:01.440729 sudo[1304]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/setenforce 1 Jul 10 00:36:01.440925 sudo[1304]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Jul 10 00:36:01.450844 dbus-daemon[1175]: Ѝ\u000b\xab1V: received setenforce notice (enforcing=659477056) Jul 10 00:36:01.451929 sudo[1304]: pam_unix(sudo:session): session closed for user root Jul 10 00:36:01.453598 sshd[1300]: pam_unix(sshd:session): session closed for user core Jul 10 00:36:01.455955 systemd[1]: sshd@4-10.0.0.36:22-10.0.0.1:53552.service: Deactivated successfully. Jul 10 00:36:01.456440 systemd[1]: session-5.scope: Deactivated successfully. Jul 10 00:36:01.456936 systemd-logind[1194]: Session 5 logged out. Waiting for processes to exit. Jul 10 00:36:01.457791 systemd[1]: Started sshd@5-10.0.0.36:22-10.0.0.1:53566.service. Jul 10 00:36:01.458447 systemd-logind[1194]: Removed session 5. Jul 10 00:36:01.501742 sshd[1308]: Accepted publickey for core from 10.0.0.1 port 53566 ssh2: RSA SHA256:suUhWV759MqU0C+Dl6JG8TPW8PqnqlsB4qushdi9Ejw Jul 10 00:36:01.532720 sshd[1308]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 00:36:01.540564 systemd-logind[1194]: New session 6 of user core. Jul 10 00:36:01.542119 systemd[1]: Started session-6.scope. Jul 10 00:36:01.589041 kubelet[1271]: E0710 00:36:01.588976 1271 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Jul 10 00:36:01.590310 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Jul 10 00:36:01.590424 systemd[1]: kubelet.service: Failed with result 'exit-code'. Jul 10 00:36:01.590711 systemd[1]: kubelet.service: Consumed 2.080s CPU time. Jul 10 00:36:01.631302 sudo[1312]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/rm -rf /etc/audit/rules.d/80-selinux.rules /etc/audit/rules.d/99-default.rules Jul 10 00:36:01.631499 sudo[1312]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Jul 10 00:36:01.634747 sudo[1312]: pam_unix(sudo:session): session closed for user root Jul 10 00:36:01.640570 sudo[1311]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/systemctl restart audit-rules Jul 10 00:36:01.640841 sudo[1311]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Jul 10 00:36:01.649205 systemd[1]: Stopping audit-rules.service... Jul 10 00:36:01.649000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Jul 10 00:36:01.649000 audit[1315]: SYSCALL arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffd09e151d0 a2=420 a3=0 items=0 ppid=1 pid=1315 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:36:01.649000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D44 Jul 10 00:36:01.650568 auditctl[1315]: No rules Jul 10 00:36:01.650803 systemd[1]: audit-rules.service: Deactivated successfully. Jul 10 00:36:01.650971 systemd[1]: Stopped audit-rules.service. Jul 10 00:36:01.649000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:36:01.652646 systemd[1]: Starting audit-rules.service... Jul 10 00:36:01.667786 augenrules[1332]: No rules Jul 10 00:36:01.668410 systemd[1]: Finished audit-rules.service. Jul 10 00:36:01.667000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:36:01.669152 sudo[1311]: pam_unix(sudo:session): session closed for user root Jul 10 00:36:01.668000 audit[1311]: USER_END pid=1311 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 10 00:36:01.668000 audit[1311]: CRED_DISP pid=1311 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 10 00:36:01.670869 sshd[1308]: pam_unix(sshd:session): session closed for user core Jul 10 00:36:01.673390 systemd[1]: sshd@5-10.0.0.36:22-10.0.0.1:53566.service: Deactivated successfully. Jul 10 00:36:01.671000 audit[1308]: USER_END pid=1308 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:36:01.671000 audit[1308]: CRED_DISP pid=1308 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:36:01.672000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-10.0.0.36:22-10.0.0.1:53566 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:36:01.674119 systemd[1]: session-6.scope: Deactivated successfully. Jul 10 00:36:01.674744 systemd-logind[1194]: Session 6 logged out. Waiting for processes to exit. Jul 10 00:36:01.675850 systemd[1]: Started sshd@6-10.0.0.36:22-10.0.0.1:53572.service. Jul 10 00:36:01.675000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.36:22-10.0.0.1:53572 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:36:01.676667 systemd-logind[1194]: Removed session 6. Jul 10 00:36:01.718000 audit[1338]: USER_ACCT pid=1338 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:36:01.719880 sshd[1338]: Accepted publickey for core from 10.0.0.1 port 53572 ssh2: RSA SHA256:suUhWV759MqU0C+Dl6JG8TPW8PqnqlsB4qushdi9Ejw Jul 10 00:36:01.720000 audit[1338]: CRED_ACQ pid=1338 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:36:01.720000 audit[1338]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe25916e90 a2=3 a3=0 items=0 ppid=1 pid=1338 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=7 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:36:01.720000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 10 00:36:01.721067 sshd[1338]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 00:36:01.725007 systemd-logind[1194]: New session 7 of user core. Jul 10 00:36:01.726049 systemd[1]: Started session-7.scope. Jul 10 00:36:01.729000 audit[1338]: USER_START pid=1338 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:36:01.730000 audit[1340]: CRED_ACQ pid=1340 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:36:01.779000 audit[1341]: USER_ACCT pid=1341 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 10 00:36:01.780000 audit[1341]: CRED_REFR pid=1341 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 10 00:36:01.780565 sudo[1341]: core : PWD=/home/core ; USER=root ; COMMAND=/home/core/install.sh Jul 10 00:36:01.780868 sudo[1341]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Jul 10 00:36:01.782000 audit[1341]: USER_START pid=1341 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 10 00:36:01.845067 systemd[1]: Starting docker.service... Jul 10 00:36:01.909978 env[1352]: time="2025-07-10T00:36:01.909893736Z" level=info msg="Starting up" Jul 10 00:36:01.911443 env[1352]: time="2025-07-10T00:36:01.911406141Z" level=info msg="parsed scheme: \"unix\"" module=grpc Jul 10 00:36:01.911443 env[1352]: time="2025-07-10T00:36:01.911432418Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Jul 10 00:36:01.911545 env[1352]: time="2025-07-10T00:36:01.911457478Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Jul 10 00:36:01.911545 env[1352]: time="2025-07-10T00:36:01.911480877Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Jul 10 00:36:01.914060 env[1352]: time="2025-07-10T00:36:01.914032673Z" level=info msg="parsed scheme: \"unix\"" module=grpc Jul 10 00:36:01.914060 env[1352]: time="2025-07-10T00:36:01.914048043Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Jul 10 00:36:01.914129 env[1352]: time="2025-07-10T00:36:01.914073535Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Jul 10 00:36:01.914129 env[1352]: time="2025-07-10T00:36:01.914088679Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Jul 10 00:36:02.570074 env[1352]: time="2025-07-10T00:36:02.570014774Z" level=info msg="Loading containers: start." Jul 10 00:36:02.624000 audit[1386]: NETFILTER_CFG table=nat:2 family=2 entries=2 op=nft_register_chain pid=1386 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:36:02.624000 audit[1386]: SYSCALL arch=c000003e syscall=46 success=yes exit=116 a0=3 a1=7ffcf7bc1ea0 a2=0 a3=7ffcf7bc1e8c items=0 ppid=1352 pid=1386 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:36:02.624000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4E00444F434B4552 Jul 10 00:36:02.625000 audit[1388]: NETFILTER_CFG table=filter:3 family=2 entries=2 op=nft_register_chain pid=1388 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:36:02.625000 audit[1388]: SYSCALL arch=c000003e syscall=46 success=yes exit=124 a0=3 a1=7fff45cdbdc0 a2=0 a3=7fff45cdbdac items=0 ppid=1352 pid=1388 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:36:02.625000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B4552 Jul 10 00:36:02.627000 audit[1390]: NETFILTER_CFG table=filter:4 family=2 entries=1 op=nft_register_chain pid=1390 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:36:02.627000 audit[1390]: SYSCALL arch=c000003e syscall=46 success=yes exit=112 a0=3 a1=7ffea6eae220 a2=0 a3=7ffea6eae20c items=0 ppid=1352 pid=1390 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:36:02.627000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D31 Jul 10 00:36:02.629000 audit[1392]: NETFILTER_CFG table=filter:5 family=2 entries=1 op=nft_register_chain pid=1392 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:36:02.629000 audit[1392]: SYSCALL arch=c000003e syscall=46 success=yes exit=112 a0=3 a1=7ffc2445c790 a2=0 a3=7ffc2445c77c items=0 ppid=1352 pid=1392 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:36:02.629000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D32 Jul 10 00:36:02.630000 audit[1394]: NETFILTER_CFG table=filter:6 family=2 entries=1 op=nft_register_rule pid=1394 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:36:02.630000 audit[1394]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffcdc07d740 a2=0 a3=7ffcdc07d72c items=0 ppid=1352 pid=1394 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:36:02.630000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D31002D6A0052455455524E Jul 10 00:36:02.647000 audit[1399]: NETFILTER_CFG table=filter:7 family=2 entries=1 op=nft_register_rule pid=1399 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:36:02.647000 audit[1399]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffcc0a54200 a2=0 a3=7ffcc0a541ec items=0 ppid=1352 pid=1399 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:36:02.647000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D32002D6A0052455455524E Jul 10 00:36:02.656000 audit[1401]: NETFILTER_CFG table=filter:8 family=2 entries=1 op=nft_register_chain pid=1401 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:36:02.656000 audit[1401]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffc69af4c60 a2=0 a3=7ffc69af4c4c items=0 ppid=1352 pid=1401 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:36:02.656000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D55534552 Jul 10 00:36:02.658000 audit[1403]: NETFILTER_CFG table=filter:9 family=2 entries=1 op=nft_register_rule pid=1403 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:36:02.658000 audit[1403]: SYSCALL arch=c000003e syscall=46 success=yes exit=212 a0=3 a1=7ffce87296a0 a2=0 a3=7ffce872968c items=0 ppid=1352 pid=1403 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:36:02.658000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D55534552002D6A0052455455524E Jul 10 00:36:02.660000 audit[1405]: NETFILTER_CFG table=filter:10 family=2 entries=2 op=nft_register_chain pid=1405 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:36:02.660000 audit[1405]: SYSCALL arch=c000003e syscall=46 success=yes exit=308 a0=3 a1=7ffdba6da9f0 a2=0 a3=7ffdba6da9dc items=0 ppid=1352 pid=1405 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:36:02.660000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Jul 10 00:36:02.668000 audit[1409]: NETFILTER_CFG table=filter:11 family=2 entries=1 op=nft_unregister_rule pid=1409 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:36:02.668000 audit[1409]: SYSCALL arch=c000003e syscall=46 success=yes exit=216 a0=3 a1=7ffc1979c9d0 a2=0 a3=7ffc1979c9bc items=0 ppid=1352 pid=1409 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:36:02.668000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Jul 10 00:36:02.673000 audit[1410]: NETFILTER_CFG table=filter:12 family=2 entries=1 op=nft_register_rule pid=1410 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:36:02.673000 audit[1410]: SYSCALL arch=c000003e syscall=46 success=yes exit=224 a0=3 a1=7ffd775df1f0 a2=0 a3=7ffd775df1dc items=0 ppid=1352 pid=1410 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:36:02.673000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Jul 10 00:36:02.683672 kernel: Initializing XFRM netlink socket Jul 10 00:36:02.710901 env[1352]: time="2025-07-10T00:36:02.710861916Z" level=info msg="Default bridge (docker0) is assigned with an IP address 172.17.0.0/16. Daemon option --bip can be used to set a preferred IP address" Jul 10 00:36:02.724000 audit[1418]: NETFILTER_CFG table=nat:13 family=2 entries=2 op=nft_register_chain pid=1418 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:36:02.724000 audit[1418]: SYSCALL arch=c000003e syscall=46 success=yes exit=492 a0=3 a1=7ffcebf73d90 a2=0 a3=7ffcebf73d7c items=0 ppid=1352 pid=1418 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:36:02.724000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900504F5354524F5554494E47002D73003137322E31372E302E302F31360000002D6F00646F636B657230002D6A004D415351554552414445 Jul 10 00:36:02.738000 audit[1421]: NETFILTER_CFG table=nat:14 family=2 entries=1 op=nft_register_rule pid=1421 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:36:02.738000 audit[1421]: SYSCALL arch=c000003e syscall=46 success=yes exit=288 a0=3 a1=7ffe0fe583f0 a2=0 a3=7ffe0fe583dc items=0 ppid=1352 pid=1421 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:36:02.738000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900444F434B4552002D6900646F636B657230002D6A0052455455524E Jul 10 00:36:02.740000 audit[1424]: NETFILTER_CFG table=filter:15 family=2 entries=1 op=nft_register_rule pid=1424 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:36:02.740000 audit[1424]: SYSCALL arch=c000003e syscall=46 success=yes exit=376 a0=3 a1=7ffc3dcb31d0 a2=0 a3=7ffc3dcb31bc items=0 ppid=1352 pid=1424 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:36:02.740000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B657230002D6F00646F636B657230002D6A00414343455054 Jul 10 00:36:02.742000 audit[1426]: NETFILTER_CFG table=filter:16 family=2 entries=1 op=nft_register_rule pid=1426 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:36:02.742000 audit[1426]: SYSCALL arch=c000003e syscall=46 success=yes exit=376 a0=3 a1=7ffc2a9db190 a2=0 a3=7ffc2a9db17c items=0 ppid=1352 pid=1426 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:36:02.742000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B6572300000002D6F00646F636B657230002D6A00414343455054 Jul 10 00:36:02.744000 audit[1428]: NETFILTER_CFG table=nat:17 family=2 entries=2 op=nft_register_chain pid=1428 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:36:02.744000 audit[1428]: SYSCALL arch=c000003e syscall=46 success=yes exit=356 a0=3 a1=7ffde2fb7390 a2=0 a3=7ffde2fb737c items=0 ppid=1352 pid=1428 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:36:02.744000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4100505245524F5554494E47002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B4552 Jul 10 00:36:02.749000 audit[1430]: NETFILTER_CFG table=nat:18 family=2 entries=2 op=nft_register_chain pid=1430 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:36:02.749000 audit[1430]: SYSCALL arch=c000003e syscall=46 success=yes exit=444 a0=3 a1=7ffcd65264b0 a2=0 a3=7ffcd652649c items=0 ppid=1352 pid=1430 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:36:02.749000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D41004F5554505554002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B45520000002D2D647374003132372E302E302E302F38 Jul 10 00:36:02.751000 audit[1432]: NETFILTER_CFG table=filter:19 family=2 entries=1 op=nft_register_rule pid=1432 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:36:02.751000 audit[1432]: SYSCALL arch=c000003e syscall=46 success=yes exit=304 a0=3 a1=7ffea8474f70 a2=0 a3=7ffea8474f5c items=0 ppid=1352 pid=1432 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:36:02.751000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6A00444F434B4552 Jul 10 00:36:02.758000 audit[1435]: NETFILTER_CFG table=filter:20 family=2 entries=1 op=nft_register_rule pid=1435 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:36:02.758000 audit[1435]: SYSCALL arch=c000003e syscall=46 success=yes exit=508 a0=3 a1=7fff0fd160d0 a2=0 a3=7fff0fd160bc items=0 ppid=1352 pid=1435 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:36:02.758000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6D00636F6E6E747261636B002D2D637473746174650052454C415445442C45535441424C4953484544002D6A00414343455054 Jul 10 00:36:02.761000 audit[1437]: NETFILTER_CFG table=filter:21 family=2 entries=1 op=nft_register_rule pid=1437 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:36:02.761000 audit[1437]: SYSCALL arch=c000003e syscall=46 success=yes exit=240 a0=3 a1=7fff9dc93220 a2=0 a3=7fff9dc9320c items=0 ppid=1352 pid=1437 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:36:02.761000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D31 Jul 10 00:36:02.763000 audit[1439]: NETFILTER_CFG table=filter:22 family=2 entries=1 op=nft_register_rule pid=1439 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:36:02.763000 audit[1439]: SYSCALL arch=c000003e syscall=46 success=yes exit=428 a0=3 a1=7ffdccf02180 a2=0 a3=7ffdccf0216c items=0 ppid=1352 pid=1439 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:36:02.763000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D31002D6900646F636B6572300000002D6F00646F636B657230002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D32 Jul 10 00:36:02.765000 audit[1441]: NETFILTER_CFG table=filter:23 family=2 entries=1 op=nft_register_rule pid=1441 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:36:02.765000 audit[1441]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7ffc7f2fd880 a2=0 a3=7ffc7f2fd86c items=0 ppid=1352 pid=1441 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:36:02.765000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D32002D6F00646F636B657230002D6A0044524F50 Jul 10 00:36:02.766795 systemd-networkd[1023]: docker0: Link UP Jul 10 00:36:02.842000 audit[1445]: NETFILTER_CFG table=filter:24 family=2 entries=1 op=nft_unregister_rule pid=1445 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:36:02.842000 audit[1445]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffe895fbeb0 a2=0 a3=7ffe895fbe9c items=0 ppid=1352 pid=1445 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:36:02.842000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Jul 10 00:36:02.848000 audit[1446]: NETFILTER_CFG table=filter:25 family=2 entries=1 op=nft_register_rule pid=1446 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:36:02.848000 audit[1446]: SYSCALL arch=c000003e syscall=46 success=yes exit=224 a0=3 a1=7ffe52b577a0 a2=0 a3=7ffe52b5778c items=0 ppid=1352 pid=1446 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:36:02.848000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Jul 10 00:36:02.850957 env[1352]: time="2025-07-10T00:36:02.850914268Z" level=info msg="Loading containers: done." Jul 10 00:36:02.867932 env[1352]: time="2025-07-10T00:36:02.867885202Z" level=warning msg="Not using native diff for overlay2, this may cause degraded performance for building images: kernel has CONFIG_OVERLAY_FS_REDIRECT_DIR enabled" storage-driver=overlay2 Jul 10 00:36:02.868062 env[1352]: time="2025-07-10T00:36:02.868051016Z" level=info msg="Docker daemon" commit=112bdf3343 graphdriver(s)=overlay2 version=20.10.23 Jul 10 00:36:02.868151 env[1352]: time="2025-07-10T00:36:02.868127540Z" level=info msg="Daemon has completed initialization" Jul 10 00:36:02.887489 systemd[1]: Started docker.service. Jul 10 00:36:02.887000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=docker comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:36:02.896555 env[1352]: time="2025-07-10T00:36:02.896471014Z" level=info msg="API listen on /run/docker.sock" Jul 10 00:36:03.726885 env[1205]: time="2025-07-10T00:36:03.726811988Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.32.6\"" Jul 10 00:36:04.341579 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1871626936.mount: Deactivated successfully. Jul 10 00:36:06.504354 env[1205]: time="2025-07-10T00:36:06.504290023Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver:v1.32.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:36:06.506202 env[1205]: time="2025-07-10T00:36:06.506176519Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:8c5b95b1b5cb4a908fcbbbe81697c57019f9e9d89bfb5e0355235d440b7a6aa9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:36:06.508056 env[1205]: time="2025-07-10T00:36:06.508022221Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-apiserver:v1.32.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:36:06.510082 env[1205]: time="2025-07-10T00:36:06.510048854Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver@sha256:0f5764551d7de4ef70489ff8a70f32df7dea00701f5545af089b60bc5ede4f6f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:36:06.510964 env[1205]: time="2025-07-10T00:36:06.510890213Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.32.6\" returns image reference \"sha256:8c5b95b1b5cb4a908fcbbbe81697c57019f9e9d89bfb5e0355235d440b7a6aa9\"" Jul 10 00:36:06.511672 env[1205]: time="2025-07-10T00:36:06.511631206Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.32.6\"" Jul 10 00:36:08.943597 env[1205]: time="2025-07-10T00:36:08.943542448Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager:v1.32.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:36:08.946381 env[1205]: time="2025-07-10T00:36:08.946349672Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:77d0e7de0c6b41e2331c3997698c3f917527cf7bbe462f5c813f514e788436de,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:36:08.948727 env[1205]: time="2025-07-10T00:36:08.948691307Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-controller-manager:v1.32.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:36:08.950674 env[1205]: time="2025-07-10T00:36:08.950637767Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager@sha256:3425f29c94a77d74cb89f38413e6274277dcf5e2bc7ab6ae953578a91e9e8356,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:36:08.951431 env[1205]: time="2025-07-10T00:36:08.951404255Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.32.6\" returns image reference \"sha256:77d0e7de0c6b41e2331c3997698c3f917527cf7bbe462f5c813f514e788436de\"" Jul 10 00:36:08.952124 env[1205]: time="2025-07-10T00:36:08.952098405Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.32.6\"" Jul 10 00:36:11.760426 env[1205]: time="2025-07-10T00:36:11.760349813Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler:v1.32.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:36:11.762515 env[1205]: time="2025-07-10T00:36:11.762468254Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:b34d1cd163151c2491919f315274d85bff904721213f2b19341b403a28a39ae2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:36:11.764429 env[1205]: time="2025-07-10T00:36:11.764400256Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-scheduler:v1.32.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:36:11.766520 env[1205]: time="2025-07-10T00:36:11.766466154Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler@sha256:130f633cbd1d70e2f4655350153cb3fc469f4d5a6310b4f0b49d93fb2ba2132b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:36:11.767189 env[1205]: time="2025-07-10T00:36:11.767146825Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.32.6\" returns image reference \"sha256:b34d1cd163151c2491919f315274d85bff904721213f2b19341b403a28a39ae2\"" Jul 10 00:36:11.767854 env[1205]: time="2025-07-10T00:36:11.767819571Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.32.6\"" Jul 10 00:36:11.841396 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 1. Jul 10 00:36:11.840000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:36:11.841621 systemd[1]: Stopped kubelet.service. Jul 10 00:36:11.841712 systemd[1]: kubelet.service: Consumed 2.080s CPU time. Jul 10 00:36:11.843134 systemd[1]: Starting kubelet.service... Jul 10 00:36:11.845334 kernel: kauditd_printk_skb: 127 callbacks suppressed Jul 10 00:36:11.845423 kernel: audit: type=1130 audit(1752107771.840:237): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:36:11.845452 kernel: audit: type=1131 audit(1752107771.841:238): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:36:11.841000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:36:12.008720 systemd[1]: Started kubelet.service. Jul 10 00:36:12.008000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:36:12.012686 kernel: audit: type=1130 audit(1752107772.008:239): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:36:12.250813 kubelet[1488]: E0710 00:36:12.250742 1488 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Jul 10 00:36:12.254734 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Jul 10 00:36:12.254858 systemd[1]: kubelet.service: Failed with result 'exit-code'. Jul 10 00:36:12.254000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Jul 10 00:36:12.258754 kernel: audit: type=1131 audit(1752107772.254:240): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Jul 10 00:36:13.850519 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount206523036.mount: Deactivated successfully. Jul 10 00:36:14.808434 env[1205]: time="2025-07-10T00:36:14.808357104Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy:v1.32.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:36:14.810529 env[1205]: time="2025-07-10T00:36:14.810468846Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:63f0cbe3b7339c5d006efc9964228e48271bae73039320037c451b5e8f763e02,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:36:14.812204 env[1205]: time="2025-07-10T00:36:14.812172630Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-proxy:v1.32.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:36:14.813500 env[1205]: time="2025-07-10T00:36:14.813470123Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy@sha256:b13d9da413b983d130bf090b83fce12e1ccc704e95f366da743c18e964d9d7e9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:36:14.813809 env[1205]: time="2025-07-10T00:36:14.813785660Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.32.6\" returns image reference \"sha256:63f0cbe3b7339c5d006efc9964228e48271bae73039320037c451b5e8f763e02\"" Jul 10 00:36:14.814296 env[1205]: time="2025-07-10T00:36:14.814271123Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.11.3\"" Jul 10 00:36:15.365806 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2443282891.mount: Deactivated successfully. Jul 10 00:36:16.534061 env[1205]: time="2025-07-10T00:36:16.534002476Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns:v1.11.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:36:16.572155 env[1205]: time="2025-07-10T00:36:16.572102932Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:c69fa2e9cbf5f42dc48af631e956d3f95724c13f91596bc567591790e5e36db6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:36:16.599452 env[1205]: time="2025-07-10T00:36:16.599425527Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/coredns/coredns:v1.11.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:36:16.612421 env[1205]: time="2025-07-10T00:36:16.612371984Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns@sha256:9caabbf6238b189a65d0d6e6ac138de60d6a1c419e5a341fbbb7c78382559c6e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:36:16.613263 env[1205]: time="2025-07-10T00:36:16.613219145Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.11.3\" returns image reference \"sha256:c69fa2e9cbf5f42dc48af631e956d3f95724c13f91596bc567591790e5e36db6\"" Jul 10 00:36:16.613786 env[1205]: time="2025-07-10T00:36:16.613761033Z" level=info msg="PullImage \"registry.k8s.io/pause:3.10\"" Jul 10 00:36:18.134959 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2356254569.mount: Deactivated successfully. Jul 10 00:36:18.142461 env[1205]: time="2025-07-10T00:36:18.142374914Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:36:18.144439 env[1205]: time="2025-07-10T00:36:18.144372163Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:873ed75102791e5b0b8a7fcd41606c92fcec98d56d05ead4ac5131650004c136,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:36:18.146081 env[1205]: time="2025-07-10T00:36:18.146049544Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:36:18.147931 env[1205]: time="2025-07-10T00:36:18.147895159Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:ee6521f290b2168b6e0935a181d4cff9be1ac3f505666ef0e3c98fae8199917a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:36:18.148395 env[1205]: time="2025-07-10T00:36:18.148362572Z" level=info msg="PullImage \"registry.k8s.io/pause:3.10\" returns image reference \"sha256:873ed75102791e5b0b8a7fcd41606c92fcec98d56d05ead4ac5131650004c136\"" Jul 10 00:36:18.149003 env[1205]: time="2025-07-10T00:36:18.148963951Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.16-0\"" Jul 10 00:36:18.761642 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount869258811.mount: Deactivated successfully. Jul 10 00:36:22.505831 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 2. Jul 10 00:36:22.506073 systemd[1]: Stopped kubelet.service. Jul 10 00:36:22.515348 kernel: audit: type=1130 audit(1752107782.504:241): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:36:22.515509 kernel: audit: type=1131 audit(1752107782.504:242): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:36:22.504000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:36:22.504000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:36:22.507780 systemd[1]: Starting kubelet.service... Jul 10 00:36:23.683049 systemd[1]: Started kubelet.service. Jul 10 00:36:23.682000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:36:23.695679 kernel: audit: type=1130 audit(1752107783.682:243): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:36:24.172976 kubelet[1499]: E0710 00:36:24.172818 1499 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Jul 10 00:36:24.174542 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Jul 10 00:36:24.174706 systemd[1]: kubelet.service: Failed with result 'exit-code'. Jul 10 00:36:24.173000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Jul 10 00:36:24.178682 kernel: audit: type=1131 audit(1752107784.173:244): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Jul 10 00:36:24.837227 env[1205]: time="2025-07-10T00:36:24.837153844Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd:3.5.16-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:36:24.839114 env[1205]: time="2025-07-10T00:36:24.839036837Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:a9e7e6b294baf1695fccb862d956c5d3ad8510e1e4ca1535f35dc09f247abbfc,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:36:24.840961 env[1205]: time="2025-07-10T00:36:24.840929320Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/etcd:3.5.16-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:36:24.842988 env[1205]: time="2025-07-10T00:36:24.842964323Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd@sha256:c6a9d11cc5c04b114ccdef39a9265eeef818e3d02f5359be035ae784097fdec5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:36:24.844001 env[1205]: time="2025-07-10T00:36:24.843955334Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.16-0\" returns image reference \"sha256:a9e7e6b294baf1695fccb862d956c5d3ad8510e1e4ca1535f35dc09f247abbfc\"" Jul 10 00:36:26.928706 systemd[1]: Stopped kubelet.service. Jul 10 00:36:26.927000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:36:26.928000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:36:26.932451 systemd[1]: Starting kubelet.service... Jul 10 00:36:26.935307 kernel: audit: type=1130 audit(1752107786.927:245): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:36:26.935385 kernel: audit: type=1131 audit(1752107786.928:246): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:36:26.953471 systemd[1]: Reloading. Jul 10 00:36:27.020897 /usr/lib/systemd/system-generators/torcx-generator[1554]: time="2025-07-10T00:36:27Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.7 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.7 /var/lib/torcx/store]" Jul 10 00:36:27.021274 /usr/lib/systemd/system-generators/torcx-generator[1554]: time="2025-07-10T00:36:27Z" level=info msg="torcx already run" Jul 10 00:36:27.521018 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Jul 10 00:36:27.521037 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Jul 10 00:36:27.537538 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Jul 10 00:36:27.594000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:27.594000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:27.600900 kernel: audit: type=1400 audit(1752107787.594:247): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:27.600945 kernel: audit: type=1400 audit(1752107787.594:248): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:27.600977 kernel: audit: type=1400 audit(1752107787.594:249): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:27.594000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:27.603942 kernel: audit: type=1400 audit(1752107787.594:250): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:27.594000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:27.594000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:27.610155 kernel: audit: type=1400 audit(1752107787.594:251): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:27.610195 kernel: audit: type=1400 audit(1752107787.594:252): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:27.594000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:27.613180 kernel: audit: type=1400 audit(1752107787.594:253): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:27.594000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:27.594000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:27.619220 kernel: audit: type=1400 audit(1752107787.594:254): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:27.619249 kernel: audit: type=1400 audit(1752107787.600:255): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:27.600000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:27.600000 audit: BPF prog-id=43 op=LOAD Jul 10 00:36:27.622881 kernel: audit: type=1334 audit(1752107787.600:256): prog-id=43 op=LOAD Jul 10 00:36:27.600000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:27.600000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:27.600000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:27.600000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:27.600000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:27.600000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:27.600000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:27.600000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:27.606000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:27.606000 audit: BPF prog-id=44 op=LOAD Jul 10 00:36:27.606000 audit: BPF prog-id=27 op=UNLOAD Jul 10 00:36:27.606000 audit: BPF prog-id=28 op=UNLOAD Jul 10 00:36:27.606000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:27.606000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:27.606000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:27.606000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:27.606000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:27.606000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:27.606000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:27.606000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:27.606000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:27.612000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:27.612000 audit: BPF prog-id=45 op=LOAD Jul 10 00:36:27.612000 audit: BPF prog-id=41 op=UNLOAD Jul 10 00:36:27.612000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:27.612000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:27.612000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:27.612000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:27.612000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:27.612000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:27.612000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:27.612000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:27.612000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:27.618000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:27.618000 audit: BPF prog-id=46 op=LOAD Jul 10 00:36:27.618000 audit: BPF prog-id=29 op=UNLOAD Jul 10 00:36:27.618000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:27.618000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:27.619000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:27.619000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:27.619000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:27.619000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:27.619000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:27.619000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:27.619000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:27.622000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:27.622000 audit: BPF prog-id=47 op=LOAD Jul 10 00:36:27.622000 audit: BPF prog-id=36 op=UNLOAD Jul 10 00:36:27.623000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:27.623000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:27.623000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:27.623000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:27.623000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:27.623000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:27.623000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:27.623000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:27.623000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:27.623000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:27.623000 audit: BPF prog-id=48 op=LOAD Jul 10 00:36:27.623000 audit: BPF prog-id=37 op=UNLOAD Jul 10 00:36:27.624000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:27.624000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:27.624000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:27.624000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:27.624000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:27.624000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:27.624000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:27.624000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:27.624000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:27.624000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:27.624000 audit: BPF prog-id=49 op=LOAD Jul 10 00:36:27.624000 audit: BPF prog-id=30 op=UNLOAD Jul 10 00:36:27.624000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:27.624000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:27.624000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:27.624000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:27.624000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:27.624000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:27.624000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:27.624000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:27.624000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:27.624000 audit: BPF prog-id=50 op=LOAD Jul 10 00:36:27.624000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:27.624000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:27.624000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:27.624000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:27.624000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:27.624000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:27.624000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:27.624000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:27.625000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:27.625000 audit: BPF prog-id=51 op=LOAD Jul 10 00:36:27.625000 audit: BPF prog-id=31 op=UNLOAD Jul 10 00:36:27.625000 audit: BPF prog-id=32 op=UNLOAD Jul 10 00:36:27.625000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:27.625000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:27.625000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:27.625000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:27.625000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:27.625000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:27.625000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:27.625000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:27.625000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:27.625000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:27.625000 audit: BPF prog-id=52 op=LOAD Jul 10 00:36:27.625000 audit: BPF prog-id=33 op=UNLOAD Jul 10 00:36:27.625000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:27.625000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:27.625000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:27.625000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:27.625000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:27.625000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:27.625000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:27.625000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:27.625000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:27.625000 audit: BPF prog-id=53 op=LOAD Jul 10 00:36:27.625000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:27.625000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:27.625000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:27.626000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:27.626000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:27.626000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:27.626000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:27.626000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:27.626000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:27.626000 audit: BPF prog-id=54 op=LOAD Jul 10 00:36:27.626000 audit: BPF prog-id=34 op=UNLOAD Jul 10 00:36:27.626000 audit: BPF prog-id=35 op=UNLOAD Jul 10 00:36:27.627000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:27.627000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:27.627000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:27.627000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:27.627000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:27.627000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:27.627000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:27.627000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:27.627000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:27.627000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:27.627000 audit: BPF prog-id=55 op=LOAD Jul 10 00:36:27.627000 audit: BPF prog-id=38 op=UNLOAD Jul 10 00:36:27.627000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:27.627000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:27.627000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:27.627000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:27.627000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:27.627000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:27.627000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:27.627000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:27.628000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:27.628000 audit: BPF prog-id=56 op=LOAD Jul 10 00:36:27.628000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:27.628000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:27.628000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:27.628000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:27.628000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:27.628000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:27.628000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:27.628000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:27.628000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:27.628000 audit: BPF prog-id=57 op=LOAD Jul 10 00:36:27.628000 audit: BPF prog-id=39 op=UNLOAD Jul 10 00:36:27.628000 audit: BPF prog-id=40 op=UNLOAD Jul 10 00:36:27.639552 systemd[1]: Started kubelet.service. Jul 10 00:36:27.639000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:36:27.641413 systemd[1]: Stopping kubelet.service... Jul 10 00:36:27.642034 systemd[1]: kubelet.service: Deactivated successfully. Jul 10 00:36:27.642192 systemd[1]: Stopped kubelet.service. Jul 10 00:36:27.641000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:36:27.643580 systemd[1]: Starting kubelet.service... Jul 10 00:36:27.729384 systemd[1]: Started kubelet.service. Jul 10 00:36:27.729000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:36:27.865591 kubelet[1602]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Jul 10 00:36:27.865591 kubelet[1602]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.35. Image garbage collector will get sandbox image information from CRI. Jul 10 00:36:27.865591 kubelet[1602]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Jul 10 00:36:27.866016 kubelet[1602]: I0710 00:36:27.865576 1602 server.go:215] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Jul 10 00:36:28.141302 kubelet[1602]: I0710 00:36:28.141194 1602 server.go:520] "Kubelet version" kubeletVersion="v1.32.4" Jul 10 00:36:28.141302 kubelet[1602]: I0710 00:36:28.141230 1602 server.go:522] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Jul 10 00:36:28.141556 kubelet[1602]: I0710 00:36:28.141531 1602 server.go:954] "Client rotation is on, will bootstrap in background" Jul 10 00:36:28.171110 kubelet[1602]: E0710 00:36:28.171059 1602 certificate_manager.go:562] "Unhandled Error" err="kubernetes.io/kube-apiserver-client-kubelet: Failed while requesting a signed certificate from the control plane: cannot create certificate signing request: Post \"https://10.0.0.36:6443/apis/certificates.k8s.io/v1/certificatesigningrequests\": dial tcp 10.0.0.36:6443: connect: connection refused" logger="UnhandledError" Jul 10 00:36:28.171192 kubelet[1602]: I0710 00:36:28.171171 1602 dynamic_cafile_content.go:161] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Jul 10 00:36:28.181511 kubelet[1602]: E0710 00:36:28.181473 1602 log.go:32] "RuntimeConfig from runtime service failed" err="rpc error: code = Unimplemented desc = unknown method RuntimeConfig for service runtime.v1.RuntimeService" Jul 10 00:36:28.181511 kubelet[1602]: I0710 00:36:28.181512 1602 server.go:1421] "CRI implementation should be updated to support RuntimeConfig when KubeletCgroupDriverFromCRI feature gate has been enabled. Falling back to using cgroupDriver from kubelet config." Jul 10 00:36:28.186274 kubelet[1602]: I0710 00:36:28.186257 1602 server.go:772] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Jul 10 00:36:28.186522 kubelet[1602]: I0710 00:36:28.186475 1602 container_manager_linux.go:268] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Jul 10 00:36:28.186709 kubelet[1602]: I0710 00:36:28.186510 1602 container_manager_linux.go:273] "Creating Container Manager object based on Node Config" nodeConfig={"NodeName":"localhost","RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"ExperimentalMemoryManagerPolicy":"None","ExperimentalMemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null,"CgroupVersion":2} Jul 10 00:36:28.187269 kubelet[1602]: I0710 00:36:28.187248 1602 topology_manager.go:138] "Creating topology manager with none policy" Jul 10 00:36:28.187269 kubelet[1602]: I0710 00:36:28.187263 1602 container_manager_linux.go:304] "Creating device plugin manager" Jul 10 00:36:28.187418 kubelet[1602]: I0710 00:36:28.187398 1602 state_mem.go:36] "Initialized new in-memory state store" Jul 10 00:36:28.190237 kubelet[1602]: I0710 00:36:28.190206 1602 kubelet.go:446] "Attempting to sync node with API server" Jul 10 00:36:28.190295 kubelet[1602]: I0710 00:36:28.190243 1602 kubelet.go:341] "Adding static pod path" path="/etc/kubernetes/manifests" Jul 10 00:36:28.190295 kubelet[1602]: I0710 00:36:28.190265 1602 kubelet.go:352] "Adding apiserver pod source" Jul 10 00:36:28.190295 kubelet[1602]: I0710 00:36:28.190278 1602 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Jul 10 00:36:28.195283 kubelet[1602]: I0710 00:36:28.195261 1602 kuberuntime_manager.go:269] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Jul 10 00:36:28.195793 kubelet[1602]: I0710 00:36:28.195767 1602 kubelet.go:890] "Not starting ClusterTrustBundle informer because we are in static kubelet mode" Jul 10 00:36:28.211219 kubelet[1602]: W0710 00:36:28.211191 1602 probe.go:272] Flexvolume plugin directory at /opt/libexec/kubernetes/kubelet-plugins/volume/exec/ does not exist. Recreating. Jul 10 00:36:28.215400 kubelet[1602]: W0710 00:36:28.215356 1602 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Service: Get "https://10.0.0.36:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0": dial tcp 10.0.0.36:6443: connect: connection refused Jul 10 00:36:28.215400 kubelet[1602]: E0710 00:36:28.215392 1602 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Service: failed to list *v1.Service: Get \"https://10.0.0.36:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0\": dial tcp 10.0.0.36:6443: connect: connection refused" logger="UnhandledError" Jul 10 00:36:28.215804 kubelet[1602]: W0710 00:36:28.215730 1602 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Node: Get "https://10.0.0.36:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0": dial tcp 10.0.0.36:6443: connect: connection refused Jul 10 00:36:28.215857 kubelet[1602]: E0710 00:36:28.215812 1602 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Node: failed to list *v1.Node: Get \"https://10.0.0.36:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0\": dial tcp 10.0.0.36:6443: connect: connection refused" logger="UnhandledError" Jul 10 00:36:28.218091 kubelet[1602]: I0710 00:36:28.218066 1602 watchdog_linux.go:99] "Systemd watchdog is not enabled" Jul 10 00:36:28.218133 kubelet[1602]: I0710 00:36:28.218113 1602 server.go:1287] "Started kubelet" Jul 10 00:36:28.218000 audit[1602]: AVC avc: denied { mac_admin } for pid=1602 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:28.218000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 10 00:36:28.218000 audit[1602]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c00064d500 a1=c000a36000 a2=c00064d4d0 a3=25 items=0 ppid=1 pid=1602 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:36:28.218000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 10 00:36:28.218000 audit[1602]: AVC avc: denied { mac_admin } for pid=1602 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:28.218000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 10 00:36:28.218000 audit[1602]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c0005439c0 a1=c000a36018 a2=c00064d590 a3=25 items=0 ppid=1 pid=1602 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:36:28.218000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 10 00:36:28.219574 kubelet[1602]: I0710 00:36:28.219288 1602 kubelet.go:1507] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins_registry: invalid argument" Jul 10 00:36:28.219574 kubelet[1602]: I0710 00:36:28.219322 1602 kubelet.go:1511] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins: invalid argument" Jul 10 00:36:28.219574 kubelet[1602]: I0710 00:36:28.219403 1602 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Jul 10 00:36:28.221000 audit[1615]: NETFILTER_CFG table=mangle:26 family=2 entries=2 op=nft_register_chain pid=1615 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:36:28.221000 audit[1615]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7ffd6d9f0650 a2=0 a3=7ffd6d9f063c items=0 ppid=1602 pid=1615 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:36:28.221000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Jul 10 00:36:28.222000 audit[1616]: NETFILTER_CFG table=filter:27 family=2 entries=1 op=nft_register_chain pid=1616 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:36:28.222000 audit[1616]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffc949ea5e0 a2=0 a3=7ffc949ea5cc items=0 ppid=1602 pid=1616 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:36:28.222000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Jul 10 00:36:28.223668 kubelet[1602]: I0710 00:36:28.223604 1602 server.go:169] "Starting to listen" address="0.0.0.0" port=10250 Jul 10 00:36:28.224542 kubelet[1602]: I0710 00:36:28.224515 1602 server.go:479] "Adding debug handlers to kubelet server" Jul 10 00:36:28.225896 kubelet[1602]: I0710 00:36:28.225598 1602 dynamic_serving_content.go:135] "Starting controller" name="kubelet-server-cert-files::/var/lib/kubelet/pki/kubelet.crt::/var/lib/kubelet/pki/kubelet.key" Jul 10 00:36:28.225950 kubelet[1602]: I0710 00:36:28.225872 1602 ratelimit.go:55] "Setting rate limiting for endpoint" service="podresources" qps=100 burstTokens=10 Jul 10 00:36:28.226125 kubelet[1602]: I0710 00:36:28.226089 1602 server.go:243] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Jul 10 00:36:28.226176 kubelet[1602]: I0710 00:36:28.226167 1602 volume_manager.go:297] "Starting Kubelet Volume Manager" Jul 10 00:36:28.228783 kubelet[1602]: E0710 00:36:28.228754 1602 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 10 00:36:28.228914 kubelet[1602]: I0710 00:36:28.228898 1602 desired_state_of_world_populator.go:150] "Desired state populator starts to run" Jul 10 00:36:28.229062 kubelet[1602]: I0710 00:36:28.229037 1602 reconciler.go:26] "Reconciler: start to sync state" Jul 10 00:36:28.229344 kubelet[1602]: E0710 00:36:28.229312 1602 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.36:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.36:6443: connect: connection refused" interval="200ms" Jul 10 00:36:28.229000 audit[1618]: NETFILTER_CFG table=filter:28 family=2 entries=2 op=nft_register_chain pid=1618 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:36:28.229000 audit[1618]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7ffe3ee172c0 a2=0 a3=7ffe3ee172ac items=0 ppid=1602 pid=1618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:36:28.229000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Jul 10 00:36:28.231000 audit[1620]: NETFILTER_CFG table=filter:29 family=2 entries=2 op=nft_register_chain pid=1620 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:36:28.231000 audit[1620]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7ffe9dc5c750 a2=0 a3=7ffe9dc5c73c items=0 ppid=1602 pid=1620 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:36:28.231000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Jul 10 00:36:28.233216 kubelet[1602]: W0710 00:36:28.232910 1602 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.CSIDriver: Get "https://10.0.0.36:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.0.0.36:6443: connect: connection refused Jul 10 00:36:28.233216 kubelet[1602]: E0710 00:36:28.232994 1602 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get \"https://10.0.0.36:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0\": dial tcp 10.0.0.36:6443: connect: connection refused" logger="UnhandledError" Jul 10 00:36:28.233937 kubelet[1602]: E0710 00:36:28.233922 1602 kubelet.go:1555] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Jul 10 00:36:28.235015 kubelet[1602]: E0710 00:36:28.234062 1602 event.go:368] "Unable to write event (may retry after sleeping)" err="Post \"https://10.0.0.36:6443/api/v1/namespaces/default/events\": dial tcp 10.0.0.36:6443: connect: connection refused" event="&Event{ObjectMeta:{localhost.1850bcc014ef2cdf default 0 0001-01-01 00:00:00 +0000 UTC map[] map[] [] [] []},InvolvedObject:ObjectReference{Kind:Node,Namespace:,Name:localhost,UID:localhost,APIVersion:,ResourceVersion:,FieldPath:,},Reason:Starting,Message:Starting kubelet.,Source:EventSource{Component:kubelet,Host:localhost,},FirstTimestamp:2025-07-10 00:36:28.218084575 +0000 UTC m=+0.484309967,LastTimestamp:2025-07-10 00:36:28.218084575 +0000 UTC m=+0.484309967,Count:1,Type:Normal,EventTime:0001-01-01 00:00:00 +0000 UTC,Series:nil,Action:,Related:nil,ReportingController:kubelet,ReportingInstance:localhost,}" Jul 10 00:36:28.235380 kubelet[1602]: I0710 00:36:28.235366 1602 factory.go:221] Registration of the systemd container factory successfully Jul 10 00:36:28.235519 kubelet[1602]: I0710 00:36:28.235492 1602 factory.go:219] Registration of the crio container factory failed: Get "http://%2Fvar%2Frun%2Fcrio%2Fcrio.sock/info": dial unix /var/run/crio/crio.sock: connect: no such file or directory Jul 10 00:36:28.236857 kubelet[1602]: I0710 00:36:28.236844 1602 factory.go:221] Registration of the containerd container factory successfully Jul 10 00:36:28.243000 audit[1626]: NETFILTER_CFG table=filter:30 family=2 entries=1 op=nft_register_rule pid=1626 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:36:28.243000 audit[1626]: SYSCALL arch=c000003e syscall=46 success=yes exit=924 a0=3 a1=7ffd6a05a120 a2=0 a3=7ffd6a05a10c items=0 ppid=1602 pid=1626 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:36:28.243000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E7400626C6F636B20696E636F6D696E67206C6F63616C6E657420636F6E6E656374696F6E73002D2D647374003132372E302E302E302F38 Jul 10 00:36:28.244723 kubelet[1602]: I0710 00:36:28.244628 1602 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv4" Jul 10 00:36:28.244000 audit[1628]: NETFILTER_CFG table=mangle:31 family=10 entries=2 op=nft_register_chain pid=1628 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:36:28.244000 audit[1628]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7ffe44546980 a2=0 a3=7ffe4454696c items=0 ppid=1602 pid=1628 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:36:28.244000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Jul 10 00:36:28.244000 audit[1629]: NETFILTER_CFG table=mangle:32 family=2 entries=1 op=nft_register_chain pid=1629 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:36:28.244000 audit[1629]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fffb5296590 a2=0 a3=7fffb529657c items=0 ppid=1602 pid=1629 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:36:28.244000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Jul 10 00:36:28.245833 kubelet[1602]: I0710 00:36:28.245663 1602 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv6" Jul 10 00:36:28.245833 kubelet[1602]: I0710 00:36:28.245696 1602 status_manager.go:227] "Starting to sync pod status with apiserver" Jul 10 00:36:28.245833 kubelet[1602]: I0710 00:36:28.245721 1602 watchdog_linux.go:127] "Systemd watchdog is not enabled or the interval is invalid, so health checking will not be started." Jul 10 00:36:28.245833 kubelet[1602]: I0710 00:36:28.245739 1602 kubelet.go:2382] "Starting kubelet main sync loop" Jul 10 00:36:28.245833 kubelet[1602]: E0710 00:36:28.245784 1602 kubelet.go:2406] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Jul 10 00:36:28.246466 kubelet[1602]: W0710 00:36:28.246418 1602 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.RuntimeClass: Get "https://10.0.0.36:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.0.0.36:6443: connect: connection refused Jul 10 00:36:28.246496 kubelet[1602]: E0710 00:36:28.246468 1602 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get \"https://10.0.0.36:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0\": dial tcp 10.0.0.36:6443: connect: connection refused" logger="UnhandledError" Jul 10 00:36:28.246000 audit[1631]: NETFILTER_CFG table=mangle:33 family=10 entries=1 op=nft_register_chain pid=1631 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:36:28.246000 audit[1631]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fff6f141200 a2=0 a3=7fff6f1411ec items=0 ppid=1602 pid=1631 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:36:28.246000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Jul 10 00:36:28.247030 kubelet[1602]: I0710 00:36:28.246984 1602 cpu_manager.go:221] "Starting CPU manager" policy="none" Jul 10 00:36:28.247030 kubelet[1602]: I0710 00:36:28.246995 1602 cpu_manager.go:222] "Reconciling" reconcilePeriod="10s" Jul 10 00:36:28.247030 kubelet[1602]: I0710 00:36:28.247012 1602 state_mem.go:36] "Initialized new in-memory state store" Jul 10 00:36:28.247000 audit[1633]: NETFILTER_CFG table=nat:34 family=10 entries=2 op=nft_register_chain pid=1633 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:36:28.247000 audit[1633]: SYSCALL arch=c000003e syscall=46 success=yes exit=128 a0=3 a1=7ffc63a225b0 a2=0 a3=7ffc63a2259c items=0 ppid=1602 pid=1633 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:36:28.247000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Jul 10 00:36:28.247000 audit[1632]: NETFILTER_CFG table=nat:35 family=2 entries=1 op=nft_register_chain pid=1632 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:36:28.247000 audit[1632]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffd9c8fa8d0 a2=0 a3=7ffd9c8fa8bc items=0 ppid=1602 pid=1632 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:36:28.247000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Jul 10 00:36:28.248000 audit[1634]: NETFILTER_CFG table=filter:36 family=2 entries=1 op=nft_register_chain pid=1634 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:36:28.248000 audit[1634]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fff58cb7780 a2=0 a3=7fff58cb776c items=0 ppid=1602 pid=1634 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:36:28.248000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Jul 10 00:36:28.248000 audit[1635]: NETFILTER_CFG table=filter:37 family=10 entries=2 op=nft_register_chain pid=1635 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:36:28.248000 audit[1635]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7ffc7024bdf0 a2=0 a3=7ffc7024bddc items=0 ppid=1602 pid=1635 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:36:28.248000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Jul 10 00:36:28.329184 kubelet[1602]: E0710 00:36:28.329149 1602 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 10 00:36:28.346486 kubelet[1602]: E0710 00:36:28.346441 1602 kubelet.go:2406] "Skipping pod synchronization" err="container runtime status check may not have completed yet" Jul 10 00:36:28.429747 kubelet[1602]: E0710 00:36:28.429667 1602 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 10 00:36:28.430107 kubelet[1602]: E0710 00:36:28.430056 1602 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.36:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.36:6443: connect: connection refused" interval="400ms" Jul 10 00:36:28.530905 kubelet[1602]: E0710 00:36:28.530836 1602 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 10 00:36:28.547067 kubelet[1602]: E0710 00:36:28.547016 1602 kubelet.go:2406] "Skipping pod synchronization" err="container runtime status check may not have completed yet" Jul 10 00:36:28.631510 kubelet[1602]: E0710 00:36:28.631470 1602 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 10 00:36:28.732637 kubelet[1602]: E0710 00:36:28.732537 1602 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 10 00:36:28.797672 kubelet[1602]: I0710 00:36:28.797580 1602 policy_none.go:49] "None policy: Start" Jul 10 00:36:28.797771 kubelet[1602]: I0710 00:36:28.797728 1602 memory_manager.go:186] "Starting memorymanager" policy="None" Jul 10 00:36:28.797819 kubelet[1602]: I0710 00:36:28.797806 1602 state_mem.go:35] "Initializing new in-memory state store" Jul 10 00:36:28.804178 systemd[1]: Created slice kubepods.slice. Jul 10 00:36:28.808113 systemd[1]: Created slice kubepods-burstable.slice. Jul 10 00:36:28.810474 systemd[1]: Created slice kubepods-besteffort.slice. Jul 10 00:36:28.819088 kubelet[1602]: I0710 00:36:28.819040 1602 manager.go:519] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Jul 10 00:36:28.817000 audit[1602]: AVC avc: denied { mac_admin } for pid=1602 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:28.817000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 10 00:36:28.817000 audit[1602]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000624f90 a1=c00005b1e8 a2=c000624f60 a3=25 items=0 ppid=1 pid=1602 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:36:28.817000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 10 00:36:28.819362 kubelet[1602]: I0710 00:36:28.819131 1602 server.go:94] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/device-plugins/: invalid argument" Jul 10 00:36:28.819362 kubelet[1602]: I0710 00:36:28.819265 1602 eviction_manager.go:189] "Eviction manager: starting control loop" Jul 10 00:36:28.819362 kubelet[1602]: I0710 00:36:28.819280 1602 container_log_manager.go:189] "Initializing container log rotate workers" workers=1 monitorPeriod="10s" Jul 10 00:36:28.819997 kubelet[1602]: I0710 00:36:28.819971 1602 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Jul 10 00:36:28.820530 kubelet[1602]: E0710 00:36:28.820396 1602 eviction_manager.go:267] "eviction manager: failed to check if we have separate container filesystem. Ignoring." err="no imagefs label for configured runtime" Jul 10 00:36:28.820530 kubelet[1602]: E0710 00:36:28.820471 1602 eviction_manager.go:292] "Eviction manager: failed to get summary stats" err="failed to get node info: node \"localhost\" not found" Jul 10 00:36:28.830606 kubelet[1602]: E0710 00:36:28.830559 1602 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.36:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.36:6443: connect: connection refused" interval="800ms" Jul 10 00:36:28.921041 kubelet[1602]: I0710 00:36:28.920996 1602 kubelet_node_status.go:75] "Attempting to register node" node="localhost" Jul 10 00:36:28.921465 kubelet[1602]: E0710 00:36:28.921430 1602 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://10.0.0.36:6443/api/v1/nodes\": dial tcp 10.0.0.36:6443: connect: connection refused" node="localhost" Jul 10 00:36:28.954111 systemd[1]: Created slice kubepods-burstable-pod8a75e163f27396b2168da0f88f85f8a5.slice. Jul 10 00:36:28.960418 kubelet[1602]: E0710 00:36:28.960379 1602 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Jul 10 00:36:28.962496 systemd[1]: Created slice kubepods-burstable-pod10c584d49c1e7d7baaedeae4d1fc5bba.slice. Jul 10 00:36:28.970509 kubelet[1602]: E0710 00:36:28.970490 1602 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Jul 10 00:36:28.972708 systemd[1]: Created slice kubepods-burstable-podd1af03769b64da1b1e8089a7035018fc.slice. Jul 10 00:36:28.974054 kubelet[1602]: E0710 00:36:28.974035 1602 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Jul 10 00:36:29.033560 kubelet[1602]: I0710 00:36:29.033483 1602 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/d1af03769b64da1b1e8089a7035018fc-ca-certs\") pod \"kube-controller-manager-localhost\" (UID: \"d1af03769b64da1b1e8089a7035018fc\") " pod="kube-system/kube-controller-manager-localhost" Jul 10 00:36:29.033560 kubelet[1602]: I0710 00:36:29.033521 1602 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/d1af03769b64da1b1e8089a7035018fc-flexvolume-dir\") pod \"kube-controller-manager-localhost\" (UID: \"d1af03769b64da1b1e8089a7035018fc\") " pod="kube-system/kube-controller-manager-localhost" Jul 10 00:36:29.033560 kubelet[1602]: I0710 00:36:29.033553 1602 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/d1af03769b64da1b1e8089a7035018fc-kubeconfig\") pod \"kube-controller-manager-localhost\" (UID: \"d1af03769b64da1b1e8089a7035018fc\") " pod="kube-system/kube-controller-manager-localhost" Jul 10 00:36:29.033677 kubelet[1602]: I0710 00:36:29.033581 1602 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/d1af03769b64da1b1e8089a7035018fc-usr-share-ca-certificates\") pod \"kube-controller-manager-localhost\" (UID: \"d1af03769b64da1b1e8089a7035018fc\") " pod="kube-system/kube-controller-manager-localhost" Jul 10 00:36:29.033677 kubelet[1602]: I0710 00:36:29.033635 1602 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/8a75e163f27396b2168da0f88f85f8a5-kubeconfig\") pod \"kube-scheduler-localhost\" (UID: \"8a75e163f27396b2168da0f88f85f8a5\") " pod="kube-system/kube-scheduler-localhost" Jul 10 00:36:29.033842 kubelet[1602]: I0710 00:36:29.033676 1602 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/10c584d49c1e7d7baaedeae4d1fc5bba-k8s-certs\") pod \"kube-apiserver-localhost\" (UID: \"10c584d49c1e7d7baaedeae4d1fc5bba\") " pod="kube-system/kube-apiserver-localhost" Jul 10 00:36:29.033842 kubelet[1602]: I0710 00:36:29.033698 1602 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/10c584d49c1e7d7baaedeae4d1fc5bba-usr-share-ca-certificates\") pod \"kube-apiserver-localhost\" (UID: \"10c584d49c1e7d7baaedeae4d1fc5bba\") " pod="kube-system/kube-apiserver-localhost" Jul 10 00:36:29.033842 kubelet[1602]: I0710 00:36:29.033715 1602 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/10c584d49c1e7d7baaedeae4d1fc5bba-ca-certs\") pod \"kube-apiserver-localhost\" (UID: \"10c584d49c1e7d7baaedeae4d1fc5bba\") " pod="kube-system/kube-apiserver-localhost" Jul 10 00:36:29.033842 kubelet[1602]: I0710 00:36:29.033738 1602 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/d1af03769b64da1b1e8089a7035018fc-k8s-certs\") pod \"kube-controller-manager-localhost\" (UID: \"d1af03769b64da1b1e8089a7035018fc\") " pod="kube-system/kube-controller-manager-localhost" Jul 10 00:36:29.119113 kubelet[1602]: W0710 00:36:29.119061 1602 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.CSIDriver: Get "https://10.0.0.36:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.0.0.36:6443: connect: connection refused Jul 10 00:36:29.119197 kubelet[1602]: E0710 00:36:29.119128 1602 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get \"https://10.0.0.36:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0\": dial tcp 10.0.0.36:6443: connect: connection refused" logger="UnhandledError" Jul 10 00:36:29.123723 kubelet[1602]: I0710 00:36:29.123692 1602 kubelet_node_status.go:75] "Attempting to register node" node="localhost" Jul 10 00:36:29.124058 kubelet[1602]: E0710 00:36:29.124036 1602 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://10.0.0.36:6443/api/v1/nodes\": dial tcp 10.0.0.36:6443: connect: connection refused" node="localhost" Jul 10 00:36:29.261756 kubelet[1602]: E0710 00:36:29.261712 1602 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:36:29.262365 env[1205]: time="2025-07-10T00:36:29.262317942Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-localhost,Uid:8a75e163f27396b2168da0f88f85f8a5,Namespace:kube-system,Attempt:0,}" Jul 10 00:36:29.272527 kubelet[1602]: E0710 00:36:29.272473 1602 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:36:29.272876 kubelet[1602]: W0710 00:36:29.272817 1602 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Service: Get "https://10.0.0.36:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0": dial tcp 10.0.0.36:6443: connect: connection refused Jul 10 00:36:29.272941 kubelet[1602]: E0710 00:36:29.272891 1602 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Service: failed to list *v1.Service: Get \"https://10.0.0.36:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0\": dial tcp 10.0.0.36:6443: connect: connection refused" logger="UnhandledError" Jul 10 00:36:29.272981 env[1205]: time="2025-07-10T00:36:29.272865783Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-localhost,Uid:10c584d49c1e7d7baaedeae4d1fc5bba,Namespace:kube-system,Attempt:0,}" Jul 10 00:36:29.274296 kubelet[1602]: E0710 00:36:29.274266 1602 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:36:29.274680 env[1205]: time="2025-07-10T00:36:29.274619435Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-localhost,Uid:d1af03769b64da1b1e8089a7035018fc,Namespace:kube-system,Attempt:0,}" Jul 10 00:36:29.526305 kubelet[1602]: I0710 00:36:29.526171 1602 kubelet_node_status.go:75] "Attempting to register node" node="localhost" Jul 10 00:36:29.526627 kubelet[1602]: E0710 00:36:29.526576 1602 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://10.0.0.36:6443/api/v1/nodes\": dial tcp 10.0.0.36:6443: connect: connection refused" node="localhost" Jul 10 00:36:29.632209 kubelet[1602]: E0710 00:36:29.632153 1602 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.36:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.36:6443: connect: connection refused" interval="1.6s" Jul 10 00:36:29.677241 kubelet[1602]: W0710 00:36:29.677157 1602 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.RuntimeClass: Get "https://10.0.0.36:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.0.0.36:6443: connect: connection refused Jul 10 00:36:29.677241 kubelet[1602]: E0710 00:36:29.677228 1602 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get \"https://10.0.0.36:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0\": dial tcp 10.0.0.36:6443: connect: connection refused" logger="UnhandledError" Jul 10 00:36:29.747060 kubelet[1602]: W0710 00:36:29.746946 1602 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Node: Get "https://10.0.0.36:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0": dial tcp 10.0.0.36:6443: connect: connection refused Jul 10 00:36:29.747060 kubelet[1602]: E0710 00:36:29.747059 1602 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Node: failed to list *v1.Node: Get \"https://10.0.0.36:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0\": dial tcp 10.0.0.36:6443: connect: connection refused" logger="UnhandledError" Jul 10 00:36:29.941721 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3329267121.mount: Deactivated successfully. Jul 10 00:36:29.948341 env[1205]: time="2025-07-10T00:36:29.948295106Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:36:29.951008 env[1205]: time="2025-07-10T00:36:29.950957451Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:36:29.952592 env[1205]: time="2025-07-10T00:36:29.952557545Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:36:29.953423 env[1205]: time="2025-07-10T00:36:29.953392411Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:36:29.955156 env[1205]: time="2025-07-10T00:36:29.955127467Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:36:29.956424 env[1205]: time="2025-07-10T00:36:29.956393236Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:36:29.957675 env[1205]: time="2025-07-10T00:36:29.957629583Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:36:29.958907 env[1205]: time="2025-07-10T00:36:29.958884707Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:36:29.960179 env[1205]: time="2025-07-10T00:36:29.960145229Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:36:29.964417 env[1205]: time="2025-07-10T00:36:29.964380738Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:36:29.965703 env[1205]: time="2025-07-10T00:36:29.965680565Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:36:29.967222 env[1205]: time="2025-07-10T00:36:29.967201557Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:36:30.003151 env[1205]: time="2025-07-10T00:36:30.003048158Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 10 00:36:30.003299 env[1205]: time="2025-07-10T00:36:30.003170990Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 10 00:36:30.003299 env[1205]: time="2025-07-10T00:36:30.003207334Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 10 00:36:30.004869 env[1205]: time="2025-07-10T00:36:30.003422882Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/ef95628842e287e70483f293df8a7d2e4b25e35584c58939b988784f9b13e69f pid=1653 runtime=io.containerd.runc.v2 Jul 10 00:36:30.008068 env[1205]: time="2025-07-10T00:36:30.007896695Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 10 00:36:30.008068 env[1205]: time="2025-07-10T00:36:30.007933789Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 10 00:36:30.008068 env[1205]: time="2025-07-10T00:36:30.007950915Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 10 00:36:30.008211 env[1205]: time="2025-07-10T00:36:30.008076670Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/0f3f8256f6862d6584245719a042e9a99984f73c9efb43fdb3f474aa9ebf695b pid=1671 runtime=io.containerd.runc.v2 Jul 10 00:36:30.009377 env[1205]: time="2025-07-10T00:36:30.009141023Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 10 00:36:30.009377 env[1205]: time="2025-07-10T00:36:30.009197867Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 10 00:36:30.009377 env[1205]: time="2025-07-10T00:36:30.009245567Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 10 00:36:30.009535 env[1205]: time="2025-07-10T00:36:30.009436259Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/9eaf05705f5841fe92b16ad87a0771b1f74b7dbd1a826f42235ec3ecf48db46c pid=1649 runtime=io.containerd.runc.v2 Jul 10 00:36:30.078490 systemd[1]: Started cri-containerd-ef95628842e287e70483f293df8a7d2e4b25e35584c58939b988784f9b13e69f.scope. Jul 10 00:36:30.086545 systemd[1]: Started cri-containerd-0f3f8256f6862d6584245719a042e9a99984f73c9efb43fdb3f474aa9ebf695b.scope. Jul 10 00:36:30.092980 systemd[1]: Started cri-containerd-9eaf05705f5841fe92b16ad87a0771b1f74b7dbd1a826f42235ec3ecf48db46c.scope. Jul 10 00:36:30.178000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.178000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.178000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.178000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.178000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.178000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.178000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.178000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.178000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.220000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.220000 audit: BPF prog-id=58 op=LOAD Jul 10 00:36:30.221000 audit[1684]: AVC avc: denied { bpf } for pid=1684 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.221000 audit[1684]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=1671 pid=1684 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:36:30.221000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3066336638323536663638363264363538343234353731396130343265 Jul 10 00:36:30.221000 audit[1684]: AVC avc: denied { perfmon } for pid=1684 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.221000 audit[1684]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=1671 pid=1684 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:36:30.221000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3066336638323536663638363264363538343234353731396130343265 Jul 10 00:36:30.221000 audit[1684]: AVC avc: denied { bpf } for pid=1684 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.221000 audit[1684]: AVC avc: denied { bpf } for pid=1684 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.221000 audit[1684]: AVC avc: denied { bpf } for pid=1684 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.221000 audit[1684]: AVC avc: denied { perfmon } for pid=1684 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.221000 audit[1684]: AVC avc: denied { perfmon } for pid=1684 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.221000 audit[1684]: AVC avc: denied { perfmon } for pid=1684 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.221000 audit[1684]: AVC avc: denied { perfmon } for pid=1684 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.221000 audit[1684]: AVC avc: denied { perfmon } for pid=1684 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.221000 audit[1684]: AVC avc: denied { bpf } for pid=1684 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.221000 audit[1684]: AVC avc: denied { bpf } for pid=1684 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.221000 audit: BPF prog-id=59 op=LOAD Jul 10 00:36:30.221000 audit[1684]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c000210cf0 items=0 ppid=1671 pid=1684 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:36:30.221000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3066336638323536663638363264363538343234353731396130343265 Jul 10 00:36:30.222000 audit[1684]: AVC avc: denied { bpf } for pid=1684 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.222000 audit[1684]: AVC avc: denied { bpf } for pid=1684 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.222000 audit[1684]: AVC avc: denied { perfmon } for pid=1684 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.222000 audit[1684]: AVC avc: denied { perfmon } for pid=1684 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.222000 audit[1684]: AVC avc: denied { perfmon } for pid=1684 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.222000 audit[1684]: AVC avc: denied { perfmon } for pid=1684 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.222000 audit[1684]: AVC avc: denied { perfmon } for pid=1684 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.222000 audit[1684]: AVC avc: denied { bpf } for pid=1684 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.222000 audit[1684]: AVC avc: denied { bpf } for pid=1684 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.222000 audit: BPF prog-id=60 op=LOAD Jul 10 00:36:30.222000 audit[1684]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c000210d38 items=0 ppid=1671 pid=1684 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:36:30.222000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3066336638323536663638363264363538343234353731396130343265 Jul 10 00:36:30.222000 audit: BPF prog-id=60 op=UNLOAD Jul 10 00:36:30.223000 audit: BPF prog-id=59 op=UNLOAD Jul 10 00:36:30.223000 audit[1684]: AVC avc: denied { bpf } for pid=1684 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.223000 audit[1684]: AVC avc: denied { bpf } for pid=1684 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.223000 audit[1684]: AVC avc: denied { bpf } for pid=1684 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.223000 audit[1684]: AVC avc: denied { perfmon } for pid=1684 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.223000 audit[1684]: AVC avc: denied { perfmon } for pid=1684 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.223000 audit[1684]: AVC avc: denied { perfmon } for pid=1684 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.223000 audit[1684]: AVC avc: denied { perfmon } for pid=1684 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.223000 audit[1684]: AVC avc: denied { perfmon } for pid=1684 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.223000 audit[1684]: AVC avc: denied { bpf } for pid=1684 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.223000 audit[1684]: AVC avc: denied { bpf } for pid=1684 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.223000 audit: BPF prog-id=61 op=LOAD Jul 10 00:36:30.223000 audit[1684]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c000211148 items=0 ppid=1671 pid=1684 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:36:30.223000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3066336638323536663638363264363538343234353731396130343265 Jul 10 00:36:30.223000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.223000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.223000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.223000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.223000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.223000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.223000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.223000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.223000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.223000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.223000 audit: BPF prog-id=62 op=LOAD Jul 10 00:36:30.227000 audit[1687]: AVC avc: denied { bpf } for pid=1687 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.227000 audit[1687]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00011fc48 a2=10 a3=1c items=0 ppid=1649 pid=1687 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:36:30.227000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3965616630353730356635383431666539326231366164383761303737 Jul 10 00:36:30.227000 audit[1687]: AVC avc: denied { perfmon } for pid=1687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.227000 audit[1687]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c00011f6b0 a2=3c a3=c items=0 ppid=1649 pid=1687 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:36:30.227000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3965616630353730356635383431666539326231366164383761303737 Jul 10 00:36:30.227000 audit[1687]: AVC avc: denied { bpf } for pid=1687 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.227000 audit[1687]: AVC avc: denied { bpf } for pid=1687 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.227000 audit[1687]: AVC avc: denied { bpf } for pid=1687 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.227000 audit[1687]: AVC avc: denied { perfmon } for pid=1687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.227000 audit[1687]: AVC avc: denied { perfmon } for pid=1687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.227000 audit[1687]: AVC avc: denied { perfmon } for pid=1687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.227000 audit[1687]: AVC avc: denied { perfmon } for pid=1687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.227000 audit[1687]: AVC avc: denied { perfmon } for pid=1687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.227000 audit[1687]: AVC avc: denied { bpf } for pid=1687 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.227000 audit[1687]: AVC avc: denied { bpf } for pid=1687 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.227000 audit: BPF prog-id=63 op=LOAD Jul 10 00:36:30.227000 audit[1687]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c00011f9d8 a2=78 a3=c0003f23a0 items=0 ppid=1649 pid=1687 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:36:30.227000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3965616630353730356635383431666539326231366164383761303737 Jul 10 00:36:30.227000 audit[1687]: AVC avc: denied { bpf } for pid=1687 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.227000 audit[1687]: AVC avc: denied { bpf } for pid=1687 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.227000 audit[1687]: AVC avc: denied { perfmon } for pid=1687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.227000 audit[1687]: AVC avc: denied { perfmon } for pid=1687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.227000 audit[1687]: AVC avc: denied { perfmon } for pid=1687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.227000 audit[1687]: AVC avc: denied { perfmon } for pid=1687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.227000 audit[1687]: AVC avc: denied { perfmon } for pid=1687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.227000 audit[1687]: AVC avc: denied { bpf } for pid=1687 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.227000 audit[1687]: AVC avc: denied { bpf } for pid=1687 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.227000 audit: BPF prog-id=64 op=LOAD Jul 10 00:36:30.227000 audit[1687]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c00011f770 a2=78 a3=c0003f23e8 items=0 ppid=1649 pid=1687 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:36:30.227000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3965616630353730356635383431666539326231366164383761303737 Jul 10 00:36:30.227000 audit: BPF prog-id=64 op=UNLOAD Jul 10 00:36:30.227000 audit: BPF prog-id=63 op=UNLOAD Jul 10 00:36:30.227000 audit[1687]: AVC avc: denied { bpf } for pid=1687 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.227000 audit[1687]: AVC avc: denied { bpf } for pid=1687 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.227000 audit[1687]: AVC avc: denied { bpf } for pid=1687 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.227000 audit[1687]: AVC avc: denied { perfmon } for pid=1687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.227000 audit[1687]: AVC avc: denied { perfmon } for pid=1687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.227000 audit[1687]: AVC avc: denied { perfmon } for pid=1687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.227000 audit[1687]: AVC avc: denied { perfmon } for pid=1687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.227000 audit[1687]: AVC avc: denied { perfmon } for pid=1687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.227000 audit[1687]: AVC avc: denied { bpf } for pid=1687 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.227000 audit[1687]: AVC avc: denied { bpf } for pid=1687 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.227000 audit: BPF prog-id=65 op=LOAD Jul 10 00:36:30.227000 audit[1687]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c00011fc30 a2=78 a3=c0003f27f8 items=0 ppid=1649 pid=1687 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:36:30.227000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3965616630353730356635383431666539326231366164383761303737 Jul 10 00:36:30.228000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.228000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.228000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.228000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.228000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.228000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.228000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.228000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.228000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.228000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.228000 audit: BPF prog-id=66 op=LOAD Jul 10 00:36:30.229000 audit[1673]: AVC avc: denied { bpf } for pid=1673 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.229000 audit[1673]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=1653 pid=1673 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:36:30.229000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6566393536323838343265323837653730343833663239336466386137 Jul 10 00:36:30.229000 audit[1673]: AVC avc: denied { perfmon } for pid=1673 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.229000 audit[1673]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=1653 pid=1673 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:36:30.229000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6566393536323838343265323837653730343833663239336466386137 Jul 10 00:36:30.229000 audit[1673]: AVC avc: denied { bpf } for pid=1673 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.229000 audit[1673]: AVC avc: denied { bpf } for pid=1673 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.229000 audit[1673]: AVC avc: denied { bpf } for pid=1673 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.229000 audit[1673]: AVC avc: denied { perfmon } for pid=1673 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.229000 audit[1673]: AVC avc: denied { perfmon } for pid=1673 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.229000 audit[1673]: AVC avc: denied { perfmon } for pid=1673 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.229000 audit[1673]: AVC avc: denied { perfmon } for pid=1673 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.229000 audit[1673]: AVC avc: denied { perfmon } for pid=1673 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.229000 audit[1673]: AVC avc: denied { bpf } for pid=1673 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.229000 audit[1673]: AVC avc: denied { bpf } for pid=1673 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.229000 audit: BPF prog-id=67 op=LOAD Jul 10 00:36:30.229000 audit[1673]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0003de2f0 items=0 ppid=1653 pid=1673 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:36:30.229000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6566393536323838343265323837653730343833663239336466386137 Jul 10 00:36:30.229000 audit[1673]: AVC avc: denied { bpf } for pid=1673 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.229000 audit[1673]: AVC avc: denied { bpf } for pid=1673 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.229000 audit[1673]: AVC avc: denied { perfmon } for pid=1673 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.229000 audit[1673]: AVC avc: denied { perfmon } for pid=1673 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.229000 audit[1673]: AVC avc: denied { perfmon } for pid=1673 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.229000 audit[1673]: AVC avc: denied { perfmon } for pid=1673 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.229000 audit[1673]: AVC avc: denied { perfmon } for pid=1673 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.229000 audit[1673]: AVC avc: denied { bpf } for pid=1673 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.229000 audit[1673]: AVC avc: denied { bpf } for pid=1673 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.229000 audit: BPF prog-id=68 op=LOAD Jul 10 00:36:30.229000 audit[1673]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0003de338 items=0 ppid=1653 pid=1673 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:36:30.229000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6566393536323838343265323837653730343833663239336466386137 Jul 10 00:36:30.229000 audit: BPF prog-id=68 op=UNLOAD Jul 10 00:36:30.229000 audit: BPF prog-id=67 op=UNLOAD Jul 10 00:36:30.230000 audit[1673]: AVC avc: denied { bpf } for pid=1673 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.230000 audit[1673]: AVC avc: denied { bpf } for pid=1673 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.230000 audit[1673]: AVC avc: denied { bpf } for pid=1673 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.230000 audit[1673]: AVC avc: denied { perfmon } for pid=1673 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.230000 audit[1673]: AVC avc: denied { perfmon } for pid=1673 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.230000 audit[1673]: AVC avc: denied { perfmon } for pid=1673 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.230000 audit[1673]: AVC avc: denied { perfmon } for pid=1673 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.230000 audit[1673]: AVC avc: denied { perfmon } for pid=1673 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.230000 audit[1673]: AVC avc: denied { bpf } for pid=1673 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.230000 audit[1673]: AVC avc: denied { bpf } for pid=1673 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.230000 audit: BPF prog-id=69 op=LOAD Jul 10 00:36:30.230000 audit[1673]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0003de748 items=0 ppid=1653 pid=1673 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:36:30.230000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6566393536323838343265323837653730343833663239336466386137 Jul 10 00:36:30.256020 env[1205]: time="2025-07-10T00:36:30.255910058Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-localhost,Uid:d1af03769b64da1b1e8089a7035018fc,Namespace:kube-system,Attempt:0,} returns sandbox id \"0f3f8256f6862d6584245719a042e9a99984f73c9efb43fdb3f474aa9ebf695b\"" Jul 10 00:36:30.260013 kubelet[1602]: E0710 00:36:30.259961 1602 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:36:30.263051 env[1205]: time="2025-07-10T00:36:30.263012414Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-localhost,Uid:10c584d49c1e7d7baaedeae4d1fc5bba,Namespace:kube-system,Attempt:0,} returns sandbox id \"9eaf05705f5841fe92b16ad87a0771b1f74b7dbd1a826f42235ec3ecf48db46c\"" Jul 10 00:36:30.264980 env[1205]: time="2025-07-10T00:36:30.264934876Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-localhost,Uid:8a75e163f27396b2168da0f88f85f8a5,Namespace:kube-system,Attempt:0,} returns sandbox id \"ef95628842e287e70483f293df8a7d2e4b25e35584c58939b988784f9b13e69f\"" Jul 10 00:36:30.265108 env[1205]: time="2025-07-10T00:36:30.265031939Z" level=info msg="CreateContainer within sandbox \"0f3f8256f6862d6584245719a042e9a99984f73c9efb43fdb3f474aa9ebf695b\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:0,}" Jul 10 00:36:30.265782 kubelet[1602]: E0710 00:36:30.265749 1602 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:36:30.266021 kubelet[1602]: E0710 00:36:30.266000 1602 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:36:30.267023 env[1205]: time="2025-07-10T00:36:30.266996663Z" level=info msg="CreateContainer within sandbox \"ef95628842e287e70483f293df8a7d2e4b25e35584c58939b988784f9b13e69f\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:0,}" Jul 10 00:36:30.267936 env[1205]: time="2025-07-10T00:36:30.267887520Z" level=info msg="CreateContainer within sandbox \"9eaf05705f5841fe92b16ad87a0771b1f74b7dbd1a826f42235ec3ecf48db46c\" for container &ContainerMetadata{Name:kube-apiserver,Attempt:0,}" Jul 10 00:36:30.278577 kubelet[1602]: E0710 00:36:30.278530 1602 certificate_manager.go:562] "Unhandled Error" err="kubernetes.io/kube-apiserver-client-kubelet: Failed while requesting a signed certificate from the control plane: cannot create certificate signing request: Post \"https://10.0.0.36:6443/apis/certificates.k8s.io/v1/certificatesigningrequests\": dial tcp 10.0.0.36:6443: connect: connection refused" logger="UnhandledError" Jul 10 00:36:30.286027 env[1205]: time="2025-07-10T00:36:30.285974292Z" level=info msg="CreateContainer within sandbox \"0f3f8256f6862d6584245719a042e9a99984f73c9efb43fdb3f474aa9ebf695b\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:0,} returns container id \"a40395fd3b0b8cba8370d6bdf5d4844077da1a4722c2d2a5373d438f8dcbf836\"" Jul 10 00:36:30.286579 env[1205]: time="2025-07-10T00:36:30.286555722Z" level=info msg="StartContainer for \"a40395fd3b0b8cba8370d6bdf5d4844077da1a4722c2d2a5373d438f8dcbf836\"" Jul 10 00:36:30.300203 env[1205]: time="2025-07-10T00:36:30.300157736Z" level=info msg="CreateContainer within sandbox \"ef95628842e287e70483f293df8a7d2e4b25e35584c58939b988784f9b13e69f\" for &ContainerMetadata{Name:kube-scheduler,Attempt:0,} returns container id \"d0b5526fa1e561b0f66f45197aa2ace3eb9e1758283d60d94352781b7e7dab0f\"" Jul 10 00:36:30.300935 env[1205]: time="2025-07-10T00:36:30.300908525Z" level=info msg="StartContainer for \"d0b5526fa1e561b0f66f45197aa2ace3eb9e1758283d60d94352781b7e7dab0f\"" Jul 10 00:36:30.303520 systemd[1]: Started cri-containerd-a40395fd3b0b8cba8370d6bdf5d4844077da1a4722c2d2a5373d438f8dcbf836.scope. Jul 10 00:36:30.303818 env[1205]: time="2025-07-10T00:36:30.303744467Z" level=info msg="CreateContainer within sandbox \"9eaf05705f5841fe92b16ad87a0771b1f74b7dbd1a826f42235ec3ecf48db46c\" for &ContainerMetadata{Name:kube-apiserver,Attempt:0,} returns container id \"8a17cc70102fbe9ffbd87d9dfe1f4984a45a4501f8f6af7cfcd5ed526d64f283\"" Jul 10 00:36:30.304418 env[1205]: time="2025-07-10T00:36:30.304332857Z" level=info msg="StartContainer for \"8a17cc70102fbe9ffbd87d9dfe1f4984a45a4501f8f6af7cfcd5ed526d64f283\"" Jul 10 00:36:30.316550 systemd[1]: Started cri-containerd-d0b5526fa1e561b0f66f45197aa2ace3eb9e1758283d60d94352781b7e7dab0f.scope. Jul 10 00:36:30.322000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.322000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.322000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.322000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.322000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.322000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.322000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.322000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.322000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.323000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.323000 audit: BPF prog-id=70 op=LOAD Jul 10 00:36:30.323000 audit[1771]: AVC avc: denied { bpf } for pid=1771 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.323000 audit[1771]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=1671 pid=1771 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:36:30.323000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6134303339356664336230623863626138333730643662646635643438 Jul 10 00:36:30.323000 audit[1771]: AVC avc: denied { perfmon } for pid=1771 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.323000 audit[1771]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=1671 pid=1771 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:36:30.323000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6134303339356664336230623863626138333730643662646635643438 Jul 10 00:36:30.323000 audit[1771]: AVC avc: denied { bpf } for pid=1771 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.323000 audit[1771]: AVC avc: denied { bpf } for pid=1771 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.323000 audit[1771]: AVC avc: denied { bpf } for pid=1771 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.323000 audit[1771]: AVC avc: denied { perfmon } for pid=1771 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.323000 audit[1771]: AVC avc: denied { perfmon } for pid=1771 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.323000 audit[1771]: AVC avc: denied { perfmon } for pid=1771 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.323000 audit[1771]: AVC avc: denied { perfmon } for pid=1771 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.323000 audit[1771]: AVC avc: denied { perfmon } for pid=1771 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.323000 audit[1771]: AVC avc: denied { bpf } for pid=1771 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.323000 audit[1771]: AVC avc: denied { bpf } for pid=1771 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.323000 audit: BPF prog-id=71 op=LOAD Jul 10 00:36:30.323000 audit[1771]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c000212a70 items=0 ppid=1671 pid=1771 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:36:30.323000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6134303339356664336230623863626138333730643662646635643438 Jul 10 00:36:30.324000 audit[1771]: AVC avc: denied { bpf } for pid=1771 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.324000 audit[1771]: AVC avc: denied { bpf } for pid=1771 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.324000 audit[1771]: AVC avc: denied { perfmon } for pid=1771 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.324000 audit[1771]: AVC avc: denied { perfmon } for pid=1771 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.324000 audit[1771]: AVC avc: denied { perfmon } for pid=1771 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.324000 audit[1771]: AVC avc: denied { perfmon } for pid=1771 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.324000 audit[1771]: AVC avc: denied { perfmon } for pid=1771 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.324000 audit[1771]: AVC avc: denied { bpf } for pid=1771 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.324000 audit[1771]: AVC avc: denied { bpf } for pid=1771 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.324000 audit: BPF prog-id=72 op=LOAD Jul 10 00:36:30.324000 audit[1771]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c000212ab8 items=0 ppid=1671 pid=1771 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:36:30.324000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6134303339356664336230623863626138333730643662646635643438 Jul 10 00:36:30.325000 audit: BPF prog-id=72 op=UNLOAD Jul 10 00:36:30.325000 audit: BPF prog-id=71 op=UNLOAD Jul 10 00:36:30.325000 audit[1771]: AVC avc: denied { bpf } for pid=1771 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.325000 audit[1771]: AVC avc: denied { bpf } for pid=1771 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.325000 audit[1771]: AVC avc: denied { bpf } for pid=1771 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.325000 audit[1771]: AVC avc: denied { perfmon } for pid=1771 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.325000 audit[1771]: AVC avc: denied { perfmon } for pid=1771 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.325000 audit[1771]: AVC avc: denied { perfmon } for pid=1771 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.325000 audit[1771]: AVC avc: denied { perfmon } for pid=1771 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.325000 audit[1771]: AVC avc: denied { perfmon } for pid=1771 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.325000 audit[1771]: AVC avc: denied { bpf } for pid=1771 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.325000 audit[1771]: AVC avc: denied { bpf } for pid=1771 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.325000 audit: BPF prog-id=73 op=LOAD Jul 10 00:36:30.325000 audit[1771]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c000212ec8 items=0 ppid=1671 pid=1771 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:36:30.325000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6134303339356664336230623863626138333730643662646635643438 Jul 10 00:36:30.330509 kubelet[1602]: I0710 00:36:30.330313 1602 kubelet_node_status.go:75] "Attempting to register node" node="localhost" Jul 10 00:36:30.330371 systemd[1]: Started cri-containerd-8a17cc70102fbe9ffbd87d9dfe1f4984a45a4501f8f6af7cfcd5ed526d64f283.scope. Jul 10 00:36:30.330809 kubelet[1602]: E0710 00:36:30.330710 1602 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://10.0.0.36:6443/api/v1/nodes\": dial tcp 10.0.0.36:6443: connect: connection refused" node="localhost" Jul 10 00:36:30.332000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.332000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.332000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.332000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.332000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.332000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.332000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.332000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.332000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.332000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.332000 audit: BPF prog-id=74 op=LOAD Jul 10 00:36:30.333000 audit[1792]: AVC avc: denied { bpf } for pid=1792 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.333000 audit[1792]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=1653 pid=1792 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:36:30.333000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6430623535323666613165353631623066363666343531393761613261 Jul 10 00:36:30.333000 audit[1792]: AVC avc: denied { perfmon } for pid=1792 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.333000 audit[1792]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=1653 pid=1792 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:36:30.333000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6430623535323666613165353631623066363666343531393761613261 Jul 10 00:36:30.333000 audit[1792]: AVC avc: denied { bpf } for pid=1792 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.333000 audit[1792]: AVC avc: denied { bpf } for pid=1792 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.333000 audit[1792]: AVC avc: denied { bpf } for pid=1792 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.333000 audit[1792]: AVC avc: denied { perfmon } for pid=1792 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.333000 audit[1792]: AVC avc: denied { perfmon } for pid=1792 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.333000 audit[1792]: AVC avc: denied { perfmon } for pid=1792 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.333000 audit[1792]: AVC avc: denied { perfmon } for pid=1792 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.333000 audit[1792]: AVC avc: denied { perfmon } for pid=1792 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.333000 audit[1792]: AVC avc: denied { bpf } for pid=1792 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.333000 audit[1792]: AVC avc: denied { bpf } for pid=1792 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.333000 audit: BPF prog-id=75 op=LOAD Jul 10 00:36:30.333000 audit[1792]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c000380a00 items=0 ppid=1653 pid=1792 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:36:30.333000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6430623535323666613165353631623066363666343531393761613261 Jul 10 00:36:30.333000 audit[1792]: AVC avc: denied { bpf } for pid=1792 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.333000 audit[1792]: AVC avc: denied { bpf } for pid=1792 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.333000 audit[1792]: AVC avc: denied { perfmon } for pid=1792 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.333000 audit[1792]: AVC avc: denied { perfmon } for pid=1792 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.333000 audit[1792]: AVC avc: denied { perfmon } for pid=1792 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.333000 audit[1792]: AVC avc: denied { perfmon } for pid=1792 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.333000 audit[1792]: AVC avc: denied { perfmon } for pid=1792 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.333000 audit[1792]: AVC avc: denied { bpf } for pid=1792 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.333000 audit[1792]: AVC avc: denied { bpf } for pid=1792 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.333000 audit: BPF prog-id=76 op=LOAD Jul 10 00:36:30.333000 audit[1792]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c000380a48 items=0 ppid=1653 pid=1792 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:36:30.333000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6430623535323666613165353631623066363666343531393761613261 Jul 10 00:36:30.333000 audit: BPF prog-id=76 op=UNLOAD Jul 10 00:36:30.333000 audit: BPF prog-id=75 op=UNLOAD Jul 10 00:36:30.333000 audit[1792]: AVC avc: denied { bpf } for pid=1792 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.333000 audit[1792]: AVC avc: denied { bpf } for pid=1792 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.333000 audit[1792]: AVC avc: denied { bpf } for pid=1792 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.333000 audit[1792]: AVC avc: denied { perfmon } for pid=1792 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.333000 audit[1792]: AVC avc: denied { perfmon } for pid=1792 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.333000 audit[1792]: AVC avc: denied { perfmon } for pid=1792 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.333000 audit[1792]: AVC avc: denied { perfmon } for pid=1792 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.333000 audit[1792]: AVC avc: denied { perfmon } for pid=1792 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.333000 audit[1792]: AVC avc: denied { bpf } for pid=1792 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.333000 audit[1792]: AVC avc: denied { bpf } for pid=1792 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.333000 audit: BPF prog-id=77 op=LOAD Jul 10 00:36:30.333000 audit[1792]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c000380e58 items=0 ppid=1653 pid=1792 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:36:30.333000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6430623535323666613165353631623066363666343531393761613261 Jul 10 00:36:30.363000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.363000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.363000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.363000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.363000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.363000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.363000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.363000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.363000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.365000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.365000 audit: BPF prog-id=78 op=LOAD Jul 10 00:36:30.365000 audit[1807]: AVC avc: denied { bpf } for pid=1807 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.365000 audit[1807]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00014dc48 a2=10 a3=1c items=0 ppid=1649 pid=1807 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:36:30.365000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3861313763633730313032666265396666626438376439646665316634 Jul 10 00:36:30.365000 audit[1807]: AVC avc: denied { perfmon } for pid=1807 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.365000 audit[1807]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00014d6b0 a2=3c a3=8 items=0 ppid=1649 pid=1807 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:36:30.365000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3861313763633730313032666265396666626438376439646665316634 Jul 10 00:36:30.365000 audit[1807]: AVC avc: denied { bpf } for pid=1807 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.365000 audit[1807]: AVC avc: denied { bpf } for pid=1807 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.365000 audit[1807]: AVC avc: denied { bpf } for pid=1807 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.365000 audit[1807]: AVC avc: denied { perfmon } for pid=1807 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.365000 audit[1807]: AVC avc: denied { perfmon } for pid=1807 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.365000 audit[1807]: AVC avc: denied { perfmon } for pid=1807 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.365000 audit[1807]: AVC avc: denied { perfmon } for pid=1807 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.365000 audit[1807]: AVC avc: denied { perfmon } for pid=1807 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.365000 audit[1807]: AVC avc: denied { bpf } for pid=1807 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.365000 audit[1807]: AVC avc: denied { bpf } for pid=1807 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.365000 audit: BPF prog-id=79 op=LOAD Jul 10 00:36:30.365000 audit[1807]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014d9d8 a2=78 a3=c0003c8770 items=0 ppid=1649 pid=1807 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:36:30.365000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3861313763633730313032666265396666626438376439646665316634 Jul 10 00:36:30.366000 audit[1807]: AVC avc: denied { bpf } for pid=1807 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.366000 audit[1807]: AVC avc: denied { bpf } for pid=1807 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.366000 audit[1807]: AVC avc: denied { perfmon } for pid=1807 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.366000 audit[1807]: AVC avc: denied { perfmon } for pid=1807 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.366000 audit[1807]: AVC avc: denied { perfmon } for pid=1807 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.366000 audit[1807]: AVC avc: denied { perfmon } for pid=1807 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.366000 audit[1807]: AVC avc: denied { perfmon } for pid=1807 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.366000 audit[1807]: AVC avc: denied { bpf } for pid=1807 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.366000 audit[1807]: AVC avc: denied { bpf } for pid=1807 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.366000 audit: BPF prog-id=80 op=LOAD Jul 10 00:36:30.366000 audit[1807]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00014d770 a2=78 a3=c0003c87b8 items=0 ppid=1649 pid=1807 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:36:30.366000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3861313763633730313032666265396666626438376439646665316634 Jul 10 00:36:30.366000 audit: BPF prog-id=80 op=UNLOAD Jul 10 00:36:30.366000 audit: BPF prog-id=79 op=UNLOAD Jul 10 00:36:30.366000 audit[1807]: AVC avc: denied { bpf } for pid=1807 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.366000 audit[1807]: AVC avc: denied { bpf } for pid=1807 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.366000 audit[1807]: AVC avc: denied { bpf } for pid=1807 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.366000 audit[1807]: AVC avc: denied { perfmon } for pid=1807 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.366000 audit[1807]: AVC avc: denied { perfmon } for pid=1807 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.366000 audit[1807]: AVC avc: denied { perfmon } for pid=1807 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.366000 audit[1807]: AVC avc: denied { perfmon } for pid=1807 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.366000 audit[1807]: AVC avc: denied { perfmon } for pid=1807 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.366000 audit[1807]: AVC avc: denied { bpf } for pid=1807 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.366000 audit[1807]: AVC avc: denied { bpf } for pid=1807 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:30.366000 audit: BPF prog-id=81 op=LOAD Jul 10 00:36:30.366000 audit[1807]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014dc30 a2=78 a3=c0003c8bc8 items=0 ppid=1649 pid=1807 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:36:30.366000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3861313763633730313032666265396666626438376439646665316634 Jul 10 00:36:30.370971 env[1205]: time="2025-07-10T00:36:30.370911110Z" level=info msg="StartContainer for \"a40395fd3b0b8cba8370d6bdf5d4844077da1a4722c2d2a5373d438f8dcbf836\" returns successfully" Jul 10 00:36:30.385803 env[1205]: time="2025-07-10T00:36:30.385764404Z" level=info msg="StartContainer for \"d0b5526fa1e561b0f66f45197aa2ace3eb9e1758283d60d94352781b7e7dab0f\" returns successfully" Jul 10 00:36:30.572685 env[1205]: time="2025-07-10T00:36:30.572503936Z" level=info msg="StartContainer for \"8a17cc70102fbe9ffbd87d9dfe1f4984a45a4501f8f6af7cfcd5ed526d64f283\" returns successfully" Jul 10 00:36:31.255252 kubelet[1602]: E0710 00:36:31.255199 1602 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Jul 10 00:36:31.255419 kubelet[1602]: E0710 00:36:31.255346 1602 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:36:31.257161 kubelet[1602]: E0710 00:36:31.257135 1602 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Jul 10 00:36:31.257277 kubelet[1602]: E0710 00:36:31.257253 1602 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:36:31.259125 kubelet[1602]: E0710 00:36:31.259095 1602 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Jul 10 00:36:31.259276 kubelet[1602]: E0710 00:36:31.259241 1602 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:36:31.580000 audit[1803]: AVC avc: denied { watch } for pid=1803 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7310 scontext=system_u:system_r:svirt_lxc_net_t:s0:c544,c954 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:36:31.580000 audit[1803]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6 a1=c000960d50 a2=fc6 a3=0 items=0 ppid=1671 pid=1803 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c544,c954 key=(null) Jul 10 00:36:31.580000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 00:36:31.580000 audit[1803]: AVC avc: denied { watch } for pid=1803 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7304 scontext=system_u:system_r:svirt_lxc_net_t:s0:c544,c954 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:36:31.580000 audit[1803]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c0000f6720 a2=fc6 a3=0 items=0 ppid=1671 pid=1803 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c544,c954 key=(null) Jul 10 00:36:31.580000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 00:36:31.919000 audit[1833]: AVC avc: denied { watch } for pid=1833 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7304 scontext=system_u:system_r:svirt_lxc_net_t:s0:c86,c421 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:36:31.919000 audit[1833]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=3f a1=c0061c12e0 a2=fc6 a3=0 items=0 ppid=1649 pid=1833 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c86,c421 key=(null) Jul 10 00:36:31.919000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3336002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Jul 10 00:36:31.926000 audit[1833]: AVC avc: denied { watch } for pid=1833 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=7306 scontext=system_u:system_r:svirt_lxc_net_t:s0:c86,c421 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:36:31.926000 audit[1833]: AVC avc: denied { watch } for pid=1833 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7310 scontext=system_u:system_r:svirt_lxc_net_t:s0:c86,c421 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:36:31.926000 audit[1833]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=47 a1=c005ce0270 a2=fc6 a3=0 items=0 ppid=1649 pid=1833 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c86,c421 key=(null) Jul 10 00:36:31.926000 audit[1833]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=42 a1=c006194210 a2=fc6 a3=0 items=0 ppid=1649 pid=1833 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c86,c421 key=(null) Jul 10 00:36:31.926000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3336002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Jul 10 00:36:31.926000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3336002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Jul 10 00:36:31.926000 audit[1833]: AVC avc: denied { watch } for pid=1833 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=7317 scontext=system_u:system_r:svirt_lxc_net_t:s0:c86,c421 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:36:31.926000 audit[1833]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=48 a1=c00611e060 a2=fc6 a3=0 items=0 ppid=1649 pid=1833 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c86,c421 key=(null) Jul 10 00:36:31.926000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3336002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Jul 10 00:36:31.932375 kubelet[1602]: I0710 00:36:31.932345 1602 kubelet_node_status.go:75] "Attempting to register node" node="localhost" Jul 10 00:36:31.953000 audit[1833]: AVC avc: denied { watch } for pid=1833 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7304 scontext=system_u:system_r:svirt_lxc_net_t:s0:c86,c421 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:36:31.953000 audit[1833]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=41 a1=c003dbf240 a2=fc6 a3=0 items=0 ppid=1649 pid=1833 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c86,c421 key=(null) Jul 10 00:36:31.953000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3336002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Jul 10 00:36:31.954000 audit[1833]: AVC avc: denied { watch } for pid=1833 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7310 scontext=system_u:system_r:svirt_lxc_net_t:s0:c86,c421 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:36:31.954000 audit[1833]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=41 a1=c004460b10 a2=fc6 a3=0 items=0 ppid=1649 pid=1833 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c86,c421 key=(null) Jul 10 00:36:31.954000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3336002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Jul 10 00:36:32.200821 kubelet[1602]: I0710 00:36:32.200696 1602 apiserver.go:52] "Watching apiserver" Jul 10 00:36:32.212516 kubelet[1602]: I0710 00:36:32.212470 1602 kubelet_node_status.go:78] "Successfully registered node" node="localhost" Jul 10 00:36:32.229373 kubelet[1602]: I0710 00:36:32.229347 1602 desired_state_of_world_populator.go:158] "Finished populating initial desired state of world" Jul 10 00:36:32.229451 kubelet[1602]: I0710 00:36:32.229374 1602 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-apiserver-localhost" Jul 10 00:36:32.259838 kubelet[1602]: I0710 00:36:32.259816 1602 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-apiserver-localhost" Jul 10 00:36:32.259972 kubelet[1602]: I0710 00:36:32.259925 1602 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-scheduler-localhost" Jul 10 00:36:32.473240 kubelet[1602]: E0710 00:36:32.473104 1602 kubelet.go:3196] "Failed creating a mirror pod" err="pods \"kube-apiserver-localhost\" is forbidden: no PriorityClass with name system-node-critical was found" pod="kube-system/kube-apiserver-localhost" Jul 10 00:36:32.473240 kubelet[1602]: I0710 00:36:32.473144 1602 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-controller-manager-localhost" Jul 10 00:36:32.473393 kubelet[1602]: E0710 00:36:32.473327 1602 controller.go:145] "Failed to ensure lease exists, will retry" err="namespaces \"kube-node-lease\" not found" interval="3.2s" Jul 10 00:36:32.473456 kubelet[1602]: E0710 00:36:32.473427 1602 kubelet.go:3196] "Failed creating a mirror pod" err="pods \"kube-scheduler-localhost\" is forbidden: no PriorityClass with name system-node-critical was found" pod="kube-system/kube-scheduler-localhost" Jul 10 00:36:32.473573 kubelet[1602]: E0710 00:36:32.473550 1602 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:36:32.473648 kubelet[1602]: E0710 00:36:32.473617 1602 kubelet.go:3196] "Failed creating a mirror pod" err="pods \"kube-apiserver-localhost\" is forbidden: no PriorityClass with name system-node-critical was found" pod="kube-system/kube-apiserver-localhost" Jul 10 00:36:32.473786 kubelet[1602]: E0710 00:36:32.473743 1602 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:36:32.474678 kubelet[1602]: E0710 00:36:32.474616 1602 kubelet.go:3196] "Failed creating a mirror pod" err="pods \"kube-controller-manager-localhost\" is forbidden: no PriorityClass with name system-node-critical was found" pod="kube-system/kube-controller-manager-localhost" Jul 10 00:36:32.474678 kubelet[1602]: I0710 00:36:32.474645 1602 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-scheduler-localhost" Jul 10 00:36:32.476349 kubelet[1602]: E0710 00:36:32.476328 1602 kubelet.go:3196] "Failed creating a mirror pod" err="pods \"kube-scheduler-localhost\" is forbidden: no PriorityClass with name system-node-critical was found" pod="kube-system/kube-scheduler-localhost" Jul 10 00:36:32.503820 kubelet[1602]: I0710 00:36:32.503795 1602 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-controller-manager-localhost" Jul 10 00:36:32.505258 kubelet[1602]: E0710 00:36:32.505223 1602 kubelet.go:3196] "Failed creating a mirror pod" err="pods \"kube-controller-manager-localhost\" is forbidden: no PriorityClass with name system-node-critical was found" pod="kube-system/kube-controller-manager-localhost" Jul 10 00:36:32.505399 kubelet[1602]: E0710 00:36:32.505384 1602 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:36:33.261351 kubelet[1602]: I0710 00:36:33.261298 1602 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-scheduler-localhost" Jul 10 00:36:33.261931 kubelet[1602]: I0710 00:36:33.261377 1602 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-apiserver-localhost" Jul 10 00:36:33.267129 kubelet[1602]: E0710 00:36:33.267099 1602 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:36:33.267243 kubelet[1602]: E0710 00:36:33.267103 1602 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:36:34.184064 systemd[1]: Reloading. Jul 10 00:36:34.255398 /usr/lib/systemd/system-generators/torcx-generator[1903]: time="2025-07-10T00:36:34Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.7 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.7 /var/lib/torcx/store]" Jul 10 00:36:34.255426 /usr/lib/systemd/system-generators/torcx-generator[1903]: time="2025-07-10T00:36:34Z" level=info msg="torcx already run" Jul 10 00:36:34.263361 kubelet[1602]: E0710 00:36:34.263321 1602 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:36:34.263673 kubelet[1602]: E0710 00:36:34.263597 1602 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:36:34.317871 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Jul 10 00:36:34.317889 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Jul 10 00:36:34.334688 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Jul 10 00:36:34.417616 kernel: kauditd_printk_skb: 579 callbacks suppressed Jul 10 00:36:34.417769 kernel: audit: type=1400 audit(1752107794.407:553): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:34.417789 kernel: audit: type=1400 audit(1752107794.407:554): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:34.417817 kernel: audit: type=1400 audit(1752107794.407:555): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:34.407000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:34.407000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:34.407000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:34.407000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:34.407000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:34.424034 kernel: audit: type=1400 audit(1752107794.407:556): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:34.424100 kernel: audit: type=1400 audit(1752107794.407:557): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:34.424124 kernel: audit: type=1400 audit(1752107794.407:558): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:34.407000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:34.427272 kernel: audit: type=1400 audit(1752107794.407:559): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:34.407000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:34.430607 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Jul 10 00:36:34.430698 kernel: audit: type=1400 audit(1752107794.407:560): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:34.407000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:34.431421 kernel: audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 Jul 10 00:36:34.407000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:34.411000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:34.411000 audit: BPF prog-id=82 op=LOAD Jul 10 00:36:34.411000 audit: BPF prog-id=74 op=UNLOAD Jul 10 00:36:34.411000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:34.411000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:34.411000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:34.411000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:34.411000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:34.411000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:34.411000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:34.411000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:34.411000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:34.416000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:34.416000 audit: BPF prog-id=83 op=LOAD Jul 10 00:36:34.416000 audit: BPF prog-id=58 op=UNLOAD Jul 10 00:36:34.417000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:34.417000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:34.417000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:34.417000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:34.417000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:34.417000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:34.417000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:34.417000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:34.420000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:34.420000 audit: BPF prog-id=84 op=LOAD Jul 10 00:36:34.420000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:34.420000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:34.420000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:34.420000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:34.420000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:34.420000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:34.420000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:34.420000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:34.420000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:34.420000 audit: BPF prog-id=85 op=LOAD Jul 10 00:36:34.420000 audit: BPF prog-id=43 op=UNLOAD Jul 10 00:36:34.420000 audit: BPF prog-id=44 op=UNLOAD Jul 10 00:36:34.420000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:34.420000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:34.420000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:34.420000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:34.420000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:34.420000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:34.420000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:34.420000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:34.420000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:34.423000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:34.423000 audit: BPF prog-id=86 op=LOAD Jul 10 00:36:34.423000 audit: BPF prog-id=45 op=UNLOAD Jul 10 00:36:34.423000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:34.423000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:34.423000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:34.423000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:34.423000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:34.423000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:34.423000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:34.423000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:34.423000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:34.426000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:34.426000 audit: BPF prog-id=87 op=LOAD Jul 10 00:36:34.426000 audit: BPF prog-id=46 op=UNLOAD Jul 10 00:36:34.426000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:34.426000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:34.430000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:34.435000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:34.435000 audit: BPF prog-id=78 op=UNLOAD Jul 10 00:36:34.435000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:34.435000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:34.435000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:34.435000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:34.435000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:34.435000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:34.435000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:34.435000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:34.435000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:34.435000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:34.435000 audit: BPF prog-id=89 op=LOAD Jul 10 00:36:34.435000 audit: BPF prog-id=70 op=UNLOAD Jul 10 00:36:34.436000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:34.436000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:34.436000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:34.436000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:34.436000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:34.436000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:34.436000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:34.436000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:34.436000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:34.436000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:34.436000 audit: BPF prog-id=90 op=LOAD Jul 10 00:36:34.436000 audit: BPF prog-id=47 op=UNLOAD Jul 10 00:36:34.437000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:34.437000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:34.437000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:34.437000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:34.437000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:34.437000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:34.437000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:34.437000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:34.437000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:34.437000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:34.437000 audit: BPF prog-id=91 op=LOAD Jul 10 00:36:34.437000 audit: BPF prog-id=48 op=UNLOAD Jul 10 00:36:34.439000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:34.439000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:34.439000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:34.439000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:34.439000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:34.439000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:34.439000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:34.439000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:34.439000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:34.439000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:34.439000 audit: BPF prog-id=92 op=LOAD Jul 10 00:36:34.439000 audit: BPF prog-id=49 op=UNLOAD Jul 10 00:36:34.439000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:34.439000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:34.439000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:34.439000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:34.439000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:34.439000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:34.439000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:34.439000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:34.439000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:34.439000 audit: BPF prog-id=93 op=LOAD Jul 10 00:36:34.439000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:34.439000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:34.439000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:34.439000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:34.439000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:34.439000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:34.439000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:34.439000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:34.439000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:34.439000 audit: BPF prog-id=94 op=LOAD Jul 10 00:36:34.439000 audit: BPF prog-id=50 op=UNLOAD Jul 10 00:36:34.439000 audit: BPF prog-id=51 op=UNLOAD Jul 10 00:36:34.440000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:34.440000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:34.440000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:34.440000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:34.440000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:34.440000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:34.440000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:34.440000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:34.440000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:34.440000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:34.440000 audit: BPF prog-id=95 op=LOAD Jul 10 00:36:34.440000 audit: BPF prog-id=52 op=UNLOAD Jul 10 00:36:34.440000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:34.440000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:34.440000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:34.440000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:34.440000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:34.440000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:34.440000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:34.440000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:34.440000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:34.440000 audit: BPF prog-id=96 op=LOAD Jul 10 00:36:34.440000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:34.440000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:34.440000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:34.440000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:34.440000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:34.440000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:34.440000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:34.440000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:34.440000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:34.440000 audit: BPF prog-id=97 op=LOAD Jul 10 00:36:34.440000 audit: BPF prog-id=53 op=UNLOAD Jul 10 00:36:34.440000 audit: BPF prog-id=54 op=UNLOAD Jul 10 00:36:34.441000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:34.441000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:34.441000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:34.441000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:34.441000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:34.441000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:34.441000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:34.441000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:34.441000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:34.441000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:34.441000 audit: BPF prog-id=98 op=LOAD Jul 10 00:36:34.441000 audit: BPF prog-id=66 op=UNLOAD Jul 10 00:36:34.442000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:34.442000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:34.442000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:34.442000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:34.442000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:34.442000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:34.442000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:34.442000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:34.442000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:34.443000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:34.443000 audit: BPF prog-id=99 op=LOAD Jul 10 00:36:34.443000 audit: BPF prog-id=55 op=UNLOAD Jul 10 00:36:34.443000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:34.443000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:34.443000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:34.443000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:34.443000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:34.443000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:34.443000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:34.443000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:34.443000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:34.443000 audit: BPF prog-id=100 op=LOAD Jul 10 00:36:34.443000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:34.443000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:34.443000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:34.443000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:34.443000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:34.443000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:34.443000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:34.443000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:34.443000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:34.443000 audit: BPF prog-id=101 op=LOAD Jul 10 00:36:34.443000 audit: BPF prog-id=56 op=UNLOAD Jul 10 00:36:34.443000 audit: BPF prog-id=57 op=UNLOAD Jul 10 00:36:34.444000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:34.444000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:34.444000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:34.444000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:34.444000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:34.444000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:34.444000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:34.444000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:34.444000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:34.444000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:34.444000 audit: BPF prog-id=102 op=LOAD Jul 10 00:36:34.444000 audit: BPF prog-id=62 op=UNLOAD Jul 10 00:36:34.454497 systemd[1]: Stopping kubelet.service... Jul 10 00:36:34.484872 systemd[1]: kubelet.service: Deactivated successfully. Jul 10 00:36:34.485036 systemd[1]: Stopped kubelet.service. Jul 10 00:36:34.484000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:36:34.486588 systemd[1]: Starting kubelet.service... Jul 10 00:36:34.574246 systemd[1]: Started kubelet.service. Jul 10 00:36:34.573000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:36:34.840732 kubelet[1947]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Jul 10 00:36:34.840732 kubelet[1947]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.35. Image garbage collector will get sandbox image information from CRI. Jul 10 00:36:34.840732 kubelet[1947]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Jul 10 00:36:34.840732 kubelet[1947]: I0710 00:36:34.838687 1947 server.go:215] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Jul 10 00:36:34.847225 kubelet[1947]: I0710 00:36:34.847173 1947 server.go:520] "Kubelet version" kubeletVersion="v1.32.4" Jul 10 00:36:34.847225 kubelet[1947]: I0710 00:36:34.847199 1947 server.go:522] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Jul 10 00:36:34.847485 kubelet[1947]: I0710 00:36:34.847468 1947 server.go:954] "Client rotation is on, will bootstrap in background" Jul 10 00:36:34.848671 kubelet[1947]: I0710 00:36:34.848634 1947 certificate_store.go:130] Loading cert/key pair from "/var/lib/kubelet/pki/kubelet-client-current.pem". Jul 10 00:36:34.850681 kubelet[1947]: I0710 00:36:34.850642 1947 dynamic_cafile_content.go:161] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Jul 10 00:36:34.853869 kubelet[1947]: E0710 00:36:34.853838 1947 log.go:32] "RuntimeConfig from runtime service failed" err="rpc error: code = Unimplemented desc = unknown method RuntimeConfig for service runtime.v1.RuntimeService" Jul 10 00:36:34.853869 kubelet[1947]: I0710 00:36:34.853865 1947 server.go:1421] "CRI implementation should be updated to support RuntimeConfig when KubeletCgroupDriverFromCRI feature gate has been enabled. Falling back to using cgroupDriver from kubelet config." Jul 10 00:36:34.857218 kubelet[1947]: I0710 00:36:34.857192 1947 server.go:772] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Jul 10 00:36:34.857437 kubelet[1947]: I0710 00:36:34.857396 1947 container_manager_linux.go:268] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Jul 10 00:36:34.857584 kubelet[1947]: I0710 00:36:34.857424 1947 container_manager_linux.go:273] "Creating Container Manager object based on Node Config" nodeConfig={"NodeName":"localhost","RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"ExperimentalMemoryManagerPolicy":"None","ExperimentalMemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null,"CgroupVersion":2} Jul 10 00:36:34.857714 kubelet[1947]: I0710 00:36:34.857591 1947 topology_manager.go:138] "Creating topology manager with none policy" Jul 10 00:36:34.857714 kubelet[1947]: I0710 00:36:34.857600 1947 container_manager_linux.go:304] "Creating device plugin manager" Jul 10 00:36:34.857714 kubelet[1947]: I0710 00:36:34.857639 1947 state_mem.go:36] "Initialized new in-memory state store" Jul 10 00:36:34.857820 kubelet[1947]: I0710 00:36:34.857773 1947 kubelet.go:446] "Attempting to sync node with API server" Jul 10 00:36:34.857820 kubelet[1947]: I0710 00:36:34.857789 1947 kubelet.go:341] "Adding static pod path" path="/etc/kubernetes/manifests" Jul 10 00:36:34.857820 kubelet[1947]: I0710 00:36:34.857810 1947 kubelet.go:352] "Adding apiserver pod source" Jul 10 00:36:34.857820 kubelet[1947]: I0710 00:36:34.857821 1947 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Jul 10 00:36:34.864122 kubelet[1947]: I0710 00:36:34.861313 1947 kuberuntime_manager.go:269] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Jul 10 00:36:34.864122 kubelet[1947]: I0710 00:36:34.861886 1947 kubelet.go:890] "Not starting ClusterTrustBundle informer because we are in static kubelet mode" Jul 10 00:36:34.864122 kubelet[1947]: I0710 00:36:34.862499 1947 watchdog_linux.go:99] "Systemd watchdog is not enabled" Jul 10 00:36:34.864122 kubelet[1947]: I0710 00:36:34.862535 1947 server.go:1287] "Started kubelet" Jul 10 00:36:34.864944 kubelet[1947]: I0710 00:36:34.864875 1947 server.go:169] "Starting to listen" address="0.0.0.0" port=10250 Jul 10 00:36:34.866147 kubelet[1947]: I0710 00:36:34.866120 1947 server.go:479] "Adding debug handlers to kubelet server" Jul 10 00:36:34.866955 kubelet[1947]: I0710 00:36:34.866882 1947 ratelimit.go:55] "Setting rate limiting for endpoint" service="podresources" qps=100 burstTokens=10 Jul 10 00:36:34.867246 kubelet[1947]: I0710 00:36:34.867210 1947 server.go:243] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Jul 10 00:36:34.867000 audit[1947]: AVC avc: denied { mac_admin } for pid=1947 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:34.867000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 10 00:36:34.867000 audit[1947]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000e2a600 a1=c00005bed8 a2=c000e2a5d0 a3=25 items=0 ppid=1 pid=1947 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:36:34.867000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 10 00:36:34.867000 audit[1947]: AVC avc: denied { mac_admin } for pid=1947 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:34.867000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 10 00:36:34.867000 audit[1947]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000df8920 a1=c00005bef0 a2=c000e2a690 a3=25 items=0 ppid=1 pid=1947 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:36:34.867000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 10 00:36:34.868806 kubelet[1947]: I0710 00:36:34.867924 1947 kubelet.go:1507] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins_registry: invalid argument" Jul 10 00:36:34.868806 kubelet[1947]: I0710 00:36:34.867958 1947 kubelet.go:1511] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins: invalid argument" Jul 10 00:36:34.868806 kubelet[1947]: I0710 00:36:34.867985 1947 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Jul 10 00:36:34.872630 kubelet[1947]: I0710 00:36:34.872577 1947 dynamic_serving_content.go:135] "Starting controller" name="kubelet-server-cert-files::/var/lib/kubelet/pki/kubelet.crt::/var/lib/kubelet/pki/kubelet.key" Jul 10 00:36:34.876011 kubelet[1947]: I0710 00:36:34.875967 1947 volume_manager.go:297] "Starting Kubelet Volume Manager" Jul 10 00:36:34.877185 kubelet[1947]: I0710 00:36:34.876153 1947 desired_state_of_world_populator.go:150] "Desired state populator starts to run" Jul 10 00:36:34.877185 kubelet[1947]: I0710 00:36:34.876283 1947 reconciler.go:26] "Reconciler: start to sync state" Jul 10 00:36:34.880528 kubelet[1947]: I0710 00:36:34.880498 1947 factory.go:221] Registration of the systemd container factory successfully Jul 10 00:36:34.880601 kubelet[1947]: I0710 00:36:34.880574 1947 factory.go:219] Registration of the crio container factory failed: Get "http://%2Fvar%2Frun%2Fcrio%2Fcrio.sock/info": dial unix /var/run/crio/crio.sock: connect: no such file or directory Jul 10 00:36:34.880888 kubelet[1947]: E0710 00:36:34.880784 1947 kubelet.go:1555] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Jul 10 00:36:34.883230 kubelet[1947]: I0710 00:36:34.883127 1947 factory.go:221] Registration of the containerd container factory successfully Jul 10 00:36:34.886147 kubelet[1947]: I0710 00:36:34.886094 1947 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv4" Jul 10 00:36:34.887868 kubelet[1947]: I0710 00:36:34.887060 1947 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv6" Jul 10 00:36:34.887868 kubelet[1947]: I0710 00:36:34.887090 1947 status_manager.go:227] "Starting to sync pod status with apiserver" Jul 10 00:36:34.887868 kubelet[1947]: I0710 00:36:34.887110 1947 watchdog_linux.go:127] "Systemd watchdog is not enabled or the interval is invalid, so health checking will not be started." Jul 10 00:36:34.887868 kubelet[1947]: I0710 00:36:34.887128 1947 kubelet.go:2382] "Starting kubelet main sync loop" Jul 10 00:36:34.887868 kubelet[1947]: E0710 00:36:34.887184 1947 kubelet.go:2406] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Jul 10 00:36:34.914045 kubelet[1947]: I0710 00:36:34.913994 1947 cpu_manager.go:221] "Starting CPU manager" policy="none" Jul 10 00:36:34.914045 kubelet[1947]: I0710 00:36:34.914018 1947 cpu_manager.go:222] "Reconciling" reconcilePeriod="10s" Jul 10 00:36:34.914045 kubelet[1947]: I0710 00:36:34.914036 1947 state_mem.go:36] "Initialized new in-memory state store" Jul 10 00:36:34.914245 kubelet[1947]: I0710 00:36:34.914175 1947 state_mem.go:88] "Updated default CPUSet" cpuSet="" Jul 10 00:36:34.914245 kubelet[1947]: I0710 00:36:34.914185 1947 state_mem.go:96] "Updated CPUSet assignments" assignments={} Jul 10 00:36:34.914245 kubelet[1947]: I0710 00:36:34.914201 1947 policy_none.go:49] "None policy: Start" Jul 10 00:36:34.914245 kubelet[1947]: I0710 00:36:34.914211 1947 memory_manager.go:186] "Starting memorymanager" policy="None" Jul 10 00:36:34.914245 kubelet[1947]: I0710 00:36:34.914219 1947 state_mem.go:35] "Initializing new in-memory state store" Jul 10 00:36:34.914373 kubelet[1947]: I0710 00:36:34.914305 1947 state_mem.go:75] "Updated machine memory state" Jul 10 00:36:34.917432 kubelet[1947]: I0710 00:36:34.917398 1947 manager.go:519] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Jul 10 00:36:34.916000 audit[1947]: AVC avc: denied { mac_admin } for pid=1947 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:34.916000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 10 00:36:34.916000 audit[1947]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000cd2480 a1=c00005bc50 a2=c000cd2420 a3=25 items=0 ppid=1 pid=1947 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:36:34.916000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 10 00:36:34.917775 kubelet[1947]: I0710 00:36:34.917473 1947 server.go:94] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/device-plugins/: invalid argument" Jul 10 00:36:34.917775 kubelet[1947]: I0710 00:36:34.917606 1947 eviction_manager.go:189] "Eviction manager: starting control loop" Jul 10 00:36:34.917775 kubelet[1947]: I0710 00:36:34.917622 1947 container_log_manager.go:189] "Initializing container log rotate workers" workers=1 monitorPeriod="10s" Jul 10 00:36:34.918109 kubelet[1947]: I0710 00:36:34.918075 1947 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Jul 10 00:36:34.920618 kubelet[1947]: E0710 00:36:34.919519 1947 eviction_manager.go:267] "eviction manager: failed to check if we have separate container filesystem. Ignoring." err="no imagefs label for configured runtime" Jul 10 00:36:34.988440 kubelet[1947]: I0710 00:36:34.988404 1947 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-controller-manager-localhost" Jul 10 00:36:34.988633 kubelet[1947]: I0710 00:36:34.988617 1947 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-apiserver-localhost" Jul 10 00:36:34.988708 kubelet[1947]: I0710 00:36:34.988617 1947 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-scheduler-localhost" Jul 10 00:36:34.997549 kubelet[1947]: E0710 00:36:34.997452 1947 kubelet.go:3196] "Failed creating a mirror pod" err="pods \"kube-apiserver-localhost\" already exists" pod="kube-system/kube-apiserver-localhost" Jul 10 00:36:34.997785 kubelet[1947]: E0710 00:36:34.997684 1947 kubelet.go:3196] "Failed creating a mirror pod" err="pods \"kube-scheduler-localhost\" already exists" pod="kube-system/kube-scheduler-localhost" Jul 10 00:36:35.025037 kubelet[1947]: I0710 00:36:35.025005 1947 kubelet_node_status.go:75] "Attempting to register node" node="localhost" Jul 10 00:36:35.031757 kubelet[1947]: I0710 00:36:35.031716 1947 kubelet_node_status.go:124] "Node was previously registered" node="localhost" Jul 10 00:36:35.032103 kubelet[1947]: I0710 00:36:35.031832 1947 kubelet_node_status.go:78] "Successfully registered node" node="localhost" Jul 10 00:36:35.177438 kubelet[1947]: I0710 00:36:35.177328 1947 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/10c584d49c1e7d7baaedeae4d1fc5bba-usr-share-ca-certificates\") pod \"kube-apiserver-localhost\" (UID: \"10c584d49c1e7d7baaedeae4d1fc5bba\") " pod="kube-system/kube-apiserver-localhost" Jul 10 00:36:35.177438 kubelet[1947]: I0710 00:36:35.177371 1947 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/d1af03769b64da1b1e8089a7035018fc-flexvolume-dir\") pod \"kube-controller-manager-localhost\" (UID: \"d1af03769b64da1b1e8089a7035018fc\") " pod="kube-system/kube-controller-manager-localhost" Jul 10 00:36:35.177438 kubelet[1947]: I0710 00:36:35.177395 1947 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/d1af03769b64da1b1e8089a7035018fc-k8s-certs\") pod \"kube-controller-manager-localhost\" (UID: \"d1af03769b64da1b1e8089a7035018fc\") " pod="kube-system/kube-controller-manager-localhost" Jul 10 00:36:35.177438 kubelet[1947]: I0710 00:36:35.177414 1947 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/10c584d49c1e7d7baaedeae4d1fc5bba-ca-certs\") pod \"kube-apiserver-localhost\" (UID: \"10c584d49c1e7d7baaedeae4d1fc5bba\") " pod="kube-system/kube-apiserver-localhost" Jul 10 00:36:35.177438 kubelet[1947]: I0710 00:36:35.177433 1947 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/10c584d49c1e7d7baaedeae4d1fc5bba-k8s-certs\") pod \"kube-apiserver-localhost\" (UID: \"10c584d49c1e7d7baaedeae4d1fc5bba\") " pod="kube-system/kube-apiserver-localhost" Jul 10 00:36:35.177681 kubelet[1947]: I0710 00:36:35.177448 1947 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/d1af03769b64da1b1e8089a7035018fc-ca-certs\") pod \"kube-controller-manager-localhost\" (UID: \"d1af03769b64da1b1e8089a7035018fc\") " pod="kube-system/kube-controller-manager-localhost" Jul 10 00:36:35.177681 kubelet[1947]: I0710 00:36:35.177467 1947 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/d1af03769b64da1b1e8089a7035018fc-kubeconfig\") pod \"kube-controller-manager-localhost\" (UID: \"d1af03769b64da1b1e8089a7035018fc\") " pod="kube-system/kube-controller-manager-localhost" Jul 10 00:36:35.177681 kubelet[1947]: I0710 00:36:35.177510 1947 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/d1af03769b64da1b1e8089a7035018fc-usr-share-ca-certificates\") pod \"kube-controller-manager-localhost\" (UID: \"d1af03769b64da1b1e8089a7035018fc\") " pod="kube-system/kube-controller-manager-localhost" Jul 10 00:36:35.177681 kubelet[1947]: I0710 00:36:35.177526 1947 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/8a75e163f27396b2168da0f88f85f8a5-kubeconfig\") pod \"kube-scheduler-localhost\" (UID: \"8a75e163f27396b2168da0f88f85f8a5\") " pod="kube-system/kube-scheduler-localhost" Jul 10 00:36:35.298367 kubelet[1947]: E0710 00:36:35.298318 1947 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:36:35.298534 kubelet[1947]: E0710 00:36:35.298336 1947 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:36:35.298534 kubelet[1947]: E0710 00:36:35.298338 1947 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:36:35.859010 kubelet[1947]: I0710 00:36:35.858959 1947 apiserver.go:52] "Watching apiserver" Jul 10 00:36:35.877186 kubelet[1947]: I0710 00:36:35.877141 1947 desired_state_of_world_populator.go:158] "Finished populating initial desired state of world" Jul 10 00:36:35.903779 kubelet[1947]: I0710 00:36:35.903751 1947 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-scheduler-localhost" Jul 10 00:36:35.904187 kubelet[1947]: E0710 00:36:35.903837 1947 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:36:35.904449 kubelet[1947]: I0710 00:36:35.904423 1947 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-apiserver-localhost" Jul 10 00:36:35.911499 kubelet[1947]: E0710 00:36:35.911451 1947 kubelet.go:3196] "Failed creating a mirror pod" err="pods \"kube-scheduler-localhost\" already exists" pod="kube-system/kube-scheduler-localhost" Jul 10 00:36:35.911645 kubelet[1947]: E0710 00:36:35.911631 1947 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:36:35.913587 kubelet[1947]: E0710 00:36:35.913522 1947 kubelet.go:3196] "Failed creating a mirror pod" err="pods \"kube-apiserver-localhost\" already exists" pod="kube-system/kube-apiserver-localhost" Jul 10 00:36:35.913865 kubelet[1947]: E0710 00:36:35.913836 1947 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:36:35.929834 kubelet[1947]: I0710 00:36:35.929750 1947 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-scheduler-localhost" podStartSLOduration=2.929726504 podStartE2EDuration="2.929726504s" podCreationTimestamp="2025-07-10 00:36:33 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-10 00:36:35.926963928 +0000 UTC m=+1.349388936" watchObservedRunningTime="2025-07-10 00:36:35.929726504 +0000 UTC m=+1.352151512" Jul 10 00:36:35.940302 kubelet[1947]: I0710 00:36:35.939744 1947 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-apiserver-localhost" podStartSLOduration=2.939724855 podStartE2EDuration="2.939724855s" podCreationTimestamp="2025-07-10 00:36:33 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-10 00:36:35.939576465 +0000 UTC m=+1.362001473" watchObservedRunningTime="2025-07-10 00:36:35.939724855 +0000 UTC m=+1.362149863" Jul 10 00:36:35.947326 kubelet[1947]: I0710 00:36:35.947241 1947 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-controller-manager-localhost" podStartSLOduration=1.947221942 podStartE2EDuration="1.947221942s" podCreationTimestamp="2025-07-10 00:36:34 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-10 00:36:35.94676955 +0000 UTC m=+1.369194558" watchObservedRunningTime="2025-07-10 00:36:35.947221942 +0000 UTC m=+1.369646951" Jul 10 00:36:36.904722 kubelet[1947]: E0710 00:36:36.904686 1947 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:36:36.904722 kubelet[1947]: E0710 00:36:36.904720 1947 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:36:37.596000 audit[1803]: AVC avc: denied { watch } for pid=1803 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7304 scontext=system_u:system_r:svirt_lxc_net_t:s0:c544,c954 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:36:37.596000 audit[1803]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c0007f64c0 a2=fc6 a3=0 items=0 ppid=1671 pid=1803 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c544,c954 key=(null) Jul 10 00:36:37.596000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 00:36:37.597000 audit[1803]: AVC avc: denied { watch } for pid=1803 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7304 scontext=system_u:system_r:svirt_lxc_net_t:s0:c544,c954 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:36:37.597000 audit[1803]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c0007f6500 a2=fc6 a3=0 items=0 ppid=1671 pid=1803 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c544,c954 key=(null) Jul 10 00:36:37.597000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 00:36:37.597000 audit[1803]: AVC avc: denied { watch } for pid=1803 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7304 scontext=system_u:system_r:svirt_lxc_net_t:s0:c544,c954 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:36:37.597000 audit[1803]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c000c01ce0 a2=fc6 a3=0 items=0 ppid=1671 pid=1803 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c544,c954 key=(null) Jul 10 00:36:37.597000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 00:36:37.598000 audit[1803]: AVC avc: denied { watch } for pid=1803 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7304 scontext=system_u:system_r:svirt_lxc_net_t:s0:c544,c954 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:36:37.598000 audit[1803]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c0007f66a0 a2=fc6 a3=0 items=0 ppid=1671 pid=1803 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c544,c954 key=(null) Jul 10 00:36:37.598000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 00:36:37.906158 kubelet[1947]: E0710 00:36:37.906052 1947 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:36:38.329000 audit[1803]: AVC avc: denied { watch } for pid=1803 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="vda9" ino=7342 scontext=system_u:system_r:svirt_lxc_net_t:s0:c544,c954 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Jul 10 00:36:38.329000 audit[1803]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c000569880 a2=fc6 a3=0 items=0 ppid=1671 pid=1803 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c544,c954 key=(null) Jul 10 00:36:38.329000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 00:36:40.541776 kubelet[1947]: I0710 00:36:40.541738 1947 kuberuntime_manager.go:1702] "Updating runtime config through cri with podcidr" CIDR="192.168.0.0/24" Jul 10 00:36:40.542208 env[1205]: time="2025-07-10T00:36:40.542152205Z" level=info msg="No cni config template is specified, wait for other system components to drop the config." Jul 10 00:36:40.542368 kubelet[1947]: I0710 00:36:40.542307 1947 kubelet_network.go:61] "Updating Pod CIDR" originalPodCIDR="" newPodCIDR="192.168.0.0/24" Jul 10 00:36:41.100851 systemd[1]: Created slice kubepods-besteffort-podc0f2154b_f500_46f8_9404_461cd99ea95d.slice. Jul 10 00:36:41.170251 kubelet[1947]: I0710 00:36:41.170198 1947 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-proxy\" (UniqueName: \"kubernetes.io/configmap/c0f2154b-f500-46f8-9404-461cd99ea95d-kube-proxy\") pod \"kube-proxy-pklxj\" (UID: \"c0f2154b-f500-46f8-9404-461cd99ea95d\") " pod="kube-system/kube-proxy-pklxj" Jul 10 00:36:41.170251 kubelet[1947]: I0710 00:36:41.170240 1947 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/c0f2154b-f500-46f8-9404-461cd99ea95d-xtables-lock\") pod \"kube-proxy-pklxj\" (UID: \"c0f2154b-f500-46f8-9404-461cd99ea95d\") " pod="kube-system/kube-proxy-pklxj" Jul 10 00:36:41.170477 kubelet[1947]: I0710 00:36:41.170267 1947 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/c0f2154b-f500-46f8-9404-461cd99ea95d-lib-modules\") pod \"kube-proxy-pklxj\" (UID: \"c0f2154b-f500-46f8-9404-461cd99ea95d\") " pod="kube-system/kube-proxy-pklxj" Jul 10 00:36:41.170477 kubelet[1947]: I0710 00:36:41.170286 1947 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-tcwqk\" (UniqueName: \"kubernetes.io/projected/c0f2154b-f500-46f8-9404-461cd99ea95d-kube-api-access-tcwqk\") pod \"kube-proxy-pklxj\" (UID: \"c0f2154b-f500-46f8-9404-461cd99ea95d\") " pod="kube-system/kube-proxy-pklxj" Jul 10 00:36:41.275925 kubelet[1947]: E0710 00:36:41.275876 1947 projected.go:288] Couldn't get configMap kube-system/kube-root-ca.crt: configmap "kube-root-ca.crt" not found Jul 10 00:36:41.275925 kubelet[1947]: E0710 00:36:41.275924 1947 projected.go:194] Error preparing data for projected volume kube-api-access-tcwqk for pod kube-system/kube-proxy-pklxj: configmap "kube-root-ca.crt" not found Jul 10 00:36:41.276130 kubelet[1947]: E0710 00:36:41.275997 1947 nestedpendingoperations.go:348] Operation for "{volumeName:kubernetes.io/projected/c0f2154b-f500-46f8-9404-461cd99ea95d-kube-api-access-tcwqk podName:c0f2154b-f500-46f8-9404-461cd99ea95d nodeName:}" failed. No retries permitted until 2025-07-10 00:36:41.775970645 +0000 UTC m=+7.198395653 (durationBeforeRetry 500ms). Error: MountVolume.SetUp failed for volume "kube-api-access-tcwqk" (UniqueName: "kubernetes.io/projected/c0f2154b-f500-46f8-9404-461cd99ea95d-kube-api-access-tcwqk") pod "kube-proxy-pklxj" (UID: "c0f2154b-f500-46f8-9404-461cd99ea95d") : configmap "kube-root-ca.crt" not found Jul 10 00:36:41.514333 systemd[1]: Created slice kubepods-besteffort-pod78c0b897_908d_497c_a7c5_da4244eb5335.slice. Jul 10 00:36:41.572448 kubelet[1947]: I0710 00:36:41.572399 1947 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-m5zps\" (UniqueName: \"kubernetes.io/projected/78c0b897-908d-497c-a7c5-da4244eb5335-kube-api-access-m5zps\") pod \"tigera-operator-747864d56d-zp4bx\" (UID: \"78c0b897-908d-497c-a7c5-da4244eb5335\") " pod="tigera-operator/tigera-operator-747864d56d-zp4bx" Jul 10 00:36:41.572448 kubelet[1947]: I0710 00:36:41.572439 1947 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/78c0b897-908d-497c-a7c5-da4244eb5335-var-lib-calico\") pod \"tigera-operator-747864d56d-zp4bx\" (UID: \"78c0b897-908d-497c-a7c5-da4244eb5335\") " pod="tigera-operator/tigera-operator-747864d56d-zp4bx" Jul 10 00:36:41.678147 kubelet[1947]: I0710 00:36:41.678120 1947 swap_util.go:74] "error creating dir to test if tmpfs noswap is enabled. Assuming not supported" mount path="" error="stat /var/lib/kubelet/plugins/kubernetes.io/empty-dir: no such file or directory" Jul 10 00:36:41.818468 env[1205]: time="2025-07-10T00:36:41.818345160Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-747864d56d-zp4bx,Uid:78c0b897-908d-497c-a7c5-da4244eb5335,Namespace:tigera-operator,Attempt:0,}" Jul 10 00:36:41.834211 env[1205]: time="2025-07-10T00:36:41.834150424Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 10 00:36:41.834211 env[1205]: time="2025-07-10T00:36:41.834185871Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 10 00:36:41.834211 env[1205]: time="2025-07-10T00:36:41.834195889Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 10 00:36:41.834377 env[1205]: time="2025-07-10T00:36:41.834309734Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/fc94688b81bfc05f89e428686375231f8a7d32f1816353e105565f258008aa14 pid=2001 runtime=io.containerd.runc.v2 Jul 10 00:36:41.846740 systemd[1]: run-containerd-runc-k8s.io-fc94688b81bfc05f89e428686375231f8a7d32f1816353e105565f258008aa14-runc.qEEDzW.mount: Deactivated successfully. Jul 10 00:36:41.849990 systemd[1]: Started cri-containerd-fc94688b81bfc05f89e428686375231f8a7d32f1816353e105565f258008aa14.scope. Jul 10 00:36:41.864000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:41.869228 kernel: kauditd_printk_skb: 277 callbacks suppressed Jul 10 00:36:41.869301 kernel: audit: type=1400 audit(1752107801.864:800): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:41.869329 kernel: audit: type=1400 audit(1752107801.865:801): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:41.865000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:41.875283 kernel: audit: type=1400 audit(1752107801.865:802): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:41.865000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:41.878284 kernel: audit: type=1400 audit(1752107801.865:803): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:41.865000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:41.865000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:41.881206 kernel: audit: type=1400 audit(1752107801.865:804): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:41.881263 kernel: audit: type=1400 audit(1752107801.865:805): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:41.865000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:41.884202 kernel: audit: type=1400 audit(1752107801.865:806): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:41.865000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:41.865000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:41.889963 kernel: audit: type=1400 audit(1752107801.865:807): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:41.890013 kernel: audit: type=1400 audit(1752107801.865:808): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:41.865000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:41.868000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:41.896177 kernel: audit: type=1400 audit(1752107801.868:809): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:41.868000 audit: BPF prog-id=103 op=LOAD Jul 10 00:36:41.869000 audit[2011]: AVC avc: denied { bpf } for pid=2011 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:41.869000 audit[2011]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00014dc48 a2=10 a3=1c items=0 ppid=2001 pid=2011 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:36:41.869000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6663393436383862383162666330356638396534323836383633373532 Jul 10 00:36:41.869000 audit[2011]: AVC avc: denied { perfmon } for pid=2011 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:41.869000 audit[2011]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00014d6b0 a2=3c a3=c items=0 ppid=2001 pid=2011 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:36:41.869000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6663393436383862383162666330356638396534323836383633373532 Jul 10 00:36:41.869000 audit[2011]: AVC avc: denied { bpf } for pid=2011 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:41.869000 audit[2011]: AVC avc: denied { bpf } for pid=2011 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:41.869000 audit[2011]: AVC avc: denied { bpf } for pid=2011 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:41.869000 audit[2011]: AVC avc: denied { perfmon } for pid=2011 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:41.869000 audit[2011]: AVC avc: denied { perfmon } for pid=2011 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:41.869000 audit[2011]: AVC avc: denied { perfmon } for pid=2011 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:41.869000 audit[2011]: AVC avc: denied { perfmon } for pid=2011 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:41.869000 audit[2011]: AVC avc: denied { perfmon } for pid=2011 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:41.869000 audit[2011]: AVC avc: denied { bpf } for pid=2011 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:41.869000 audit[2011]: AVC avc: denied { bpf } for pid=2011 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:41.869000 audit: BPF prog-id=104 op=LOAD Jul 10 00:36:41.869000 audit[2011]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014d9d8 a2=78 a3=c000243dc0 items=0 ppid=2001 pid=2011 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:36:41.869000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6663393436383862383162666330356638396534323836383633373532 Jul 10 00:36:41.871000 audit[2011]: AVC avc: denied { bpf } for pid=2011 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:41.871000 audit[2011]: AVC avc: denied { bpf } for pid=2011 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:41.871000 audit[2011]: AVC avc: denied { perfmon } for pid=2011 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:41.871000 audit[2011]: AVC avc: denied { perfmon } for pid=2011 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:41.871000 audit[2011]: AVC avc: denied { perfmon } for pid=2011 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:41.871000 audit[2011]: AVC avc: denied { perfmon } for pid=2011 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:41.871000 audit[2011]: AVC avc: denied { perfmon } for pid=2011 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:41.871000 audit[2011]: AVC avc: denied { bpf } for pid=2011 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:41.871000 audit[2011]: AVC avc: denied { bpf } for pid=2011 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:41.871000 audit: BPF prog-id=105 op=LOAD Jul 10 00:36:41.871000 audit[2011]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00014d770 a2=78 a3=c000243e08 items=0 ppid=2001 pid=2011 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:36:41.871000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6663393436383862383162666330356638396534323836383633373532 Jul 10 00:36:41.874000 audit: BPF prog-id=105 op=UNLOAD Jul 10 00:36:41.874000 audit: BPF prog-id=104 op=UNLOAD Jul 10 00:36:41.874000 audit[2011]: AVC avc: denied { bpf } for pid=2011 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:41.874000 audit[2011]: AVC avc: denied { bpf } for pid=2011 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:41.874000 audit[2011]: AVC avc: denied { bpf } for pid=2011 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:41.874000 audit[2011]: AVC avc: denied { perfmon } for pid=2011 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:41.874000 audit[2011]: AVC avc: denied { perfmon } for pid=2011 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:41.874000 audit[2011]: AVC avc: denied { perfmon } for pid=2011 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:41.874000 audit[2011]: AVC avc: denied { perfmon } for pid=2011 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:41.874000 audit[2011]: AVC avc: denied { perfmon } for pid=2011 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:41.874000 audit[2011]: AVC avc: denied { bpf } for pid=2011 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:41.874000 audit[2011]: AVC avc: denied { bpf } for pid=2011 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:41.874000 audit: BPF prog-id=106 op=LOAD Jul 10 00:36:41.874000 audit[2011]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014dc30 a2=78 a3=c0003b6218 items=0 ppid=2001 pid=2011 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:36:41.874000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6663393436383862383162666330356638396534323836383633373532 Jul 10 00:36:41.916479 env[1205]: time="2025-07-10T00:36:41.916403756Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-747864d56d-zp4bx,Uid:78c0b897-908d-497c-a7c5-da4244eb5335,Namespace:tigera-operator,Attempt:0,} returns sandbox id \"fc94688b81bfc05f89e428686375231f8a7d32f1816353e105565f258008aa14\"" Jul 10 00:36:41.918141 env[1205]: time="2025-07-10T00:36:41.918117982Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.38.3\"" Jul 10 00:36:42.015962 kubelet[1947]: E0710 00:36:42.015924 1947 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:36:42.016642 env[1205]: time="2025-07-10T00:36:42.016593799Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-pklxj,Uid:c0f2154b-f500-46f8-9404-461cd99ea95d,Namespace:kube-system,Attempt:0,}" Jul 10 00:36:43.158677 env[1205]: time="2025-07-10T00:36:43.158569704Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 10 00:36:43.158677 env[1205]: time="2025-07-10T00:36:43.158611824Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 10 00:36:43.158677 env[1205]: time="2025-07-10T00:36:43.158622374Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 10 00:36:43.159265 env[1205]: time="2025-07-10T00:36:43.159197877Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/836e1197ae94e77910e65e5c2673ebfe769239c4397de5e7de1d57d46039ee8e pid=2043 runtime=io.containerd.runc.v2 Jul 10 00:36:43.171588 systemd[1]: Started cri-containerd-836e1197ae94e77910e65e5c2673ebfe769239c4397de5e7de1d57d46039ee8e.scope. Jul 10 00:36:43.296000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:43.296000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:43.296000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:43.296000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:43.296000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:43.296000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:43.296000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:43.296000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:43.296000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:43.296000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:43.296000 audit: BPF prog-id=107 op=LOAD Jul 10 00:36:43.297000 audit[2053]: AVC avc: denied { bpf } for pid=2053 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:43.297000 audit[2053]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000147c48 a2=10 a3=1c items=0 ppid=2043 pid=2053 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:36:43.297000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3833366531313937616539346537373931306536356535633236373365 Jul 10 00:36:43.297000 audit[2053]: AVC avc: denied { perfmon } for pid=2053 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:43.297000 audit[2053]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001476b0 a2=3c a3=c items=0 ppid=2043 pid=2053 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:36:43.297000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3833366531313937616539346537373931306536356535633236373365 Jul 10 00:36:43.297000 audit[2053]: AVC avc: denied { bpf } for pid=2053 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:43.297000 audit[2053]: AVC avc: denied { bpf } for pid=2053 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:43.297000 audit[2053]: AVC avc: denied { bpf } for pid=2053 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:43.297000 audit[2053]: AVC avc: denied { perfmon } for pid=2053 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:43.297000 audit[2053]: AVC avc: denied { perfmon } for pid=2053 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:43.297000 audit[2053]: AVC avc: denied { perfmon } for pid=2053 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:43.297000 audit[2053]: AVC avc: denied { perfmon } for pid=2053 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:43.297000 audit[2053]: AVC avc: denied { perfmon } for pid=2053 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:43.297000 audit[2053]: AVC avc: denied { bpf } for pid=2053 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:43.297000 audit[2053]: AVC avc: denied { bpf } for pid=2053 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:43.297000 audit: BPF prog-id=108 op=LOAD Jul 10 00:36:43.297000 audit[2053]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001479d8 a2=78 a3=c000331d10 items=0 ppid=2043 pid=2053 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:36:43.297000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3833366531313937616539346537373931306536356535633236373365 Jul 10 00:36:43.297000 audit[2053]: AVC avc: denied { bpf } for pid=2053 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:43.297000 audit[2053]: AVC avc: denied { bpf } for pid=2053 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:43.297000 audit[2053]: AVC avc: denied { perfmon } for pid=2053 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:43.297000 audit[2053]: AVC avc: denied { perfmon } for pid=2053 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:43.297000 audit[2053]: AVC avc: denied { perfmon } for pid=2053 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:43.297000 audit[2053]: AVC avc: denied { perfmon } for pid=2053 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:43.297000 audit[2053]: AVC avc: denied { perfmon } for pid=2053 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:43.297000 audit[2053]: AVC avc: denied { bpf } for pid=2053 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:43.297000 audit[2053]: AVC avc: denied { bpf } for pid=2053 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:43.297000 audit: BPF prog-id=109 op=LOAD Jul 10 00:36:43.297000 audit[2053]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000147770 a2=78 a3=c000331d58 items=0 ppid=2043 pid=2053 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:36:43.297000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3833366531313937616539346537373931306536356535633236373365 Jul 10 00:36:43.297000 audit: BPF prog-id=109 op=UNLOAD Jul 10 00:36:43.297000 audit: BPF prog-id=108 op=UNLOAD Jul 10 00:36:43.297000 audit[2053]: AVC avc: denied { bpf } for pid=2053 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:43.297000 audit[2053]: AVC avc: denied { bpf } for pid=2053 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:43.297000 audit[2053]: AVC avc: denied { bpf } for pid=2053 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:43.297000 audit[2053]: AVC avc: denied { perfmon } for pid=2053 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:43.297000 audit[2053]: AVC avc: denied { perfmon } for pid=2053 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:43.297000 audit[2053]: AVC avc: denied { perfmon } for pid=2053 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:43.297000 audit[2053]: AVC avc: denied { perfmon } for pid=2053 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:43.297000 audit[2053]: AVC avc: denied { perfmon } for pid=2053 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:43.297000 audit[2053]: AVC avc: denied { bpf } for pid=2053 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:43.297000 audit[2053]: AVC avc: denied { bpf } for pid=2053 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:43.297000 audit: BPF prog-id=110 op=LOAD Jul 10 00:36:43.297000 audit[2053]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000147c30 a2=78 a3=c00038a168 items=0 ppid=2043 pid=2053 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:36:43.297000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3833366531313937616539346537373931306536356535633236373365 Jul 10 00:36:43.307327 env[1205]: time="2025-07-10T00:36:43.307288633Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-pklxj,Uid:c0f2154b-f500-46f8-9404-461cd99ea95d,Namespace:kube-system,Attempt:0,} returns sandbox id \"836e1197ae94e77910e65e5c2673ebfe769239c4397de5e7de1d57d46039ee8e\"" Jul 10 00:36:43.308066 kubelet[1947]: E0710 00:36:43.308046 1947 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:36:43.309917 env[1205]: time="2025-07-10T00:36:43.309885809Z" level=info msg="CreateContainer within sandbox \"836e1197ae94e77910e65e5c2673ebfe769239c4397de5e7de1d57d46039ee8e\" for container &ContainerMetadata{Name:kube-proxy,Attempt:0,}" Jul 10 00:36:43.607384 kubelet[1947]: E0710 00:36:43.607345 1947 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:36:43.916542 kubelet[1947]: E0710 00:36:43.916436 1947 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:36:44.195826 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3092814965.mount: Deactivated successfully. Jul 10 00:36:44.596751 env[1205]: time="2025-07-10T00:36:44.596684990Z" level=info msg="CreateContainer within sandbox \"836e1197ae94e77910e65e5c2673ebfe769239c4397de5e7de1d57d46039ee8e\" for &ContainerMetadata{Name:kube-proxy,Attempt:0,} returns container id \"b4bb2107440dd35d0a0400752e5e29a36dccc03e7bc1cb941de67b758dc783e3\"" Jul 10 00:36:44.597551 env[1205]: time="2025-07-10T00:36:44.597521434Z" level=info msg="StartContainer for \"b4bb2107440dd35d0a0400752e5e29a36dccc03e7bc1cb941de67b758dc783e3\"" Jul 10 00:36:44.619521 systemd[1]: Started cri-containerd-b4bb2107440dd35d0a0400752e5e29a36dccc03e7bc1cb941de67b758dc783e3.scope. Jul 10 00:36:44.629000 audit[2083]: AVC avc: denied { perfmon } for pid=2083 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:44.629000 audit[2083]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001476b0 a2=3c a3=7f946db00858 items=0 ppid=2043 pid=2083 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:36:44.629000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6234626232313037343430646433356430613034303037353265356532 Jul 10 00:36:44.629000 audit[2083]: AVC avc: denied { bpf } for pid=2083 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:44.629000 audit[2083]: AVC avc: denied { bpf } for pid=2083 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:44.629000 audit[2083]: AVC avc: denied { bpf } for pid=2083 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:44.629000 audit[2083]: AVC avc: denied { perfmon } for pid=2083 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:44.629000 audit[2083]: AVC avc: denied { perfmon } for pid=2083 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:44.629000 audit[2083]: AVC avc: denied { perfmon } for pid=2083 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:44.629000 audit[2083]: AVC avc: denied { perfmon } for pid=2083 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:44.629000 audit[2083]: AVC avc: denied { perfmon } for pid=2083 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:44.629000 audit[2083]: AVC avc: denied { bpf } for pid=2083 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:44.629000 audit[2083]: AVC avc: denied { bpf } for pid=2083 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:44.629000 audit: BPF prog-id=111 op=LOAD Jul 10 00:36:44.629000 audit[2083]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001479d8 a2=78 a3=c00032dbd8 items=0 ppid=2043 pid=2083 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:36:44.629000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6234626232313037343430646433356430613034303037353265356532 Jul 10 00:36:44.630000 audit[2083]: AVC avc: denied { bpf } for pid=2083 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:44.630000 audit[2083]: AVC avc: denied { bpf } for pid=2083 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:44.630000 audit[2083]: AVC avc: denied { perfmon } for pid=2083 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:44.630000 audit[2083]: AVC avc: denied { perfmon } for pid=2083 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:44.630000 audit[2083]: AVC avc: denied { perfmon } for pid=2083 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:44.630000 audit[2083]: AVC avc: denied { perfmon } for pid=2083 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:44.630000 audit[2083]: AVC avc: denied { perfmon } for pid=2083 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:44.630000 audit[2083]: AVC avc: denied { bpf } for pid=2083 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:44.630000 audit[2083]: AVC avc: denied { bpf } for pid=2083 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:44.630000 audit: BPF prog-id=112 op=LOAD Jul 10 00:36:44.630000 audit[2083]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000147770 a2=78 a3=c00032dc28 items=0 ppid=2043 pid=2083 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:36:44.630000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6234626232313037343430646433356430613034303037353265356532 Jul 10 00:36:44.630000 audit: BPF prog-id=112 op=UNLOAD Jul 10 00:36:44.630000 audit: BPF prog-id=111 op=UNLOAD Jul 10 00:36:44.630000 audit[2083]: AVC avc: denied { bpf } for pid=2083 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:44.630000 audit[2083]: AVC avc: denied { bpf } for pid=2083 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:44.630000 audit[2083]: AVC avc: denied { bpf } for pid=2083 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:44.630000 audit[2083]: AVC avc: denied { perfmon } for pid=2083 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:44.630000 audit[2083]: AVC avc: denied { perfmon } for pid=2083 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:44.630000 audit[2083]: AVC avc: denied { perfmon } for pid=2083 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:44.630000 audit[2083]: AVC avc: denied { perfmon } for pid=2083 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:44.630000 audit[2083]: AVC avc: denied { perfmon } for pid=2083 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:44.630000 audit[2083]: AVC avc: denied { bpf } for pid=2083 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:44.630000 audit[2083]: AVC avc: denied { bpf } for pid=2083 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:44.630000 audit: BPF prog-id=113 op=LOAD Jul 10 00:36:44.630000 audit[2083]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000147c30 a2=78 a3=c00032dcb8 items=0 ppid=2043 pid=2083 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:36:44.630000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6234626232313037343430646433356430613034303037353265356532 Jul 10 00:36:44.776590 env[1205]: time="2025-07-10T00:36:44.776527277Z" level=info msg="StartContainer for \"b4bb2107440dd35d0a0400752e5e29a36dccc03e7bc1cb941de67b758dc783e3\" returns successfully" Jul 10 00:36:44.837000 audit[2146]: NETFILTER_CFG table=mangle:38 family=2 entries=1 op=nft_register_chain pid=2146 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:36:44.837000 audit[2146]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffddffa3f50 a2=0 a3=7ffddffa3f3c items=0 ppid=2093 pid=2146 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:36:44.837000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Jul 10 00:36:44.837000 audit[2145]: NETFILTER_CFG table=mangle:39 family=10 entries=1 op=nft_register_chain pid=2145 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:36:44.837000 audit[2145]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fff9d401cc0 a2=0 a3=7fff9d401cac items=0 ppid=2093 pid=2145 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:36:44.837000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Jul 10 00:36:44.838000 audit[2149]: NETFILTER_CFG table=nat:40 family=10 entries=1 op=nft_register_chain pid=2149 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:36:44.838000 audit[2149]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fffafa19d40 a2=0 a3=7fffafa19d2c items=0 ppid=2093 pid=2149 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:36:44.838000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Jul 10 00:36:44.838000 audit[2147]: NETFILTER_CFG table=nat:41 family=2 entries=1 op=nft_register_chain pid=2147 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:36:44.838000 audit[2147]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffe76cd0390 a2=0 a3=7ffe76cd037c items=0 ppid=2093 pid=2147 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:36:44.838000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Jul 10 00:36:44.839000 audit[2150]: NETFILTER_CFG table=filter:42 family=10 entries=1 op=nft_register_chain pid=2150 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:36:44.839000 audit[2150]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffe1eadd460 a2=0 a3=7ffe1eadd44c items=0 ppid=2093 pid=2150 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:36:44.839000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Jul 10 00:36:44.840000 audit[2151]: NETFILTER_CFG table=filter:43 family=2 entries=1 op=nft_register_chain pid=2151 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:36:44.840000 audit[2151]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffd928a3850 a2=0 a3=7ffd928a383c items=0 ppid=2093 pid=2151 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:36:44.840000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Jul 10 00:36:44.914959 kubelet[1947]: E0710 00:36:44.914849 1947 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:36:44.920197 kubelet[1947]: E0710 00:36:44.920174 1947 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:36:44.920439 kubelet[1947]: E0710 00:36:44.920397 1947 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:36:44.940000 audit[2153]: NETFILTER_CFG table=filter:44 family=2 entries=1 op=nft_register_chain pid=2153 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:36:44.940000 audit[2153]: SYSCALL arch=c000003e syscall=46 success=yes exit=108 a0=3 a1=7ffdca6dcc60 a2=0 a3=7ffdca6dcc4c items=0 ppid=2093 pid=2153 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:36:44.940000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Jul 10 00:36:44.945000 audit[2155]: NETFILTER_CFG table=filter:45 family=2 entries=1 op=nft_register_rule pid=2155 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:36:44.945000 audit[2155]: SYSCALL arch=c000003e syscall=46 success=yes exit=752 a0=3 a1=7ffed82c7a20 a2=0 a3=7ffed82c7a0c items=0 ppid=2093 pid=2155 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:36:44.945000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276696365 Jul 10 00:36:44.948130 kubelet[1947]: I0710 00:36:44.948059 1947 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-proxy-pklxj" podStartSLOduration=3.9480368500000003 podStartE2EDuration="3.94803685s" podCreationTimestamp="2025-07-10 00:36:41 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-10 00:36:44.947796507 +0000 UTC m=+10.370221535" watchObservedRunningTime="2025-07-10 00:36:44.94803685 +0000 UTC m=+10.370461858" Jul 10 00:36:44.948000 audit[2158]: NETFILTER_CFG table=filter:46 family=2 entries=1 op=nft_register_rule pid=2158 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:36:44.948000 audit[2158]: SYSCALL arch=c000003e syscall=46 success=yes exit=752 a0=3 a1=7ffdc9313be0 a2=0 a3=7ffdc9313bcc items=0 ppid=2093 pid=2158 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:36:44.948000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C65207365727669 Jul 10 00:36:44.949000 audit[2159]: NETFILTER_CFG table=filter:47 family=2 entries=1 op=nft_register_chain pid=2159 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:36:44.949000 audit[2159]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffdb4d96640 a2=0 a3=7ffdb4d9662c items=0 ppid=2093 pid=2159 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:36:44.949000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Jul 10 00:36:44.951000 audit[2161]: NETFILTER_CFG table=filter:48 family=2 entries=1 op=nft_register_rule pid=2161 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:36:44.951000 audit[2161]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffd6f255b70 a2=0 a3=7ffd6f255b5c items=0 ppid=2093 pid=2161 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:36:44.951000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Jul 10 00:36:44.952000 audit[2162]: NETFILTER_CFG table=filter:49 family=2 entries=1 op=nft_register_chain pid=2162 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:36:44.952000 audit[2162]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffcacf5aa40 a2=0 a3=7ffcacf5aa2c items=0 ppid=2093 pid=2162 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:36:44.952000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Jul 10 00:36:44.954000 audit[2164]: NETFILTER_CFG table=filter:50 family=2 entries=1 op=nft_register_rule pid=2164 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:36:44.954000 audit[2164]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7ffffdf9f380 a2=0 a3=7ffffdf9f36c items=0 ppid=2093 pid=2164 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:36:44.954000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Jul 10 00:36:44.957000 audit[2167]: NETFILTER_CFG table=filter:51 family=2 entries=1 op=nft_register_rule pid=2167 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:36:44.957000 audit[2167]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7fff6aa5b1d0 a2=0 a3=7fff6aa5b1bc items=0 ppid=2093 pid=2167 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:36:44.957000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D53 Jul 10 00:36:44.958000 audit[2168]: NETFILTER_CFG table=filter:52 family=2 entries=1 op=nft_register_chain pid=2168 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:36:44.958000 audit[2168]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fff73682380 a2=0 a3=7fff7368236c items=0 ppid=2093 pid=2168 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:36:44.958000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Jul 10 00:36:44.960000 audit[2170]: NETFILTER_CFG table=filter:53 family=2 entries=1 op=nft_register_rule pid=2170 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:36:44.960000 audit[2170]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffd9ea74e00 a2=0 a3=7ffd9ea74dec items=0 ppid=2093 pid=2170 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:36:44.960000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Jul 10 00:36:44.961000 audit[2171]: NETFILTER_CFG table=filter:54 family=2 entries=1 op=nft_register_chain pid=2171 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:36:44.961000 audit[2171]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffdefab71d0 a2=0 a3=7ffdefab71bc items=0 ppid=2093 pid=2171 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:36:44.961000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Jul 10 00:36:44.963000 audit[2173]: NETFILTER_CFG table=filter:55 family=2 entries=1 op=nft_register_rule pid=2173 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:36:44.963000 audit[2173]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffce7b3cc60 a2=0 a3=7ffce7b3cc4c items=0 ppid=2093 pid=2173 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:36:44.963000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Jul 10 00:36:44.966000 audit[2176]: NETFILTER_CFG table=filter:56 family=2 entries=1 op=nft_register_rule pid=2176 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:36:44.966000 audit[2176]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffc0792f440 a2=0 a3=7ffc0792f42c items=0 ppid=2093 pid=2176 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:36:44.966000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Jul 10 00:36:44.969000 audit[2179]: NETFILTER_CFG table=filter:57 family=2 entries=1 op=nft_register_rule pid=2179 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:36:44.969000 audit[2179]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffdd1d96820 a2=0 a3=7ffdd1d9680c items=0 ppid=2093 pid=2179 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:36:44.969000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Jul 10 00:36:44.970000 audit[2180]: NETFILTER_CFG table=nat:58 family=2 entries=1 op=nft_register_chain pid=2180 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:36:44.970000 audit[2180]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffd0ba1d840 a2=0 a3=7ffd0ba1d82c items=0 ppid=2093 pid=2180 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:36:44.970000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Jul 10 00:36:44.972000 audit[2182]: NETFILTER_CFG table=nat:59 family=2 entries=1 op=nft_register_rule pid=2182 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:36:44.972000 audit[2182]: SYSCALL arch=c000003e syscall=46 success=yes exit=524 a0=3 a1=7ffdb3a69c60 a2=0 a3=7ffdb3a69c4c items=0 ppid=2093 pid=2182 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:36:44.972000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Jul 10 00:36:44.974000 audit[2185]: NETFILTER_CFG table=nat:60 family=2 entries=1 op=nft_register_rule pid=2185 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:36:44.974000 audit[2185]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffe39c8f930 a2=0 a3=7ffe39c8f91c items=0 ppid=2093 pid=2185 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:36:44.974000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Jul 10 00:36:44.975000 audit[2186]: NETFILTER_CFG table=nat:61 family=2 entries=1 op=nft_register_chain pid=2186 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:36:44.975000 audit[2186]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffd723b6ab0 a2=0 a3=7ffd723b6a9c items=0 ppid=2093 pid=2186 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:36:44.975000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Jul 10 00:36:44.977000 audit[2188]: NETFILTER_CFG table=nat:62 family=2 entries=1 op=nft_register_rule pid=2188 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:36:44.977000 audit[2188]: SYSCALL arch=c000003e syscall=46 success=yes exit=532 a0=3 a1=7ffc190652a0 a2=0 a3=7ffc1906528c items=0 ppid=2093 pid=2188 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:36:44.977000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Jul 10 00:36:44.997000 audit[2194]: NETFILTER_CFG table=filter:63 family=2 entries=8 op=nft_register_rule pid=2194 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:36:44.997000 audit[2194]: SYSCALL arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7fff28841e50 a2=0 a3=7fff28841e3c items=0 ppid=2093 pid=2194 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:36:44.997000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:36:45.009000 audit[2194]: NETFILTER_CFG table=nat:64 family=2 entries=14 op=nft_register_chain pid=2194 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:36:45.009000 audit[2194]: SYSCALL arch=c000003e syscall=46 success=yes exit=5508 a0=3 a1=7fff28841e50 a2=0 a3=7fff28841e3c items=0 ppid=2093 pid=2194 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:36:45.009000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:36:45.010000 audit[2199]: NETFILTER_CFG table=filter:65 family=10 entries=1 op=nft_register_chain pid=2199 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:36:45.010000 audit[2199]: SYSCALL arch=c000003e syscall=46 success=yes exit=108 a0=3 a1=7ffe22faec70 a2=0 a3=7ffe22faec5c items=0 ppid=2093 pid=2199 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:36:45.010000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Jul 10 00:36:45.012000 audit[2201]: NETFILTER_CFG table=filter:66 family=10 entries=2 op=nft_register_chain pid=2201 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:36:45.012000 audit[2201]: SYSCALL arch=c000003e syscall=46 success=yes exit=836 a0=3 a1=7ffe4dcd62c0 a2=0 a3=7ffe4dcd62ac items=0 ppid=2093 pid=2201 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:36:45.012000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C6520736572766963 Jul 10 00:36:45.015000 audit[2204]: NETFILTER_CFG table=filter:67 family=10 entries=2 op=nft_register_chain pid=2204 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:36:45.015000 audit[2204]: SYSCALL arch=c000003e syscall=46 success=yes exit=836 a0=3 a1=7ffef478efc0 a2=0 a3=7ffef478efac items=0 ppid=2093 pid=2204 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:36:45.015000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276 Jul 10 00:36:45.016000 audit[2205]: NETFILTER_CFG table=filter:68 family=10 entries=1 op=nft_register_chain pid=2205 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:36:45.016000 audit[2205]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffe3a941c40 a2=0 a3=7ffe3a941c2c items=0 ppid=2093 pid=2205 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:36:45.016000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Jul 10 00:36:45.018000 audit[2207]: NETFILTER_CFG table=filter:69 family=10 entries=1 op=nft_register_rule pid=2207 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:36:45.018000 audit[2207]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffd71665530 a2=0 a3=7ffd7166551c items=0 ppid=2093 pid=2207 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:36:45.018000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Jul 10 00:36:45.019000 audit[2208]: NETFILTER_CFG table=filter:70 family=10 entries=1 op=nft_register_chain pid=2208 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:36:45.019000 audit[2208]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fff706f1ae0 a2=0 a3=7fff706f1acc items=0 ppid=2093 pid=2208 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:36:45.019000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Jul 10 00:36:45.021000 audit[2210]: NETFILTER_CFG table=filter:71 family=10 entries=1 op=nft_register_rule pid=2210 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:36:45.021000 audit[2210]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7ffc47520b20 a2=0 a3=7ffc47520b0c items=0 ppid=2093 pid=2210 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:36:45.021000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B554245 Jul 10 00:36:45.024000 audit[2213]: NETFILTER_CFG table=filter:72 family=10 entries=2 op=nft_register_chain pid=2213 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:36:45.024000 audit[2213]: SYSCALL arch=c000003e syscall=46 success=yes exit=828 a0=3 a1=7fff28529370 a2=0 a3=7fff2852935c items=0 ppid=2093 pid=2213 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:36:45.024000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Jul 10 00:36:45.025000 audit[2214]: NETFILTER_CFG table=filter:73 family=10 entries=1 op=nft_register_chain pid=2214 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:36:45.025000 audit[2214]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffe56312680 a2=0 a3=7ffe5631266c items=0 ppid=2093 pid=2214 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:36:45.025000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Jul 10 00:36:45.027000 audit[2216]: NETFILTER_CFG table=filter:74 family=10 entries=1 op=nft_register_rule pid=2216 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:36:45.027000 audit[2216]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffe2768c200 a2=0 a3=7ffe2768c1ec items=0 ppid=2093 pid=2216 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:36:45.027000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Jul 10 00:36:45.028000 audit[2217]: NETFILTER_CFG table=filter:75 family=10 entries=1 op=nft_register_chain pid=2217 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:36:45.028000 audit[2217]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffd519105c0 a2=0 a3=7ffd519105ac items=0 ppid=2093 pid=2217 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:36:45.028000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Jul 10 00:36:45.030000 audit[2219]: NETFILTER_CFG table=filter:76 family=10 entries=1 op=nft_register_rule pid=2219 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:36:45.030000 audit[2219]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffecbe9f330 a2=0 a3=7ffecbe9f31c items=0 ppid=2093 pid=2219 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:36:45.030000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Jul 10 00:36:45.033000 audit[2222]: NETFILTER_CFG table=filter:77 family=10 entries=1 op=nft_register_rule pid=2222 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:36:45.033000 audit[2222]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffe88534270 a2=0 a3=7ffe8853425c items=0 ppid=2093 pid=2222 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:36:45.033000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Jul 10 00:36:45.035000 audit[2225]: NETFILTER_CFG table=filter:78 family=10 entries=1 op=nft_register_rule pid=2225 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:36:45.035000 audit[2225]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffcacffc020 a2=0 a3=7ffcacffc00c items=0 ppid=2093 pid=2225 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:36:45.035000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C Jul 10 00:36:45.036000 audit[2226]: NETFILTER_CFG table=nat:79 family=10 entries=1 op=nft_register_chain pid=2226 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:36:45.036000 audit[2226]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffed6f385b0 a2=0 a3=7ffed6f3859c items=0 ppid=2093 pid=2226 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:36:45.036000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Jul 10 00:36:45.038000 audit[2228]: NETFILTER_CFG table=nat:80 family=10 entries=2 op=nft_register_chain pid=2228 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:36:45.038000 audit[2228]: SYSCALL arch=c000003e syscall=46 success=yes exit=600 a0=3 a1=7ffe91ab6720 a2=0 a3=7ffe91ab670c items=0 ppid=2093 pid=2228 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:36:45.038000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Jul 10 00:36:45.041000 audit[2231]: NETFILTER_CFG table=nat:81 family=10 entries=2 op=nft_register_chain pid=2231 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:36:45.041000 audit[2231]: SYSCALL arch=c000003e syscall=46 success=yes exit=608 a0=3 a1=7fff49e46330 a2=0 a3=7fff49e4631c items=0 ppid=2093 pid=2231 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:36:45.041000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Jul 10 00:36:45.042000 audit[2232]: NETFILTER_CFG table=nat:82 family=10 entries=1 op=nft_register_chain pid=2232 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:36:45.042000 audit[2232]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffc89589e70 a2=0 a3=7ffc89589e5c items=0 ppid=2093 pid=2232 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:36:45.042000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Jul 10 00:36:45.043000 audit[2234]: NETFILTER_CFG table=nat:83 family=10 entries=2 op=nft_register_chain pid=2234 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:36:45.043000 audit[2234]: SYSCALL arch=c000003e syscall=46 success=yes exit=612 a0=3 a1=7ffec27cec90 a2=0 a3=7ffec27cec7c items=0 ppid=2093 pid=2234 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:36:45.043000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Jul 10 00:36:45.044000 audit[2235]: NETFILTER_CFG table=filter:84 family=10 entries=1 op=nft_register_chain pid=2235 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:36:45.044000 audit[2235]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffc01b2cd40 a2=0 a3=7ffc01b2cd2c items=0 ppid=2093 pid=2235 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:36:45.044000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Jul 10 00:36:45.046000 audit[2237]: NETFILTER_CFG table=filter:85 family=10 entries=1 op=nft_register_rule pid=2237 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:36:45.046000 audit[2237]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffd3f9c66e0 a2=0 a3=7ffd3f9c66cc items=0 ppid=2093 pid=2237 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:36:45.046000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Jul 10 00:36:45.049000 audit[2240]: NETFILTER_CFG table=filter:86 family=10 entries=1 op=nft_register_rule pid=2240 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:36:45.049000 audit[2240]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffc2bc09ac0 a2=0 a3=7ffc2bc09aac items=0 ppid=2093 pid=2240 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:36:45.049000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Jul 10 00:36:45.052000 audit[2242]: NETFILTER_CFG table=filter:87 family=10 entries=3 op=nft_register_rule pid=2242 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Jul 10 00:36:45.052000 audit[2242]: SYSCALL arch=c000003e syscall=46 success=yes exit=2088 a0=3 a1=7ffee0ef1e60 a2=0 a3=7ffee0ef1e4c items=0 ppid=2093 pid=2242 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:36:45.052000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:36:45.052000 audit[2242]: NETFILTER_CFG table=nat:88 family=10 entries=7 op=nft_register_chain pid=2242 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Jul 10 00:36:45.052000 audit[2242]: SYSCALL arch=c000003e syscall=46 success=yes exit=2056 a0=3 a1=7ffee0ef1e60 a2=0 a3=7ffee0ef1e4c items=0 ppid=2093 pid=2242 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:36:45.052000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:36:45.070322 update_engine[1196]: I0710 00:36:45.070267 1196 update_attempter.cc:509] Updating boot flags... Jul 10 00:36:45.853901 kubelet[1947]: E0710 00:36:45.853859 1947 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:36:45.922348 kubelet[1947]: E0710 00:36:45.922299 1947 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:36:45.922785 kubelet[1947]: E0710 00:36:45.922751 1947 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:36:45.959987 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3436192622.mount: Deactivated successfully. Jul 10 00:36:46.816621 env[1205]: time="2025-07-10T00:36:46.816562511Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator:v1.38.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:36:46.818321 env[1205]: time="2025-07-10T00:36:46.818294358Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:8bde16470b09d1963e19456806d73180c9778a6c2b3c1fda2335c67c1cd4ce93,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:36:46.819804 env[1205]: time="2025-07-10T00:36:46.819769212Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/tigera/operator:v1.38.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:36:46.821277 env[1205]: time="2025-07-10T00:36:46.821241911Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator@sha256:dbf1bad0def7b5955dc8e4aeee96e23ead0bc5822f6872518e685cd0ed484121,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:36:46.821761 env[1205]: time="2025-07-10T00:36:46.821734928Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.38.3\" returns image reference \"sha256:8bde16470b09d1963e19456806d73180c9778a6c2b3c1fda2335c67c1cd4ce93\"" Jul 10 00:36:46.823611 env[1205]: time="2025-07-10T00:36:46.823562244Z" level=info msg="CreateContainer within sandbox \"fc94688b81bfc05f89e428686375231f8a7d32f1816353e105565f258008aa14\" for container &ContainerMetadata{Name:tigera-operator,Attempt:0,}" Jul 10 00:36:46.836210 env[1205]: time="2025-07-10T00:36:46.836161075Z" level=info msg="CreateContainer within sandbox \"fc94688b81bfc05f89e428686375231f8a7d32f1816353e105565f258008aa14\" for &ContainerMetadata{Name:tigera-operator,Attempt:0,} returns container id \"7e7cb77f8dc27085be2a97d9bc7f0bbeb053811358ea9c74f10ac2679d41103b\"" Jul 10 00:36:46.836765 env[1205]: time="2025-07-10T00:36:46.836734624Z" level=info msg="StartContainer for \"7e7cb77f8dc27085be2a97d9bc7f0bbeb053811358ea9c74f10ac2679d41103b\"" Jul 10 00:36:46.850469 systemd[1]: Started cri-containerd-7e7cb77f8dc27085be2a97d9bc7f0bbeb053811358ea9c74f10ac2679d41103b.scope. Jul 10 00:36:46.862000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:46.862000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:46.862000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:46.862000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:46.862000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:46.862000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:46.862000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:46.862000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:46.862000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:46.863000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:46.863000 audit: BPF prog-id=114 op=LOAD Jul 10 00:36:46.863000 audit[2265]: AVC avc: denied { bpf } for pid=2265 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:46.863000 audit[2265]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bfc48 a2=10 a3=1c items=0 ppid=2001 pid=2265 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:36:46.863000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3765376362373766386463323730383562653261393764396263376630 Jul 10 00:36:46.863000 audit[2265]: AVC avc: denied { perfmon } for pid=2265 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:46.863000 audit[2265]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001bf6b0 a2=3c a3=8 items=0 ppid=2001 pid=2265 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:36:46.863000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3765376362373766386463323730383562653261393764396263376630 Jul 10 00:36:46.863000 audit[2265]: AVC avc: denied { bpf } for pid=2265 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:46.863000 audit[2265]: AVC avc: denied { bpf } for pid=2265 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:46.863000 audit[2265]: AVC avc: denied { bpf } for pid=2265 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:46.863000 audit[2265]: AVC avc: denied { perfmon } for pid=2265 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:46.863000 audit[2265]: AVC avc: denied { perfmon } for pid=2265 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:46.863000 audit[2265]: AVC avc: denied { perfmon } for pid=2265 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:46.863000 audit[2265]: AVC avc: denied { perfmon } for pid=2265 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:46.863000 audit[2265]: AVC avc: denied { perfmon } for pid=2265 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:46.863000 audit[2265]: AVC avc: denied { bpf } for pid=2265 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:46.863000 audit[2265]: AVC avc: denied { bpf } for pid=2265 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:46.863000 audit: BPF prog-id=115 op=LOAD Jul 10 00:36:46.863000 audit[2265]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bf9d8 a2=78 a3=c000320ac0 items=0 ppid=2001 pid=2265 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:36:46.863000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3765376362373766386463323730383562653261393764396263376630 Jul 10 00:36:46.863000 audit[2265]: AVC avc: denied { bpf } for pid=2265 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:46.863000 audit[2265]: AVC avc: denied { bpf } for pid=2265 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:46.863000 audit[2265]: AVC avc: denied { perfmon } for pid=2265 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:46.863000 audit[2265]: AVC avc: denied { perfmon } for pid=2265 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:46.863000 audit[2265]: AVC avc: denied { perfmon } for pid=2265 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:46.863000 audit[2265]: AVC avc: denied { perfmon } for pid=2265 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:46.863000 audit[2265]: AVC avc: denied { perfmon } for pid=2265 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:46.863000 audit[2265]: AVC avc: denied { bpf } for pid=2265 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:46.863000 audit[2265]: AVC avc: denied { bpf } for pid=2265 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:46.863000 audit: BPF prog-id=116 op=LOAD Jul 10 00:36:46.863000 audit[2265]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bf770 a2=78 a3=c000320b08 items=0 ppid=2001 pid=2265 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:36:46.863000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3765376362373766386463323730383562653261393764396263376630 Jul 10 00:36:46.863000 audit: BPF prog-id=116 op=UNLOAD Jul 10 00:36:46.863000 audit: BPF prog-id=115 op=UNLOAD Jul 10 00:36:46.863000 audit[2265]: AVC avc: denied { bpf } for pid=2265 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:46.863000 audit[2265]: AVC avc: denied { bpf } for pid=2265 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:46.863000 audit[2265]: AVC avc: denied { bpf } for pid=2265 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:46.863000 audit[2265]: AVC avc: denied { perfmon } for pid=2265 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:46.863000 audit[2265]: AVC avc: denied { perfmon } for pid=2265 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:46.863000 audit[2265]: AVC avc: denied { perfmon } for pid=2265 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:46.863000 audit[2265]: AVC avc: denied { perfmon } for pid=2265 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:46.863000 audit[2265]: AVC avc: denied { perfmon } for pid=2265 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:46.863000 audit[2265]: AVC avc: denied { bpf } for pid=2265 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:46.863000 audit[2265]: AVC avc: denied { bpf } for pid=2265 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:46.863000 audit: BPF prog-id=117 op=LOAD Jul 10 00:36:46.863000 audit[2265]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bfc30 a2=78 a3=c000320f18 items=0 ppid=2001 pid=2265 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:36:46.863000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3765376362373766386463323730383562653261393764396263376630 Jul 10 00:36:46.875475 env[1205]: time="2025-07-10T00:36:46.875421812Z" level=info msg="StartContainer for \"7e7cb77f8dc27085be2a97d9bc7f0bbeb053811358ea9c74f10ac2679d41103b\" returns successfully" Jul 10 00:36:52.535378 sudo[1341]: pam_unix(sudo:session): session closed for user root Jul 10 00:36:52.542663 kernel: kauditd_printk_skb: 357 callbacks suppressed Jul 10 00:36:52.542726 kernel: audit: type=1106 audit(1752107812.534:911): pid=1341 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 10 00:36:52.542747 kernel: audit: type=1104 audit(1752107812.534:912): pid=1341 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 10 00:36:52.534000 audit[1341]: USER_END pid=1341 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 10 00:36:52.534000 audit[1341]: CRED_DISP pid=1341 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 10 00:36:52.544492 sshd[1338]: pam_unix(sshd:session): session closed for user core Jul 10 00:36:52.553258 kernel: audit: type=1106 audit(1752107812.545:913): pid=1338 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:36:52.553307 kernel: audit: type=1104 audit(1752107812.545:914): pid=1338 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:36:52.545000 audit[1338]: USER_END pid=1338 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:36:52.545000 audit[1338]: CRED_DISP pid=1338 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:36:52.553792 systemd[1]: sshd@6-10.0.0.36:22-10.0.0.1:53572.service: Deactivated successfully. Jul 10 00:36:52.554445 systemd[1]: session-7.scope: Deactivated successfully. Jul 10 00:36:52.554560 systemd[1]: session-7.scope: Consumed 4.531s CPU time. Jul 10 00:36:52.553000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.36:22-10.0.0.1:53572 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:36:52.555790 systemd-logind[1194]: Session 7 logged out. Waiting for processes to exit. Jul 10 00:36:52.558797 kernel: audit: type=1131 audit(1752107812.553:915): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.36:22-10.0.0.1:53572 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:36:52.559442 systemd-logind[1194]: Removed session 7. Jul 10 00:36:52.978000 audit[2348]: NETFILTER_CFG table=filter:89 family=2 entries=15 op=nft_register_rule pid=2348 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:36:52.988199 kernel: audit: type=1325 audit(1752107812.978:916): table=filter:89 family=2 entries=15 op=nft_register_rule pid=2348 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:36:52.988354 kernel: audit: type=1300 audit(1752107812.978:916): arch=c000003e syscall=46 success=yes exit=5992 a0=3 a1=7ffeb23d7030 a2=0 a3=7ffeb23d701c items=0 ppid=2093 pid=2348 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:36:52.988382 kernel: audit: type=1327 audit(1752107812.978:916): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:36:52.978000 audit[2348]: SYSCALL arch=c000003e syscall=46 success=yes exit=5992 a0=3 a1=7ffeb23d7030 a2=0 a3=7ffeb23d701c items=0 ppid=2093 pid=2348 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:36:52.978000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:36:52.991000 audit[2348]: NETFILTER_CFG table=nat:90 family=2 entries=12 op=nft_register_rule pid=2348 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:36:52.991000 audit[2348]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffeb23d7030 a2=0 a3=0 items=0 ppid=2093 pid=2348 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:36:52.998891 kernel: audit: type=1325 audit(1752107812.991:917): table=nat:90 family=2 entries=12 op=nft_register_rule pid=2348 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:36:52.998971 kernel: audit: type=1300 audit(1752107812.991:917): arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffeb23d7030 a2=0 a3=0 items=0 ppid=2093 pid=2348 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:36:52.991000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:36:53.041000 audit[2350]: NETFILTER_CFG table=filter:91 family=2 entries=16 op=nft_register_rule pid=2350 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:36:53.041000 audit[2350]: SYSCALL arch=c000003e syscall=46 success=yes exit=5992 a0=3 a1=7ffdfdfbfd70 a2=0 a3=7ffdfdfbfd5c items=0 ppid=2093 pid=2350 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:36:53.041000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:36:53.061000 audit[2350]: NETFILTER_CFG table=nat:92 family=2 entries=12 op=nft_register_rule pid=2350 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:36:53.061000 audit[2350]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffdfdfbfd70 a2=0 a3=0 items=0 ppid=2093 pid=2350 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:36:53.061000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:36:54.663000 audit[2352]: NETFILTER_CFG table=filter:93 family=2 entries=17 op=nft_register_rule pid=2352 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:36:54.663000 audit[2352]: SYSCALL arch=c000003e syscall=46 success=yes exit=6736 a0=3 a1=7ffd4aa89b70 a2=0 a3=7ffd4aa89b5c items=0 ppid=2093 pid=2352 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:36:54.663000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:36:54.668000 audit[2352]: NETFILTER_CFG table=nat:94 family=2 entries=12 op=nft_register_rule pid=2352 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:36:54.668000 audit[2352]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffd4aa89b70 a2=0 a3=0 items=0 ppid=2093 pid=2352 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:36:54.668000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:36:54.914810 kubelet[1947]: I0710 00:36:54.914632 1947 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="tigera-operator/tigera-operator-747864d56d-zp4bx" podStartSLOduration=9.009653409 podStartE2EDuration="13.914601899s" podCreationTimestamp="2025-07-10 00:36:41 +0000 UTC" firstStartedPulling="2025-07-10 00:36:41.917520488 +0000 UTC m=+7.339945496" lastFinishedPulling="2025-07-10 00:36:46.822468978 +0000 UTC m=+12.244893986" observedRunningTime="2025-07-10 00:36:46.935207324 +0000 UTC m=+12.357632332" watchObservedRunningTime="2025-07-10 00:36:54.914601899 +0000 UTC m=+20.337026907" Jul 10 00:36:54.925857 systemd[1]: Created slice kubepods-besteffort-podad92920b_1b7d_4037_af0f_0f342421a6ba.slice. Jul 10 00:36:55.057181 kubelet[1947]: I0710 00:36:55.057129 1947 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"typha-certs\" (UniqueName: \"kubernetes.io/secret/ad92920b-1b7d-4037-af0f-0f342421a6ba-typha-certs\") pod \"calico-typha-5bc9744d99-dd6nh\" (UID: \"ad92920b-1b7d-4037-af0f-0f342421a6ba\") " pod="calico-system/calico-typha-5bc9744d99-dd6nh" Jul 10 00:36:55.057181 kubelet[1947]: I0710 00:36:55.057170 1947 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-zhsfd\" (UniqueName: \"kubernetes.io/projected/ad92920b-1b7d-4037-af0f-0f342421a6ba-kube-api-access-zhsfd\") pod \"calico-typha-5bc9744d99-dd6nh\" (UID: \"ad92920b-1b7d-4037-af0f-0f342421a6ba\") " pod="calico-system/calico-typha-5bc9744d99-dd6nh" Jul 10 00:36:55.057385 kubelet[1947]: I0710 00:36:55.057193 1947 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/ad92920b-1b7d-4037-af0f-0f342421a6ba-tigera-ca-bundle\") pod \"calico-typha-5bc9744d99-dd6nh\" (UID: \"ad92920b-1b7d-4037-af0f-0f342421a6ba\") " pod="calico-system/calico-typha-5bc9744d99-dd6nh" Jul 10 00:36:55.229269 kubelet[1947]: E0710 00:36:55.229223 1947 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:36:55.229961 env[1205]: time="2025-07-10T00:36:55.229916610Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-5bc9744d99-dd6nh,Uid:ad92920b-1b7d-4037-af0f-0f342421a6ba,Namespace:calico-system,Attempt:0,}" Jul 10 00:36:55.468048 env[1205]: time="2025-07-10T00:36:55.467917847Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 10 00:36:55.468048 env[1205]: time="2025-07-10T00:36:55.467959014Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 10 00:36:55.468048 env[1205]: time="2025-07-10T00:36:55.467968914Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 10 00:36:55.470470 env[1205]: time="2025-07-10T00:36:55.470413266Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/658b0520201a46a764fa1d941fdc0a8db6296e5784a34759adb52f929a1c080f pid=2362 runtime=io.containerd.runc.v2 Jul 10 00:36:55.488711 systemd[1]: Started cri-containerd-658b0520201a46a764fa1d941fdc0a8db6296e5784a34759adb52f929a1c080f.scope. Jul 10 00:36:55.495108 systemd[1]: Created slice kubepods-besteffort-pod41153073_1890_4f5e_ab4d_0f391b5a7450.slice. Jul 10 00:36:55.508000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:55.508000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:55.508000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:55.508000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:55.508000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:55.508000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:55.508000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:55.508000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:55.508000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:55.508000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:55.508000 audit: BPF prog-id=118 op=LOAD Jul 10 00:36:55.509000 audit[2371]: AVC avc: denied { bpf } for pid=2371 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:55.509000 audit[2371]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00014dc48 a2=10 a3=1c items=0 ppid=2362 pid=2371 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:36:55.509000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3635386230353230323031613436613736346661316439343166646330 Jul 10 00:36:55.509000 audit[2371]: AVC avc: denied { perfmon } for pid=2371 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:55.509000 audit[2371]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00014d6b0 a2=3c a3=c items=0 ppid=2362 pid=2371 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:36:55.509000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3635386230353230323031613436613736346661316439343166646330 Jul 10 00:36:55.509000 audit[2371]: AVC avc: denied { bpf } for pid=2371 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:55.509000 audit[2371]: AVC avc: denied { bpf } for pid=2371 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:55.509000 audit[2371]: AVC avc: denied { bpf } for pid=2371 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:55.509000 audit[2371]: AVC avc: denied { perfmon } for pid=2371 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:55.509000 audit[2371]: AVC avc: denied { perfmon } for pid=2371 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:55.509000 audit[2371]: AVC avc: denied { perfmon } for pid=2371 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:55.509000 audit[2371]: AVC avc: denied { perfmon } for pid=2371 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:55.509000 audit[2371]: AVC avc: denied { perfmon } for pid=2371 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:55.509000 audit[2371]: AVC avc: denied { bpf } for pid=2371 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:55.509000 audit[2371]: AVC avc: denied { bpf } for pid=2371 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:55.509000 audit: BPF prog-id=119 op=LOAD Jul 10 00:36:55.509000 audit[2371]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014d9d8 a2=78 a3=c00021e830 items=0 ppid=2362 pid=2371 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:36:55.509000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3635386230353230323031613436613736346661316439343166646330 Jul 10 00:36:55.509000 audit[2371]: AVC avc: denied { bpf } for pid=2371 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:55.509000 audit[2371]: AVC avc: denied { bpf } for pid=2371 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:55.509000 audit[2371]: AVC avc: denied { perfmon } for pid=2371 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:55.509000 audit[2371]: AVC avc: denied { perfmon } for pid=2371 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:55.509000 audit[2371]: AVC avc: denied { perfmon } for pid=2371 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:55.509000 audit[2371]: AVC avc: denied { perfmon } for pid=2371 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:55.509000 audit[2371]: AVC avc: denied { perfmon } for pid=2371 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:55.509000 audit[2371]: AVC avc: denied { bpf } for pid=2371 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:55.509000 audit[2371]: AVC avc: denied { bpf } for pid=2371 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:55.509000 audit: BPF prog-id=120 op=LOAD Jul 10 00:36:55.509000 audit[2371]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00014d770 a2=78 a3=c00021e878 items=0 ppid=2362 pid=2371 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:36:55.509000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3635386230353230323031613436613736346661316439343166646330 Jul 10 00:36:55.509000 audit: BPF prog-id=120 op=UNLOAD Jul 10 00:36:55.509000 audit: BPF prog-id=119 op=UNLOAD Jul 10 00:36:55.509000 audit[2371]: AVC avc: denied { bpf } for pid=2371 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:55.509000 audit[2371]: AVC avc: denied { bpf } for pid=2371 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:55.509000 audit[2371]: AVC avc: denied { bpf } for pid=2371 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:55.509000 audit[2371]: AVC avc: denied { perfmon } for pid=2371 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:55.509000 audit[2371]: AVC avc: denied { perfmon } for pid=2371 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:55.509000 audit[2371]: AVC avc: denied { perfmon } for pid=2371 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:55.509000 audit[2371]: AVC avc: denied { perfmon } for pid=2371 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:55.509000 audit[2371]: AVC avc: denied { perfmon } for pid=2371 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:55.509000 audit[2371]: AVC avc: denied { bpf } for pid=2371 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:55.509000 audit[2371]: AVC avc: denied { bpf } for pid=2371 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:55.509000 audit: BPF prog-id=121 op=LOAD Jul 10 00:36:55.509000 audit[2371]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014dc30 a2=78 a3=c00021ec88 items=0 ppid=2362 pid=2371 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:36:55.509000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3635386230353230323031613436613736346661316439343166646330 Jul 10 00:36:55.539360 env[1205]: time="2025-07-10T00:36:55.539309001Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-5bc9744d99-dd6nh,Uid:ad92920b-1b7d-4037-af0f-0f342421a6ba,Namespace:calico-system,Attempt:0,} returns sandbox id \"658b0520201a46a764fa1d941fdc0a8db6296e5784a34759adb52f929a1c080f\"" Jul 10 00:36:55.540474 kubelet[1947]: E0710 00:36:55.540451 1947 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:36:55.547527 env[1205]: time="2025-07-10T00:36:55.547494078Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.30.2\"" Jul 10 00:36:55.560396 kubelet[1947]: I0710 00:36:55.560352 1947 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/41153073-1890-4f5e-ab4d-0f391b5a7450-lib-modules\") pod \"calico-node-klvkz\" (UID: \"41153073-1890-4f5e-ab4d-0f391b5a7450\") " pod="calico-system/calico-node-klvkz" Jul 10 00:36:55.560396 kubelet[1947]: I0710 00:36:55.560397 1947 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-net-dir\" (UniqueName: \"kubernetes.io/host-path/41153073-1890-4f5e-ab4d-0f391b5a7450-cni-net-dir\") pod \"calico-node-klvkz\" (UID: \"41153073-1890-4f5e-ab4d-0f391b5a7450\") " pod="calico-system/calico-node-klvkz" Jul 10 00:36:55.560579 kubelet[1947]: I0710 00:36:55.560418 1947 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"policysync\" (UniqueName: \"kubernetes.io/host-path/41153073-1890-4f5e-ab4d-0f391b5a7450-policysync\") pod \"calico-node-klvkz\" (UID: \"41153073-1890-4f5e-ab4d-0f391b5a7450\") " pod="calico-system/calico-node-klvkz" Jul 10 00:36:55.560579 kubelet[1947]: I0710 00:36:55.560441 1947 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/41153073-1890-4f5e-ab4d-0f391b5a7450-var-lib-calico\") pod \"calico-node-klvkz\" (UID: \"41153073-1890-4f5e-ab4d-0f391b5a7450\") " pod="calico-system/calico-node-klvkz" Jul 10 00:36:55.560579 kubelet[1947]: I0710 00:36:55.560469 1947 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-zmcqh\" (UniqueName: \"kubernetes.io/projected/41153073-1890-4f5e-ab4d-0f391b5a7450-kube-api-access-zmcqh\") pod \"calico-node-klvkz\" (UID: \"41153073-1890-4f5e-ab4d-0f391b5a7450\") " pod="calico-system/calico-node-klvkz" Jul 10 00:36:55.560579 kubelet[1947]: I0710 00:36:55.560490 1947 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-run-calico\" (UniqueName: \"kubernetes.io/host-path/41153073-1890-4f5e-ab4d-0f391b5a7450-var-run-calico\") pod \"calico-node-klvkz\" (UID: \"41153073-1890-4f5e-ab4d-0f391b5a7450\") " pod="calico-system/calico-node-klvkz" Jul 10 00:36:55.560579 kubelet[1947]: I0710 00:36:55.560504 1947 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-log-dir\" (UniqueName: \"kubernetes.io/host-path/41153073-1890-4f5e-ab4d-0f391b5a7450-cni-log-dir\") pod \"calico-node-klvkz\" (UID: \"41153073-1890-4f5e-ab4d-0f391b5a7450\") " pod="calico-system/calico-node-klvkz" Jul 10 00:36:55.560857 kubelet[1947]: I0710 00:36:55.560520 1947 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvol-driver-host\" (UniqueName: \"kubernetes.io/host-path/41153073-1890-4f5e-ab4d-0f391b5a7450-flexvol-driver-host\") pod \"calico-node-klvkz\" (UID: \"41153073-1890-4f5e-ab4d-0f391b5a7450\") " pod="calico-system/calico-node-klvkz" Jul 10 00:36:55.560857 kubelet[1947]: I0710 00:36:55.560544 1947 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-bin-dir\" (UniqueName: \"kubernetes.io/host-path/41153073-1890-4f5e-ab4d-0f391b5a7450-cni-bin-dir\") pod \"calico-node-klvkz\" (UID: \"41153073-1890-4f5e-ab4d-0f391b5a7450\") " pod="calico-system/calico-node-klvkz" Jul 10 00:36:55.560857 kubelet[1947]: I0710 00:36:55.560564 1947 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/41153073-1890-4f5e-ab4d-0f391b5a7450-tigera-ca-bundle\") pod \"calico-node-klvkz\" (UID: \"41153073-1890-4f5e-ab4d-0f391b5a7450\") " pod="calico-system/calico-node-klvkz" Jul 10 00:36:55.560857 kubelet[1947]: I0710 00:36:55.560584 1947 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/41153073-1890-4f5e-ab4d-0f391b5a7450-xtables-lock\") pod \"calico-node-klvkz\" (UID: \"41153073-1890-4f5e-ab4d-0f391b5a7450\") " pod="calico-system/calico-node-klvkz" Jul 10 00:36:55.560857 kubelet[1947]: I0710 00:36:55.560614 1947 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"node-certs\" (UniqueName: \"kubernetes.io/secret/41153073-1890-4f5e-ab4d-0f391b5a7450-node-certs\") pod \"calico-node-klvkz\" (UID: \"41153073-1890-4f5e-ab4d-0f391b5a7450\") " pod="calico-system/calico-node-klvkz" Jul 10 00:36:55.662375 kubelet[1947]: E0710 00:36:55.662312 1947 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-xcq57" podUID="11ff2135-d9e8-4055-b855-c59ae8ddcd79" Jul 10 00:36:55.664438 kubelet[1947]: E0710 00:36:55.664238 1947 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:36:55.664438 kubelet[1947]: W0710 00:36:55.664274 1947 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:36:55.664438 kubelet[1947]: E0710 00:36:55.664319 1947 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:36:55.664788 kubelet[1947]: E0710 00:36:55.664746 1947 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:36:55.664788 kubelet[1947]: W0710 00:36:55.664757 1947 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:36:55.664788 kubelet[1947]: E0710 00:36:55.664766 1947 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:36:55.670926 kubelet[1947]: E0710 00:36:55.670896 1947 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:36:55.670926 kubelet[1947]: W0710 00:36:55.670919 1947 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:36:55.671143 kubelet[1947]: E0710 00:36:55.670948 1947 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:36:55.671143 kubelet[1947]: E0710 00:36:55.671127 1947 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:36:55.671143 kubelet[1947]: W0710 00:36:55.671134 1947 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:36:55.671143 kubelet[1947]: E0710 00:36:55.671142 1947 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:36:55.681000 audit[2406]: NETFILTER_CFG table=filter:95 family=2 entries=20 op=nft_register_rule pid=2406 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:36:55.681000 audit[2406]: SYSCALL arch=c000003e syscall=46 success=yes exit=8224 a0=3 a1=7ffd3cfa6430 a2=0 a3=7ffd3cfa641c items=0 ppid=2093 pid=2406 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:36:55.681000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:36:55.686000 audit[2406]: NETFILTER_CFG table=nat:96 family=2 entries=12 op=nft_register_rule pid=2406 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:36:55.686000 audit[2406]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffd3cfa6430 a2=0 a3=0 items=0 ppid=2093 pid=2406 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:36:55.686000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:36:55.706814 kubelet[1947]: E0710 00:36:55.706768 1947 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:36:55.706814 kubelet[1947]: W0710 00:36:55.706799 1947 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:36:55.706814 kubelet[1947]: E0710 00:36:55.706828 1947 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:36:55.707064 kubelet[1947]: E0710 00:36:55.707043 1947 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:36:55.707064 kubelet[1947]: W0710 00:36:55.707056 1947 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:36:55.707154 kubelet[1947]: E0710 00:36:55.707096 1947 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:36:55.707246 kubelet[1947]: E0710 00:36:55.707231 1947 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:36:55.707246 kubelet[1947]: W0710 00:36:55.707240 1947 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:36:55.707246 kubelet[1947]: E0710 00:36:55.707247 1947 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:36:55.707465 kubelet[1947]: E0710 00:36:55.707450 1947 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:36:55.707465 kubelet[1947]: W0710 00:36:55.707459 1947 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:36:55.707465 kubelet[1947]: E0710 00:36:55.707467 1947 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:36:55.707684 kubelet[1947]: E0710 00:36:55.707667 1947 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:36:55.707684 kubelet[1947]: W0710 00:36:55.707680 1947 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:36:55.707773 kubelet[1947]: E0710 00:36:55.707690 1947 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:36:55.707867 kubelet[1947]: E0710 00:36:55.707850 1947 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:36:55.707867 kubelet[1947]: W0710 00:36:55.707864 1947 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:36:55.707972 kubelet[1947]: E0710 00:36:55.707874 1947 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:36:55.708042 kubelet[1947]: E0710 00:36:55.708025 1947 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:36:55.708042 kubelet[1947]: W0710 00:36:55.708037 1947 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:36:55.708126 kubelet[1947]: E0710 00:36:55.708047 1947 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:36:55.708213 kubelet[1947]: E0710 00:36:55.708197 1947 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:36:55.708276 kubelet[1947]: W0710 00:36:55.708217 1947 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:36:55.708276 kubelet[1947]: E0710 00:36:55.708226 1947 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:36:55.708420 kubelet[1947]: E0710 00:36:55.708405 1947 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:36:55.708420 kubelet[1947]: W0710 00:36:55.708417 1947 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:36:55.708499 kubelet[1947]: E0710 00:36:55.708427 1947 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:36:55.708623 kubelet[1947]: E0710 00:36:55.708608 1947 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:36:55.708623 kubelet[1947]: W0710 00:36:55.708617 1947 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:36:55.708623 kubelet[1947]: E0710 00:36:55.708624 1947 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:36:55.708837 kubelet[1947]: E0710 00:36:55.708814 1947 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:36:55.708884 kubelet[1947]: W0710 00:36:55.708838 1947 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:36:55.708884 kubelet[1947]: E0710 00:36:55.708863 1947 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:36:55.709024 kubelet[1947]: E0710 00:36:55.709012 1947 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:36:55.709068 kubelet[1947]: W0710 00:36:55.709026 1947 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:36:55.709068 kubelet[1947]: E0710 00:36:55.709033 1947 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:36:55.709222 kubelet[1947]: E0710 00:36:55.709210 1947 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:36:55.709222 kubelet[1947]: W0710 00:36:55.709217 1947 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:36:55.709292 kubelet[1947]: E0710 00:36:55.709224 1947 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:36:55.709359 kubelet[1947]: E0710 00:36:55.709349 1947 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:36:55.709359 kubelet[1947]: W0710 00:36:55.709356 1947 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:36:55.709410 kubelet[1947]: E0710 00:36:55.709362 1947 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:36:55.709501 kubelet[1947]: E0710 00:36:55.709493 1947 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:36:55.709523 kubelet[1947]: W0710 00:36:55.709500 1947 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:36:55.709523 kubelet[1947]: E0710 00:36:55.709506 1947 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:36:55.709626 kubelet[1947]: E0710 00:36:55.709617 1947 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:36:55.709626 kubelet[1947]: W0710 00:36:55.709624 1947 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:36:55.709690 kubelet[1947]: E0710 00:36:55.709631 1947 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:36:55.709781 kubelet[1947]: E0710 00:36:55.709771 1947 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:36:55.709809 kubelet[1947]: W0710 00:36:55.709780 1947 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:36:55.709809 kubelet[1947]: E0710 00:36:55.709788 1947 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:36:55.709894 kubelet[1947]: E0710 00:36:55.709886 1947 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:36:55.709894 kubelet[1947]: W0710 00:36:55.709893 1947 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:36:55.709940 kubelet[1947]: E0710 00:36:55.709899 1947 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:36:55.710018 kubelet[1947]: E0710 00:36:55.710010 1947 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:36:55.710018 kubelet[1947]: W0710 00:36:55.710017 1947 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:36:55.710073 kubelet[1947]: E0710 00:36:55.710022 1947 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:36:55.710157 kubelet[1947]: E0710 00:36:55.710149 1947 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:36:55.710182 kubelet[1947]: W0710 00:36:55.710156 1947 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:36:55.710182 kubelet[1947]: E0710 00:36:55.710162 1947 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:36:55.764084 kubelet[1947]: E0710 00:36:55.763982 1947 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:36:55.764084 kubelet[1947]: W0710 00:36:55.763999 1947 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:36:55.764084 kubelet[1947]: E0710 00:36:55.764018 1947 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:36:55.764084 kubelet[1947]: I0710 00:36:55.764044 1947 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"socket-dir\" (UniqueName: \"kubernetes.io/host-path/11ff2135-d9e8-4055-b855-c59ae8ddcd79-socket-dir\") pod \"csi-node-driver-xcq57\" (UID: \"11ff2135-d9e8-4055-b855-c59ae8ddcd79\") " pod="calico-system/csi-node-driver-xcq57" Jul 10 00:36:55.764283 kubelet[1947]: E0710 00:36:55.764248 1947 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:36:55.764283 kubelet[1947]: W0710 00:36:55.764268 1947 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:36:55.764333 kubelet[1947]: E0710 00:36:55.764297 1947 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:36:55.764359 kubelet[1947]: I0710 00:36:55.764328 1947 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"registration-dir\" (UniqueName: \"kubernetes.io/host-path/11ff2135-d9e8-4055-b855-c59ae8ddcd79-registration-dir\") pod \"csi-node-driver-xcq57\" (UID: \"11ff2135-d9e8-4055-b855-c59ae8ddcd79\") " pod="calico-system/csi-node-driver-xcq57" Jul 10 00:36:55.764645 kubelet[1947]: E0710 00:36:55.764629 1947 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:36:55.764645 kubelet[1947]: W0710 00:36:55.764643 1947 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:36:55.764739 kubelet[1947]: E0710 00:36:55.764671 1947 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:36:55.764739 kubelet[1947]: I0710 00:36:55.764689 1947 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubelet-dir\" (UniqueName: \"kubernetes.io/host-path/11ff2135-d9e8-4055-b855-c59ae8ddcd79-kubelet-dir\") pod \"csi-node-driver-xcq57\" (UID: \"11ff2135-d9e8-4055-b855-c59ae8ddcd79\") " pod="calico-system/csi-node-driver-xcq57" Jul 10 00:36:55.764870 kubelet[1947]: E0710 00:36:55.764852 1947 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:36:55.764870 kubelet[1947]: W0710 00:36:55.764867 1947 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:36:55.765101 kubelet[1947]: E0710 00:36:55.764885 1947 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:36:55.765101 kubelet[1947]: I0710 00:36:55.764902 1947 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"varrun\" (UniqueName: \"kubernetes.io/host-path/11ff2135-d9e8-4055-b855-c59ae8ddcd79-varrun\") pod \"csi-node-driver-xcq57\" (UID: \"11ff2135-d9e8-4055-b855-c59ae8ddcd79\") " pod="calico-system/csi-node-driver-xcq57" Jul 10 00:36:55.765101 kubelet[1947]: E0710 00:36:55.765081 1947 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:36:55.765101 kubelet[1947]: W0710 00:36:55.765090 1947 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:36:55.765195 kubelet[1947]: E0710 00:36:55.765104 1947 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:36:55.765309 kubelet[1947]: E0710 00:36:55.765286 1947 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:36:55.765309 kubelet[1947]: W0710 00:36:55.765298 1947 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:36:55.765309 kubelet[1947]: E0710 00:36:55.765311 1947 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:36:55.765586 kubelet[1947]: E0710 00:36:55.765563 1947 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:36:55.765846 kubelet[1947]: W0710 00:36:55.765815 1947 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:36:55.765846 kubelet[1947]: E0710 00:36:55.765841 1947 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:36:55.766120 kubelet[1947]: E0710 00:36:55.766092 1947 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:36:55.766120 kubelet[1947]: W0710 00:36:55.766107 1947 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:36:55.766120 kubelet[1947]: E0710 00:36:55.766122 1947 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:36:55.766240 kubelet[1947]: I0710 00:36:55.766142 1947 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-hmk8f\" (UniqueName: \"kubernetes.io/projected/11ff2135-d9e8-4055-b855-c59ae8ddcd79-kube-api-access-hmk8f\") pod \"csi-node-driver-xcq57\" (UID: \"11ff2135-d9e8-4055-b855-c59ae8ddcd79\") " pod="calico-system/csi-node-driver-xcq57" Jul 10 00:36:55.766322 kubelet[1947]: E0710 00:36:55.766304 1947 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:36:55.766322 kubelet[1947]: W0710 00:36:55.766316 1947 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:36:55.766399 kubelet[1947]: E0710 00:36:55.766337 1947 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:36:55.766477 kubelet[1947]: E0710 00:36:55.766463 1947 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:36:55.766477 kubelet[1947]: W0710 00:36:55.766473 1947 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:36:55.766537 kubelet[1947]: E0710 00:36:55.766489 1947 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:36:55.766724 kubelet[1947]: E0710 00:36:55.766706 1947 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:36:55.766724 kubelet[1947]: W0710 00:36:55.766719 1947 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:36:55.766809 kubelet[1947]: E0710 00:36:55.766730 1947 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:36:55.766868 kubelet[1947]: E0710 00:36:55.766854 1947 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:36:55.766868 kubelet[1947]: W0710 00:36:55.766865 1947 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:36:55.766927 kubelet[1947]: E0710 00:36:55.766872 1947 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:36:55.767126 kubelet[1947]: E0710 00:36:55.767111 1947 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:36:55.767126 kubelet[1947]: W0710 00:36:55.767121 1947 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:36:55.767200 kubelet[1947]: E0710 00:36:55.767131 1947 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:36:55.767348 kubelet[1947]: E0710 00:36:55.767302 1947 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:36:55.767348 kubelet[1947]: W0710 00:36:55.767317 1947 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:36:55.767348 kubelet[1947]: E0710 00:36:55.767329 1947 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:36:55.767490 kubelet[1947]: E0710 00:36:55.767475 1947 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:36:55.767490 kubelet[1947]: W0710 00:36:55.767483 1947 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:36:55.767490 kubelet[1947]: E0710 00:36:55.767490 1947 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:36:55.797641 env[1205]: time="2025-07-10T00:36:55.797577485Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-klvkz,Uid:41153073-1890-4f5e-ab4d-0f391b5a7450,Namespace:calico-system,Attempt:0,}" Jul 10 00:36:55.816141 env[1205]: time="2025-07-10T00:36:55.816078363Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 10 00:36:55.816368 env[1205]: time="2025-07-10T00:36:55.816344693Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 10 00:36:55.816460 env[1205]: time="2025-07-10T00:36:55.816437728Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 10 00:36:55.816917 env[1205]: time="2025-07-10T00:36:55.816771485Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/ec01c053a4a318e712857f19806878031313d70021c91dc955e39a7ec3044310 pid=2448 runtime=io.containerd.runc.v2 Jul 10 00:36:55.826948 systemd[1]: Started cri-containerd-ec01c053a4a318e712857f19806878031313d70021c91dc955e39a7ec3044310.scope. Jul 10 00:36:55.835000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:55.835000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:55.835000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:55.835000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:55.835000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:55.835000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:55.835000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:55.835000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:55.835000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:55.835000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:55.835000 audit: BPF prog-id=122 op=LOAD Jul 10 00:36:55.836000 audit[2458]: AVC avc: denied { bpf } for pid=2458 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:55.836000 audit[2458]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=2448 pid=2458 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:36:55.836000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6563303163303533613461333138653731323835376631393830363837 Jul 10 00:36:55.836000 audit[2458]: AVC avc: denied { perfmon } for pid=2458 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:55.836000 audit[2458]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=2448 pid=2458 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:36:55.836000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6563303163303533613461333138653731323835376631393830363837 Jul 10 00:36:55.836000 audit[2458]: AVC avc: denied { bpf } for pid=2458 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:55.836000 audit[2458]: AVC avc: denied { bpf } for pid=2458 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:55.836000 audit[2458]: AVC avc: denied { bpf } for pid=2458 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:55.836000 audit[2458]: AVC avc: denied { perfmon } for pid=2458 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:55.836000 audit[2458]: AVC avc: denied { perfmon } for pid=2458 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:55.836000 audit[2458]: AVC avc: denied { perfmon } for pid=2458 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:55.836000 audit[2458]: AVC avc: denied { perfmon } for pid=2458 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:55.836000 audit[2458]: AVC avc: denied { perfmon } for pid=2458 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:55.836000 audit[2458]: AVC avc: denied { bpf } for pid=2458 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:55.836000 audit[2458]: AVC avc: denied { bpf } for pid=2458 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:55.836000 audit: BPF prog-id=123 op=LOAD Jul 10 00:36:55.836000 audit[2458]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0000edd90 items=0 ppid=2448 pid=2458 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:36:55.836000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6563303163303533613461333138653731323835376631393830363837 Jul 10 00:36:55.836000 audit[2458]: AVC avc: denied { bpf } for pid=2458 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:55.836000 audit[2458]: AVC avc: denied { bpf } for pid=2458 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:55.836000 audit[2458]: AVC avc: denied { perfmon } for pid=2458 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:55.836000 audit[2458]: AVC avc: denied { perfmon } for pid=2458 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:55.836000 audit[2458]: AVC avc: denied { perfmon } for pid=2458 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:55.836000 audit[2458]: AVC avc: denied { perfmon } for pid=2458 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:55.836000 audit[2458]: AVC avc: denied { perfmon } for pid=2458 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:55.836000 audit[2458]: AVC avc: denied { bpf } for pid=2458 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:55.836000 audit[2458]: AVC avc: denied { bpf } for pid=2458 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:55.836000 audit: BPF prog-id=124 op=LOAD Jul 10 00:36:55.836000 audit[2458]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0000eddd8 items=0 ppid=2448 pid=2458 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:36:55.836000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6563303163303533613461333138653731323835376631393830363837 Jul 10 00:36:55.836000 audit: BPF prog-id=124 op=UNLOAD Jul 10 00:36:55.836000 audit: BPF prog-id=123 op=UNLOAD Jul 10 00:36:55.836000 audit[2458]: AVC avc: denied { bpf } for pid=2458 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:55.836000 audit[2458]: AVC avc: denied { bpf } for pid=2458 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:55.836000 audit[2458]: AVC avc: denied { bpf } for pid=2458 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:55.836000 audit[2458]: AVC avc: denied { perfmon } for pid=2458 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:55.836000 audit[2458]: AVC avc: denied { perfmon } for pid=2458 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:55.836000 audit[2458]: AVC avc: denied { perfmon } for pid=2458 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:55.836000 audit[2458]: AVC avc: denied { perfmon } for pid=2458 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:55.836000 audit[2458]: AVC avc: denied { perfmon } for pid=2458 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:55.836000 audit[2458]: AVC avc: denied { bpf } for pid=2458 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:55.836000 audit[2458]: AVC avc: denied { bpf } for pid=2458 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:55.836000 audit: BPF prog-id=125 op=LOAD Jul 10 00:36:55.836000 audit[2458]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0003481e8 items=0 ppid=2448 pid=2458 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:36:55.836000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6563303163303533613461333138653731323835376631393830363837 Jul 10 00:36:55.847620 env[1205]: time="2025-07-10T00:36:55.847537295Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-klvkz,Uid:41153073-1890-4f5e-ab4d-0f391b5a7450,Namespace:calico-system,Attempt:0,} returns sandbox id \"ec01c053a4a318e712857f19806878031313d70021c91dc955e39a7ec3044310\"" Jul 10 00:36:55.867349 kubelet[1947]: E0710 00:36:55.867305 1947 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:36:55.867349 kubelet[1947]: W0710 00:36:55.867325 1947 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:36:55.867349 kubelet[1947]: E0710 00:36:55.867351 1947 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:36:55.867608 kubelet[1947]: E0710 00:36:55.867565 1947 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:36:55.867608 kubelet[1947]: W0710 00:36:55.867584 1947 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:36:55.867666 kubelet[1947]: E0710 00:36:55.867621 1947 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:36:55.867940 kubelet[1947]: E0710 00:36:55.867916 1947 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:36:55.867940 kubelet[1947]: W0710 00:36:55.867928 1947 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:36:55.867940 kubelet[1947]: E0710 00:36:55.867938 1947 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:36:55.868140 kubelet[1947]: E0710 00:36:55.868121 1947 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:36:55.868140 kubelet[1947]: W0710 00:36:55.868131 1947 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:36:55.868188 kubelet[1947]: E0710 00:36:55.868149 1947 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:36:55.868350 kubelet[1947]: E0710 00:36:55.868330 1947 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:36:55.868350 kubelet[1947]: W0710 00:36:55.868341 1947 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:36:55.868350 kubelet[1947]: E0710 00:36:55.868348 1947 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:36:55.868559 kubelet[1947]: E0710 00:36:55.868539 1947 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:36:55.868559 kubelet[1947]: W0710 00:36:55.868553 1947 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:36:55.868620 kubelet[1947]: E0710 00:36:55.868604 1947 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:36:55.868781 kubelet[1947]: E0710 00:36:55.868760 1947 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:36:55.868781 kubelet[1947]: W0710 00:36:55.868772 1947 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:36:55.868846 kubelet[1947]: E0710 00:36:55.868815 1947 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:36:55.868947 kubelet[1947]: E0710 00:36:55.868932 1947 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:36:55.868947 kubelet[1947]: W0710 00:36:55.868941 1947 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:36:55.869015 kubelet[1947]: E0710 00:36:55.868954 1947 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:36:55.869131 kubelet[1947]: E0710 00:36:55.869118 1947 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:36:55.869131 kubelet[1947]: W0710 00:36:55.869127 1947 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:36:55.869187 kubelet[1947]: E0710 00:36:55.869135 1947 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:36:55.869298 kubelet[1947]: E0710 00:36:55.869286 1947 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:36:55.869298 kubelet[1947]: W0710 00:36:55.869296 1947 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:36:55.869342 kubelet[1947]: E0710 00:36:55.869320 1947 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:36:55.869456 kubelet[1947]: E0710 00:36:55.869444 1947 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:36:55.869456 kubelet[1947]: W0710 00:36:55.869454 1947 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:36:55.869503 kubelet[1947]: E0710 00:36:55.869475 1947 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:36:55.869629 kubelet[1947]: E0710 00:36:55.869615 1947 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:36:55.869674 kubelet[1947]: W0710 00:36:55.869629 1947 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:36:55.869674 kubelet[1947]: E0710 00:36:55.869664 1947 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:36:55.869819 kubelet[1947]: E0710 00:36:55.869807 1947 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:36:55.869819 kubelet[1947]: W0710 00:36:55.869817 1947 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:36:55.869872 kubelet[1947]: E0710 00:36:55.869839 1947 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:36:55.869975 kubelet[1947]: E0710 00:36:55.869958 1947 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:36:55.869975 kubelet[1947]: W0710 00:36:55.869968 1947 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:36:55.870049 kubelet[1947]: E0710 00:36:55.869981 1947 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:36:55.870161 kubelet[1947]: E0710 00:36:55.870146 1947 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:36:55.870161 kubelet[1947]: W0710 00:36:55.870155 1947 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:36:55.870161 kubelet[1947]: E0710 00:36:55.870164 1947 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:36:55.870517 kubelet[1947]: E0710 00:36:55.870491 1947 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:36:55.870517 kubelet[1947]: W0710 00:36:55.870505 1947 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:36:55.870517 kubelet[1947]: E0710 00:36:55.870516 1947 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:36:55.870731 kubelet[1947]: E0710 00:36:55.870718 1947 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:36:55.870731 kubelet[1947]: W0710 00:36:55.870730 1947 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:36:55.870787 kubelet[1947]: E0710 00:36:55.870741 1947 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:36:55.870900 kubelet[1947]: E0710 00:36:55.870888 1947 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:36:55.870900 kubelet[1947]: W0710 00:36:55.870898 1947 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:36:55.870947 kubelet[1947]: E0710 00:36:55.870906 1947 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:36:55.871089 kubelet[1947]: E0710 00:36:55.871061 1947 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:36:55.871089 kubelet[1947]: W0710 00:36:55.871079 1947 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:36:55.871157 kubelet[1947]: E0710 00:36:55.871142 1947 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:36:55.871252 kubelet[1947]: E0710 00:36:55.871242 1947 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:36:55.871252 kubelet[1947]: W0710 00:36:55.871251 1947 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:36:55.871493 kubelet[1947]: E0710 00:36:55.871314 1947 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:36:55.871547 kubelet[1947]: E0710 00:36:55.871498 1947 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:36:55.871547 kubelet[1947]: W0710 00:36:55.871504 1947 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:36:55.871606 kubelet[1947]: E0710 00:36:55.871586 1947 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:36:55.871727 kubelet[1947]: E0710 00:36:55.871714 1947 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:36:55.871727 kubelet[1947]: W0710 00:36:55.871726 1947 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:36:55.871802 kubelet[1947]: E0710 00:36:55.871790 1947 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:36:55.871877 kubelet[1947]: E0710 00:36:55.871867 1947 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:36:55.871901 kubelet[1947]: W0710 00:36:55.871884 1947 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:36:55.871901 kubelet[1947]: E0710 00:36:55.871894 1947 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:36:55.872082 kubelet[1947]: E0710 00:36:55.872067 1947 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:36:55.872082 kubelet[1947]: W0710 00:36:55.872077 1947 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:36:55.872149 kubelet[1947]: E0710 00:36:55.872089 1947 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:36:55.872280 kubelet[1947]: E0710 00:36:55.872266 1947 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:36:55.872280 kubelet[1947]: W0710 00:36:55.872276 1947 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:36:55.872330 kubelet[1947]: E0710 00:36:55.872284 1947 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:36:55.890833 kubelet[1947]: E0710 00:36:55.890725 1947 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:36:55.890833 kubelet[1947]: W0710 00:36:55.890753 1947 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:36:55.890833 kubelet[1947]: E0710 00:36:55.890778 1947 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:36:57.703469 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1413318228.mount: Deactivated successfully. Jul 10 00:36:57.887913 kubelet[1947]: E0710 00:36:57.887842 1947 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-xcq57" podUID="11ff2135-d9e8-4055-b855-c59ae8ddcd79" Jul 10 00:36:58.484354 env[1205]: time="2025-07-10T00:36:58.484305872Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:36:58.486332 env[1205]: time="2025-07-10T00:36:58.486266705Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:b3baa600c7ff9cd50dc12f2529ef263aaa346dbeca13c77c6553d661fd216b54,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:36:58.487928 env[1205]: time="2025-07-10T00:36:58.487897348Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/typha:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:36:58.489218 env[1205]: time="2025-07-10T00:36:58.489184115Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha@sha256:da29d745efe5eb7d25f765d3aa439f3fe60710a458efe39c285e58b02bd961af,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:36:58.489689 env[1205]: time="2025-07-10T00:36:58.489645241Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.30.2\" returns image reference \"sha256:b3baa600c7ff9cd50dc12f2529ef263aaa346dbeca13c77c6553d661fd216b54\"" Jul 10 00:36:58.492158 env[1205]: time="2025-07-10T00:36:58.492127884Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.2\"" Jul 10 00:36:58.506640 env[1205]: time="2025-07-10T00:36:58.506576494Z" level=info msg="CreateContainer within sandbox \"658b0520201a46a764fa1d941fdc0a8db6296e5784a34759adb52f929a1c080f\" for container &ContainerMetadata{Name:calico-typha,Attempt:0,}" Jul 10 00:36:58.520385 env[1205]: time="2025-07-10T00:36:58.520321422Z" level=info msg="CreateContainer within sandbox \"658b0520201a46a764fa1d941fdc0a8db6296e5784a34759adb52f929a1c080f\" for &ContainerMetadata{Name:calico-typha,Attempt:0,} returns container id \"cccb56fe65f5e5a4e5da2bf3e304add25134282e5062e5833e304fdfe7c8cd1b\"" Jul 10 00:36:58.520871 env[1205]: time="2025-07-10T00:36:58.520839454Z" level=info msg="StartContainer for \"cccb56fe65f5e5a4e5da2bf3e304add25134282e5062e5833e304fdfe7c8cd1b\"" Jul 10 00:36:58.540413 systemd[1]: Started cri-containerd-cccb56fe65f5e5a4e5da2bf3e304add25134282e5062e5833e304fdfe7c8cd1b.scope. Jul 10 00:36:58.565416 kernel: kauditd_printk_skb: 133 callbacks suppressed Jul 10 00:36:58.565553 kernel: audit: type=1400 audit(1752107818.554:960): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:58.565582 kernel: audit: type=1400 audit(1752107818.554:961): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:58.565598 kernel: audit: type=1400 audit(1752107818.554:962): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:58.554000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:58.554000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:58.554000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:58.554000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:58.554000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:58.571999 kernel: audit: type=1400 audit(1752107818.554:963): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:58.572074 kernel: audit: type=1400 audit(1752107818.554:964): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:58.572094 kernel: audit: type=1400 audit(1752107818.554:965): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:58.554000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:58.554000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:58.577637 kernel: audit: type=1400 audit(1752107818.554:966): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:58.577705 kernel: audit: type=1400 audit(1752107818.554:967): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:58.554000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:58.554000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:58.587776 kernel: audit: type=1400 audit(1752107818.554:968): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:58.587840 kernel: audit: type=1400 audit(1752107818.558:969): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:58.558000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:58.558000 audit: BPF prog-id=126 op=LOAD Jul 10 00:36:58.559000 audit[2518]: AVC avc: denied { bpf } for pid=2518 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:58.559000 audit[2518]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bdc48 a2=10 a3=1c items=0 ppid=2362 pid=2518 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:36:58.559000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6363636235366665363566356535613465356461326266336533303461 Jul 10 00:36:58.559000 audit[2518]: AVC avc: denied { perfmon } for pid=2518 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:58.559000 audit[2518]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001bd6b0 a2=3c a3=8 items=0 ppid=2362 pid=2518 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:36:58.559000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6363636235366665363566356535613465356461326266336533303461 Jul 10 00:36:58.560000 audit[2518]: AVC avc: denied { bpf } for pid=2518 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:58.560000 audit[2518]: AVC avc: denied { bpf } for pid=2518 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:58.560000 audit[2518]: AVC avc: denied { bpf } for pid=2518 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:58.560000 audit[2518]: AVC avc: denied { perfmon } for pid=2518 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:58.560000 audit[2518]: AVC avc: denied { perfmon } for pid=2518 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:58.560000 audit[2518]: AVC avc: denied { perfmon } for pid=2518 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:58.560000 audit[2518]: AVC avc: denied { perfmon } for pid=2518 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:58.560000 audit[2518]: AVC avc: denied { perfmon } for pid=2518 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:58.560000 audit[2518]: AVC avc: denied { bpf } for pid=2518 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:58.560000 audit[2518]: AVC avc: denied { bpf } for pid=2518 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:58.560000 audit: BPF prog-id=127 op=LOAD Jul 10 00:36:58.560000 audit[2518]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bd9d8 a2=78 a3=c00039ee10 items=0 ppid=2362 pid=2518 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:36:58.560000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6363636235366665363566356535613465356461326266336533303461 Jul 10 00:36:58.561000 audit[2518]: AVC avc: denied { bpf } for pid=2518 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:58.561000 audit[2518]: AVC avc: denied { bpf } for pid=2518 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:58.561000 audit[2518]: AVC avc: denied { perfmon } for pid=2518 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:58.561000 audit[2518]: AVC avc: denied { perfmon } for pid=2518 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:58.561000 audit[2518]: AVC avc: denied { perfmon } for pid=2518 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:58.561000 audit[2518]: AVC avc: denied { perfmon } for pid=2518 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:58.561000 audit[2518]: AVC avc: denied { perfmon } for pid=2518 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:58.561000 audit[2518]: AVC avc: denied { bpf } for pid=2518 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:58.561000 audit[2518]: AVC avc: denied { bpf } for pid=2518 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:58.561000 audit: BPF prog-id=128 op=LOAD Jul 10 00:36:58.561000 audit[2518]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bd770 a2=78 a3=c00039ee58 items=0 ppid=2362 pid=2518 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:36:58.561000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6363636235366665363566356535613465356461326266336533303461 Jul 10 00:36:58.564000 audit: BPF prog-id=128 op=UNLOAD Jul 10 00:36:58.564000 audit: BPF prog-id=127 op=UNLOAD Jul 10 00:36:58.564000 audit[2518]: AVC avc: denied { bpf } for pid=2518 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:58.564000 audit[2518]: AVC avc: denied { bpf } for pid=2518 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:58.564000 audit[2518]: AVC avc: denied { bpf } for pid=2518 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:58.564000 audit[2518]: AVC avc: denied { perfmon } for pid=2518 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:58.564000 audit[2518]: AVC avc: denied { perfmon } for pid=2518 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:58.564000 audit[2518]: AVC avc: denied { perfmon } for pid=2518 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:58.564000 audit[2518]: AVC avc: denied { perfmon } for pid=2518 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:58.564000 audit[2518]: AVC avc: denied { perfmon } for pid=2518 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:58.564000 audit[2518]: AVC avc: denied { bpf } for pid=2518 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:58.564000 audit[2518]: AVC avc: denied { bpf } for pid=2518 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:58.564000 audit: BPF prog-id=129 op=LOAD Jul 10 00:36:58.564000 audit[2518]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bdc30 a2=78 a3=c00039f268 items=0 ppid=2362 pid=2518 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:36:58.564000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6363636235366665363566356535613465356461326266336533303461 Jul 10 00:36:58.858969 env[1205]: time="2025-07-10T00:36:58.858862496Z" level=info msg="StartContainer for \"cccb56fe65f5e5a4e5da2bf3e304add25134282e5062e5833e304fdfe7c8cd1b\" returns successfully" Jul 10 00:36:58.952466 kubelet[1947]: E0710 00:36:58.952422 1947 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:36:59.032704 kubelet[1947]: E0710 00:36:59.032669 1947 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:36:59.032704 kubelet[1947]: W0710 00:36:59.032693 1947 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:36:59.032704 kubelet[1947]: E0710 00:36:59.032718 1947 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:36:59.033172 kubelet[1947]: E0710 00:36:59.033140 1947 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:36:59.033172 kubelet[1947]: W0710 00:36:59.033158 1947 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:36:59.033172 kubelet[1947]: E0710 00:36:59.033169 1947 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:36:59.033480 kubelet[1947]: E0710 00:36:59.033330 1947 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:36:59.033480 kubelet[1947]: W0710 00:36:59.033336 1947 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:36:59.033480 kubelet[1947]: E0710 00:36:59.033343 1947 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:36:59.033819 kubelet[1947]: E0710 00:36:59.033593 1947 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:36:59.033819 kubelet[1947]: W0710 00:36:59.033611 1947 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:36:59.033819 kubelet[1947]: E0710 00:36:59.033634 1947 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:36:59.033914 kubelet[1947]: E0710 00:36:59.033876 1947 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:36:59.033914 kubelet[1947]: W0710 00:36:59.033886 1947 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:36:59.033914 kubelet[1947]: E0710 00:36:59.033895 1947 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:36:59.034081 kubelet[1947]: E0710 00:36:59.034059 1947 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:36:59.034081 kubelet[1947]: W0710 00:36:59.034074 1947 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:36:59.034081 kubelet[1947]: E0710 00:36:59.034086 1947 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:36:59.034289 kubelet[1947]: E0710 00:36:59.034268 1947 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:36:59.034289 kubelet[1947]: W0710 00:36:59.034290 1947 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:36:59.034289 kubelet[1947]: E0710 00:36:59.034300 1947 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:36:59.034502 kubelet[1947]: E0710 00:36:59.034474 1947 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:36:59.034502 kubelet[1947]: W0710 00:36:59.034492 1947 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:36:59.034502 kubelet[1947]: E0710 00:36:59.034499 1947 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:36:59.034826 kubelet[1947]: E0710 00:36:59.034767 1947 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:36:59.034826 kubelet[1947]: W0710 00:36:59.034774 1947 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:36:59.034826 kubelet[1947]: E0710 00:36:59.034796 1947 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:36:59.035001 kubelet[1947]: E0710 00:36:59.034984 1947 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:36:59.035001 kubelet[1947]: W0710 00:36:59.034996 1947 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:36:59.035091 kubelet[1947]: E0710 00:36:59.035006 1947 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:36:59.035223 kubelet[1947]: E0710 00:36:59.035193 1947 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:36:59.035223 kubelet[1947]: W0710 00:36:59.035213 1947 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:36:59.035223 kubelet[1947]: E0710 00:36:59.035222 1947 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:36:59.035448 kubelet[1947]: E0710 00:36:59.035427 1947 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:36:59.035448 kubelet[1947]: W0710 00:36:59.035440 1947 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:36:59.035569 kubelet[1947]: E0710 00:36:59.035460 1947 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:36:59.035689 kubelet[1947]: E0710 00:36:59.035666 1947 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:36:59.035689 kubelet[1947]: W0710 00:36:59.035681 1947 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:36:59.035689 kubelet[1947]: E0710 00:36:59.035689 1947 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:36:59.035892 kubelet[1947]: E0710 00:36:59.035873 1947 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:36:59.035892 kubelet[1947]: W0710 00:36:59.035887 1947 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:36:59.035996 kubelet[1947]: E0710 00:36:59.035912 1947 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:36:59.036146 kubelet[1947]: E0710 00:36:59.036120 1947 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:36:59.036146 kubelet[1947]: W0710 00:36:59.036141 1947 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:36:59.036265 kubelet[1947]: E0710 00:36:59.036153 1947 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:36:59.090744 kubelet[1947]: E0710 00:36:59.090701 1947 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:36:59.090744 kubelet[1947]: W0710 00:36:59.090726 1947 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:36:59.090744 kubelet[1947]: E0710 00:36:59.090751 1947 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:36:59.090981 kubelet[1947]: E0710 00:36:59.090933 1947 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:36:59.090981 kubelet[1947]: W0710 00:36:59.090940 1947 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:36:59.090981 kubelet[1947]: E0710 00:36:59.090952 1947 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:36:59.091376 kubelet[1947]: E0710 00:36:59.091345 1947 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:36:59.091425 kubelet[1947]: W0710 00:36:59.091373 1947 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:36:59.091425 kubelet[1947]: E0710 00:36:59.091405 1947 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:36:59.091614 kubelet[1947]: E0710 00:36:59.091599 1947 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:36:59.091614 kubelet[1947]: W0710 00:36:59.091609 1947 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:36:59.091709 kubelet[1947]: E0710 00:36:59.091622 1947 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:36:59.091889 kubelet[1947]: E0710 00:36:59.091868 1947 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:36:59.091889 kubelet[1947]: W0710 00:36:59.091878 1947 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:36:59.091941 kubelet[1947]: E0710 00:36:59.091890 1947 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:36:59.092187 kubelet[1947]: E0710 00:36:59.092150 1947 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:36:59.092220 kubelet[1947]: W0710 00:36:59.092182 1947 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:36:59.092251 kubelet[1947]: E0710 00:36:59.092215 1947 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:36:59.092448 kubelet[1947]: E0710 00:36:59.092427 1947 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:36:59.092448 kubelet[1947]: W0710 00:36:59.092440 1947 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:36:59.092499 kubelet[1947]: E0710 00:36:59.092452 1947 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:36:59.092647 kubelet[1947]: E0710 00:36:59.092629 1947 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:36:59.092647 kubelet[1947]: W0710 00:36:59.092641 1947 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:36:59.092739 kubelet[1947]: E0710 00:36:59.092673 1947 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:36:59.092856 kubelet[1947]: E0710 00:36:59.092842 1947 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:36:59.092856 kubelet[1947]: W0710 00:36:59.092852 1947 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:36:59.092909 kubelet[1947]: E0710 00:36:59.092891 1947 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:36:59.093163 kubelet[1947]: E0710 00:36:59.093132 1947 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:36:59.093163 kubelet[1947]: W0710 00:36:59.093143 1947 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:36:59.093163 kubelet[1947]: E0710 00:36:59.093175 1947 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:36:59.093538 kubelet[1947]: E0710 00:36:59.093321 1947 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:36:59.093538 kubelet[1947]: W0710 00:36:59.093329 1947 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:36:59.093538 kubelet[1947]: E0710 00:36:59.093382 1947 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:36:59.093538 kubelet[1947]: E0710 00:36:59.093472 1947 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:36:59.093538 kubelet[1947]: W0710 00:36:59.093479 1947 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:36:59.093538 kubelet[1947]: E0710 00:36:59.093487 1947 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:36:59.093739 kubelet[1947]: E0710 00:36:59.093630 1947 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:36:59.093739 kubelet[1947]: W0710 00:36:59.093637 1947 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:36:59.093739 kubelet[1947]: E0710 00:36:59.093643 1947 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:36:59.093830 kubelet[1947]: E0710 00:36:59.093813 1947 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:36:59.093830 kubelet[1947]: W0710 00:36:59.093823 1947 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:36:59.093918 kubelet[1947]: E0710 00:36:59.093835 1947 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:36:59.094018 kubelet[1947]: E0710 00:36:59.094003 1947 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:36:59.094018 kubelet[1947]: W0710 00:36:59.094014 1947 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:36:59.094066 kubelet[1947]: E0710 00:36:59.094026 1947 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:36:59.094296 kubelet[1947]: E0710 00:36:59.094269 1947 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:36:59.094296 kubelet[1947]: W0710 00:36:59.094287 1947 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:36:59.094350 kubelet[1947]: E0710 00:36:59.094306 1947 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:36:59.094487 kubelet[1947]: E0710 00:36:59.094474 1947 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:36:59.094487 kubelet[1947]: W0710 00:36:59.094483 1947 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:36:59.094569 kubelet[1947]: E0710 00:36:59.094494 1947 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:36:59.094728 kubelet[1947]: E0710 00:36:59.094708 1947 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:36:59.094728 kubelet[1947]: W0710 00:36:59.094721 1947 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:36:59.094821 kubelet[1947]: E0710 00:36:59.094731 1947 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:36:59.888360 env[1205]: time="2025-07-10T00:36:59.888297724Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:36:59.888773 kubelet[1947]: E0710 00:36:59.888481 1947 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-xcq57" podUID="11ff2135-d9e8-4055-b855-c59ae8ddcd79" Jul 10 00:36:59.891265 env[1205]: time="2025-07-10T00:36:59.891219112Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:639615519fa6f7bc4b4756066ba9780068fd291eacc36c120f6c555e62f2b00e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:36:59.893053 env[1205]: time="2025-07-10T00:36:59.893011739Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:36:59.894197 env[1205]: time="2025-07-10T00:36:59.894173110Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol@sha256:972be127eaecd7d1a2d5393b8d14f1ae8f88550bee83e0519e9590c7e15eb41b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:36:59.894475 env[1205]: time="2025-07-10T00:36:59.894448898Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.2\" returns image reference \"sha256:639615519fa6f7bc4b4756066ba9780068fd291eacc36c120f6c555e62f2b00e\"" Jul 10 00:36:59.896989 env[1205]: time="2025-07-10T00:36:59.896944715Z" level=info msg="CreateContainer within sandbox \"ec01c053a4a318e712857f19806878031313d70021c91dc955e39a7ec3044310\" for container &ContainerMetadata{Name:flexvol-driver,Attempt:0,}" Jul 10 00:36:59.909050 env[1205]: time="2025-07-10T00:36:59.908997794Z" level=info msg="CreateContainer within sandbox \"ec01c053a4a318e712857f19806878031313d70021c91dc955e39a7ec3044310\" for &ContainerMetadata{Name:flexvol-driver,Attempt:0,} returns container id \"fb6c8410a5df9ddf69b7da03ac12d2183225617cda2726bb5372e5aae38d9d6e\"" Jul 10 00:36:59.909517 env[1205]: time="2025-07-10T00:36:59.909470702Z" level=info msg="StartContainer for \"fb6c8410a5df9ddf69b7da03ac12d2183225617cda2726bb5372e5aae38d9d6e\"" Jul 10 00:36:59.930794 systemd[1]: Started cri-containerd-fb6c8410a5df9ddf69b7da03ac12d2183225617cda2726bb5372e5aae38d9d6e.scope. Jul 10 00:36:59.943000 audit[2592]: AVC avc: denied { perfmon } for pid=2592 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:59.943000 audit[2592]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001456b0 a2=3c a3=7fc170ed4f88 items=0 ppid=2448 pid=2592 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:36:59.943000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6662366338343130613564663964646636396237646130336163313264 Jul 10 00:36:59.943000 audit[2592]: AVC avc: denied { bpf } for pid=2592 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:59.943000 audit[2592]: AVC avc: denied { bpf } for pid=2592 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:59.943000 audit[2592]: AVC avc: denied { bpf } for pid=2592 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:59.943000 audit[2592]: AVC avc: denied { perfmon } for pid=2592 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:59.943000 audit[2592]: AVC avc: denied { perfmon } for pid=2592 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:59.943000 audit[2592]: AVC avc: denied { perfmon } for pid=2592 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:59.943000 audit[2592]: AVC avc: denied { perfmon } for pid=2592 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:59.943000 audit[2592]: AVC avc: denied { perfmon } for pid=2592 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:59.943000 audit[2592]: AVC avc: denied { bpf } for pid=2592 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:59.943000 audit[2592]: AVC avc: denied { bpf } for pid=2592 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:59.943000 audit: BPF prog-id=130 op=LOAD Jul 10 00:36:59.943000 audit[2592]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001459d8 a2=78 a3=c0002fec58 items=0 ppid=2448 pid=2592 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:36:59.943000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6662366338343130613564663964646636396237646130336163313264 Jul 10 00:36:59.944000 audit[2592]: AVC avc: denied { bpf } for pid=2592 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:59.944000 audit[2592]: AVC avc: denied { bpf } for pid=2592 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:59.944000 audit[2592]: AVC avc: denied { perfmon } for pid=2592 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:59.944000 audit[2592]: AVC avc: denied { perfmon } for pid=2592 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:59.944000 audit[2592]: AVC avc: denied { perfmon } for pid=2592 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:59.944000 audit[2592]: AVC avc: denied { perfmon } for pid=2592 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:59.944000 audit[2592]: AVC avc: denied { perfmon } for pid=2592 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:59.944000 audit[2592]: AVC avc: denied { bpf } for pid=2592 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:59.944000 audit[2592]: AVC avc: denied { bpf } for pid=2592 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:59.944000 audit: BPF prog-id=131 op=LOAD Jul 10 00:36:59.944000 audit[2592]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000145770 a2=78 a3=c0002feca8 items=0 ppid=2448 pid=2592 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:36:59.944000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6662366338343130613564663964646636396237646130336163313264 Jul 10 00:36:59.944000 audit: BPF prog-id=131 op=UNLOAD Jul 10 00:36:59.944000 audit: BPF prog-id=130 op=UNLOAD Jul 10 00:36:59.944000 audit[2592]: AVC avc: denied { bpf } for pid=2592 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:59.944000 audit[2592]: AVC avc: denied { bpf } for pid=2592 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:59.944000 audit[2592]: AVC avc: denied { bpf } for pid=2592 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:59.944000 audit[2592]: AVC avc: denied { perfmon } for pid=2592 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:59.944000 audit[2592]: AVC avc: denied { perfmon } for pid=2592 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:59.944000 audit[2592]: AVC avc: denied { perfmon } for pid=2592 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:59.944000 audit[2592]: AVC avc: denied { perfmon } for pid=2592 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:59.944000 audit[2592]: AVC avc: denied { perfmon } for pid=2592 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:59.944000 audit[2592]: AVC avc: denied { bpf } for pid=2592 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:59.944000 audit[2592]: AVC avc: denied { bpf } for pid=2592 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:36:59.944000 audit: BPF prog-id=132 op=LOAD Jul 10 00:36:59.944000 audit[2592]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000145c30 a2=78 a3=c0002fed38 items=0 ppid=2448 pid=2592 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:36:59.944000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6662366338343130613564663964646636396237646130336163313264 Jul 10 00:36:59.953366 kubelet[1947]: I0710 00:36:59.953328 1947 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Jul 10 00:36:59.953810 kubelet[1947]: E0710 00:36:59.953597 1947 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:36:59.965749 systemd[1]: cri-containerd-fb6c8410a5df9ddf69b7da03ac12d2183225617cda2726bb5372e5aae38d9d6e.scope: Deactivated successfully. Jul 10 00:36:59.971000 audit: BPF prog-id=132 op=UNLOAD Jul 10 00:36:59.976038 env[1205]: time="2025-07-10T00:36:59.975991554Z" level=info msg="StartContainer for \"fb6c8410a5df9ddf69b7da03ac12d2183225617cda2726bb5372e5aae38d9d6e\" returns successfully" Jul 10 00:36:59.991197 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-fb6c8410a5df9ddf69b7da03ac12d2183225617cda2726bb5372e5aae38d9d6e-rootfs.mount: Deactivated successfully. Jul 10 00:37:00.007984 env[1205]: time="2025-07-10T00:37:00.007912197Z" level=info msg="shim disconnected" id=fb6c8410a5df9ddf69b7da03ac12d2183225617cda2726bb5372e5aae38d9d6e Jul 10 00:37:00.007984 env[1205]: time="2025-07-10T00:37:00.007970146Z" level=warning msg="cleaning up after shim disconnected" id=fb6c8410a5df9ddf69b7da03ac12d2183225617cda2726bb5372e5aae38d9d6e namespace=k8s.io Jul 10 00:37:00.007984 env[1205]: time="2025-07-10T00:37:00.007978872Z" level=info msg="cleaning up dead shim" Jul 10 00:37:00.014452 env[1205]: time="2025-07-10T00:37:00.014418106Z" level=warning msg="cleanup warnings time=\"2025-07-10T00:37:00Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2633 runtime=io.containerd.runc.v2\n" Jul 10 00:37:00.959291 env[1205]: time="2025-07-10T00:37:00.959250837Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.30.2\"" Jul 10 00:37:01.087767 kubelet[1947]: I0710 00:37:01.087695 1947 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-typha-5bc9744d99-dd6nh" podStartSLOduration=4.142766433 podStartE2EDuration="7.087646421s" podCreationTimestamp="2025-07-10 00:36:54 +0000 UTC" firstStartedPulling="2025-07-10 00:36:55.547106099 +0000 UTC m=+20.969531108" lastFinishedPulling="2025-07-10 00:36:58.491986088 +0000 UTC m=+23.914411096" observedRunningTime="2025-07-10 00:36:58.968609889 +0000 UTC m=+24.391034887" watchObservedRunningTime="2025-07-10 00:37:01.087646421 +0000 UTC m=+26.510071429" Jul 10 00:37:01.887508 kubelet[1947]: E0710 00:37:01.887440 1947 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-xcq57" podUID="11ff2135-d9e8-4055-b855-c59ae8ddcd79" Jul 10 00:37:03.888411 kubelet[1947]: E0710 00:37:03.888350 1947 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-xcq57" podUID="11ff2135-d9e8-4055-b855-c59ae8ddcd79" Jul 10 00:37:04.530327 env[1205]: time="2025-07-10T00:37:04.530271506Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:37:04.531991 env[1205]: time="2025-07-10T00:37:04.531958554Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:77a357d0d33e3016e61153f7d2b7de72371579c4aaeb767fb7ef0af606fe1630,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:37:04.533715 env[1205]: time="2025-07-10T00:37:04.533687992Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/cni:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:37:04.537843 env[1205]: time="2025-07-10T00:37:04.537791216Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni@sha256:50686775cc60acb78bd92a66fa2d84e1700b2d8e43a718fbadbf35e59baefb4d,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:37:04.538691 env[1205]: time="2025-07-10T00:37:04.538497242Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.30.2\" returns image reference \"sha256:77a357d0d33e3016e61153f7d2b7de72371579c4aaeb767fb7ef0af606fe1630\"" Jul 10 00:37:04.540795 env[1205]: time="2025-07-10T00:37:04.540767736Z" level=info msg="CreateContainer within sandbox \"ec01c053a4a318e712857f19806878031313d70021c91dc955e39a7ec3044310\" for container &ContainerMetadata{Name:install-cni,Attempt:0,}" Jul 10 00:37:04.555216 env[1205]: time="2025-07-10T00:37:04.555147457Z" level=info msg="CreateContainer within sandbox \"ec01c053a4a318e712857f19806878031313d70021c91dc955e39a7ec3044310\" for &ContainerMetadata{Name:install-cni,Attempt:0,} returns container id \"d1ff3e1a9766b9349ac3fde03a214e57b4579fffc895e0bf234dc1041e70e01e\"" Jul 10 00:37:04.555747 env[1205]: time="2025-07-10T00:37:04.555713210Z" level=info msg="StartContainer for \"d1ff3e1a9766b9349ac3fde03a214e57b4579fffc895e0bf234dc1041e70e01e\"" Jul 10 00:37:04.583001 systemd[1]: Started cri-containerd-d1ff3e1a9766b9349ac3fde03a214e57b4579fffc895e0bf234dc1041e70e01e.scope. Jul 10 00:37:04.595000 audit[2658]: AVC avc: denied { perfmon } for pid=2658 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:04.599048 kernel: kauditd_printk_skb: 91 callbacks suppressed Jul 10 00:37:04.599125 kernel: audit: type=1400 audit(1752107824.595:985): avc: denied { perfmon } for pid=2658 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:04.595000 audit[2658]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=7f48ba4a8448 items=0 ppid=2448 pid=2658 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:04.606771 kernel: audit: type=1300 audit(1752107824.595:985): arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=7f48ba4a8448 items=0 ppid=2448 pid=2658 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:04.595000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6431666633653161393736366239333439616333666465303361323134 Jul 10 00:37:04.610964 kernel: audit: type=1327 audit(1752107824.595:985): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6431666633653161393736366239333439616333666465303361323134 Jul 10 00:37:04.611018 kernel: audit: type=1400 audit(1752107824.595:986): avc: denied { bpf } for pid=2658 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:04.595000 audit[2658]: AVC avc: denied { bpf } for pid=2658 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:04.595000 audit[2658]: AVC avc: denied { bpf } for pid=2658 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:04.616627 kernel: audit: type=1400 audit(1752107824.595:986): avc: denied { bpf } for pid=2658 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:04.616689 kernel: audit: type=1400 audit(1752107824.595:986): avc: denied { bpf } for pid=2658 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:04.595000 audit[2658]: AVC avc: denied { bpf } for pid=2658 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:04.595000 audit[2658]: AVC avc: denied { perfmon } for pid=2658 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:04.622437 kernel: audit: type=1400 audit(1752107824.595:986): avc: denied { perfmon } for pid=2658 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:04.622533 kernel: audit: type=1400 audit(1752107824.595:986): avc: denied { perfmon } for pid=2658 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:04.595000 audit[2658]: AVC avc: denied { perfmon } for pid=2658 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:04.595000 audit[2658]: AVC avc: denied { perfmon } for pid=2658 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:04.628800 kernel: audit: type=1400 audit(1752107824.595:986): avc: denied { perfmon } for pid=2658 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:04.628876 kernel: audit: type=1400 audit(1752107824.595:986): avc: denied { perfmon } for pid=2658 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:04.595000 audit[2658]: AVC avc: denied { perfmon } for pid=2658 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:04.595000 audit[2658]: AVC avc: denied { perfmon } for pid=2658 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:04.595000 audit[2658]: AVC avc: denied { bpf } for pid=2658 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:04.595000 audit[2658]: AVC avc: denied { bpf } for pid=2658 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:04.595000 audit: BPF prog-id=133 op=LOAD Jul 10 00:37:04.595000 audit[2658]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001979d8 a2=78 a3=c00029df98 items=0 ppid=2448 pid=2658 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:04.595000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6431666633653161393736366239333439616333666465303361323134 Jul 10 00:37:04.600000 audit[2658]: AVC avc: denied { bpf } for pid=2658 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:04.600000 audit[2658]: AVC avc: denied { bpf } for pid=2658 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:04.600000 audit[2658]: AVC avc: denied { perfmon } for pid=2658 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:04.600000 audit[2658]: AVC avc: denied { perfmon } for pid=2658 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:04.600000 audit[2658]: AVC avc: denied { perfmon } for pid=2658 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:04.600000 audit[2658]: AVC avc: denied { perfmon } for pid=2658 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:04.600000 audit[2658]: AVC avc: denied { perfmon } for pid=2658 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:04.600000 audit[2658]: AVC avc: denied { bpf } for pid=2658 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:04.600000 audit[2658]: AVC avc: denied { bpf } for pid=2658 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:04.600000 audit: BPF prog-id=134 op=LOAD Jul 10 00:37:04.600000 audit[2658]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000197770 a2=78 a3=c00029dfe8 items=0 ppid=2448 pid=2658 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:04.600000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6431666633653161393736366239333439616333666465303361323134 Jul 10 00:37:04.605000 audit: BPF prog-id=134 op=UNLOAD Jul 10 00:37:04.605000 audit: BPF prog-id=133 op=UNLOAD Jul 10 00:37:04.605000 audit[2658]: AVC avc: denied { bpf } for pid=2658 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:04.605000 audit[2658]: AVC avc: denied { bpf } for pid=2658 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:04.605000 audit[2658]: AVC avc: denied { bpf } for pid=2658 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:04.605000 audit[2658]: AVC avc: denied { perfmon } for pid=2658 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:04.605000 audit[2658]: AVC avc: denied { perfmon } for pid=2658 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:04.605000 audit[2658]: AVC avc: denied { perfmon } for pid=2658 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:04.605000 audit[2658]: AVC avc: denied { perfmon } for pid=2658 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:04.605000 audit[2658]: AVC avc: denied { perfmon } for pid=2658 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:04.605000 audit[2658]: AVC avc: denied { bpf } for pid=2658 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:04.605000 audit[2658]: AVC avc: denied { bpf } for pid=2658 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:04.605000 audit: BPF prog-id=135 op=LOAD Jul 10 00:37:04.605000 audit[2658]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000197c30 a2=78 a3=c0002e6078 items=0 ppid=2448 pid=2658 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:04.605000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6431666633653161393736366239333439616333666465303361323134 Jul 10 00:37:04.771799 env[1205]: time="2025-07-10T00:37:04.771707938Z" level=info msg="StartContainer for \"d1ff3e1a9766b9349ac3fde03a214e57b4579fffc895e0bf234dc1041e70e01e\" returns successfully" Jul 10 00:37:05.888294 kubelet[1947]: E0710 00:37:05.888239 1947 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-xcq57" podUID="11ff2135-d9e8-4055-b855-c59ae8ddcd79" Jul 10 00:37:07.737275 env[1205]: time="2025-07-10T00:37:07.737189335Z" level=error msg="failed to reload cni configuration after receiving fs change event(\"/etc/cni/net.d/calico-kubeconfig\": WRITE)" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Jul 10 00:37:07.739099 systemd[1]: cri-containerd-d1ff3e1a9766b9349ac3fde03a214e57b4579fffc895e0bf234dc1041e70e01e.scope: Deactivated successfully. Jul 10 00:37:07.742000 audit: BPF prog-id=135 op=UNLOAD Jul 10 00:37:07.758121 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-d1ff3e1a9766b9349ac3fde03a214e57b4579fffc895e0bf234dc1041e70e01e-rootfs.mount: Deactivated successfully. Jul 10 00:37:07.796740 kubelet[1947]: I0710 00:37:07.796697 1947 kubelet_node_status.go:501] "Fast updating node status as it just became ready" Jul 10 00:37:07.901003 systemd[1]: Created slice kubepods-besteffort-pod11ff2135_d9e8_4055_b855_c59ae8ddcd79.slice. Jul 10 00:37:07.903340 env[1205]: time="2025-07-10T00:37:07.903285429Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-xcq57,Uid:11ff2135-d9e8-4055-b855-c59ae8ddcd79,Namespace:calico-system,Attempt:0,}" Jul 10 00:37:08.093361 env[1205]: time="2025-07-10T00:37:08.093233370Z" level=info msg="shim disconnected" id=d1ff3e1a9766b9349ac3fde03a214e57b4579fffc895e0bf234dc1041e70e01e Jul 10 00:37:08.093631 env[1205]: time="2025-07-10T00:37:08.093613895Z" level=warning msg="cleaning up after shim disconnected" id=d1ff3e1a9766b9349ac3fde03a214e57b4579fffc895e0bf234dc1041e70e01e namespace=k8s.io Jul 10 00:37:08.093746 env[1205]: time="2025-07-10T00:37:08.093727739Z" level=info msg="cleaning up dead shim" Jul 10 00:37:08.104876 env[1205]: time="2025-07-10T00:37:08.104804455Z" level=warning msg="cleanup warnings time=\"2025-07-10T00:37:08Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2698 runtime=io.containerd.runc.v2\n" Jul 10 00:37:08.106843 systemd[1]: Created slice kubepods-burstable-podc8b0db9c_1785_4ce7_ba5a_244a4bfc9464.slice. Jul 10 00:37:08.135845 systemd[1]: Created slice kubepods-burstable-pod16b05d7c_51b7_4fb7_a4cb_692b527960e6.slice. Jul 10 00:37:08.140347 systemd[1]: Created slice kubepods-besteffort-pod359ec5e8_588d_464e_9261_faefb7bc02b1.slice. Jul 10 00:37:08.146002 systemd[1]: Created slice kubepods-besteffort-pod7ab2b8e4_3818_4286_9287_142885fbf432.slice. Jul 10 00:37:08.150606 systemd[1]: Created slice kubepods-besteffort-pod8eadc06b_a096_4667_a191_bf6882f37d75.slice. Jul 10 00:37:08.154852 systemd[1]: Created slice kubepods-besteffort-podb6385538_11ca_404b_bf9e_e69e438960db.slice. Jul 10 00:37:08.158314 systemd[1]: Created slice kubepods-besteffort-pode898c44d_80a2_4702_a367_04a77e5bac00.slice. Jul 10 00:37:08.256501 env[1205]: time="2025-07-10T00:37:08.256418719Z" level=error msg="Failed to destroy network for sandbox \"1a137de9d036b4eecbaadec3635f738c0153ae639090811abef60bdc1c0bcbde\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:37:08.256958 env[1205]: time="2025-07-10T00:37:08.256854488Z" level=error msg="encountered an error cleaning up failed sandbox \"1a137de9d036b4eecbaadec3635f738c0153ae639090811abef60bdc1c0bcbde\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:37:08.256958 env[1205]: time="2025-07-10T00:37:08.256900865Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-xcq57,Uid:11ff2135-d9e8-4055-b855-c59ae8ddcd79,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"1a137de9d036b4eecbaadec3635f738c0153ae639090811abef60bdc1c0bcbde\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:37:08.257202 kubelet[1947]: E0710 00:37:08.257158 1947 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"1a137de9d036b4eecbaadec3635f738c0153ae639090811abef60bdc1c0bcbde\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:37:08.257300 kubelet[1947]: E0710 00:37:08.257236 1947 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"1a137de9d036b4eecbaadec3635f738c0153ae639090811abef60bdc1c0bcbde\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-xcq57" Jul 10 00:37:08.257300 kubelet[1947]: E0710 00:37:08.257259 1947 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"1a137de9d036b4eecbaadec3635f738c0153ae639090811abef60bdc1c0bcbde\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-xcq57" Jul 10 00:37:08.257388 kubelet[1947]: E0710 00:37:08.257305 1947 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"csi-node-driver-xcq57_calico-system(11ff2135-d9e8-4055-b855-c59ae8ddcd79)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"csi-node-driver-xcq57_calico-system(11ff2135-d9e8-4055-b855-c59ae8ddcd79)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"1a137de9d036b4eecbaadec3635f738c0153ae639090811abef60bdc1c0bcbde\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-xcq57" podUID="11ff2135-d9e8-4055-b855-c59ae8ddcd79" Jul 10 00:37:08.258819 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-1a137de9d036b4eecbaadec3635f738c0153ae639090811abef60bdc1c0bcbde-shm.mount: Deactivated successfully. Jul 10 00:37:08.259467 kubelet[1947]: I0710 00:37:08.259407 1947 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"goldmane-key-pair\" (UniqueName: \"kubernetes.io/secret/8eadc06b-a096-4667-a191-bf6882f37d75-goldmane-key-pair\") pod \"goldmane-768f4c5c69-z2lth\" (UID: \"8eadc06b-a096-4667-a191-bf6882f37d75\") " pod="calico-system/goldmane-768f4c5c69-z2lth" Jul 10 00:37:08.259467 kubelet[1947]: I0710 00:37:08.259439 1947 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-687bm\" (UniqueName: \"kubernetes.io/projected/8eadc06b-a096-4667-a191-bf6882f37d75-kube-api-access-687bm\") pod \"goldmane-768f4c5c69-z2lth\" (UID: \"8eadc06b-a096-4667-a191-bf6882f37d75\") " pod="calico-system/goldmane-768f4c5c69-z2lth" Jul 10 00:37:08.259467 kubelet[1947]: I0710 00:37:08.259456 1947 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config\" (UniqueName: \"kubernetes.io/configmap/8eadc06b-a096-4667-a191-bf6882f37d75-config\") pod \"goldmane-768f4c5c69-z2lth\" (UID: \"8eadc06b-a096-4667-a191-bf6882f37d75\") " pod="calico-system/goldmane-768f4c5c69-z2lth" Jul 10 00:37:08.259884 kubelet[1947]: I0710 00:37:08.259476 1947 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/7ab2b8e4-3818-4286-9287-142885fbf432-calico-apiserver-certs\") pod \"calico-apiserver-79f4d77569-v77g9\" (UID: \"7ab2b8e4-3818-4286-9287-142885fbf432\") " pod="calico-apiserver/calico-apiserver-79f4d77569-v77g9" Jul 10 00:37:08.259884 kubelet[1947]: I0710 00:37:08.259495 1947 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/c8b0db9c-1785-4ce7-ba5a-244a4bfc9464-config-volume\") pod \"coredns-668d6bf9bc-sm7jj\" (UID: \"c8b0db9c-1785-4ce7-ba5a-244a4bfc9464\") " pod="kube-system/coredns-668d6bf9bc-sm7jj" Jul 10 00:37:08.259884 kubelet[1947]: I0710 00:37:08.259512 1947 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/16b05d7c-51b7-4fb7-a4cb-692b527960e6-config-volume\") pod \"coredns-668d6bf9bc-fc26s\" (UID: \"16b05d7c-51b7-4fb7-a4cb-692b527960e6\") " pod="kube-system/coredns-668d6bf9bc-fc26s" Jul 10 00:37:08.259884 kubelet[1947]: I0710 00:37:08.259527 1947 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-rnxsz\" (UniqueName: \"kubernetes.io/projected/359ec5e8-588d-464e-9261-faefb7bc02b1-kube-api-access-rnxsz\") pod \"calico-apiserver-79f4d77569-qj846\" (UID: \"359ec5e8-588d-464e-9261-faefb7bc02b1\") " pod="calico-apiserver/calico-apiserver-79f4d77569-qj846" Jul 10 00:37:08.259884 kubelet[1947]: I0710 00:37:08.259540 1947 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"goldmane-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/8eadc06b-a096-4667-a191-bf6882f37d75-goldmane-ca-bundle\") pod \"goldmane-768f4c5c69-z2lth\" (UID: \"8eadc06b-a096-4667-a191-bf6882f37d75\") " pod="calico-system/goldmane-768f4c5c69-z2lth" Jul 10 00:37:08.260156 kubelet[1947]: I0710 00:37:08.259558 1947 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/359ec5e8-588d-464e-9261-faefb7bc02b1-calico-apiserver-certs\") pod \"calico-apiserver-79f4d77569-qj846\" (UID: \"359ec5e8-588d-464e-9261-faefb7bc02b1\") " pod="calico-apiserver/calico-apiserver-79f4d77569-qj846" Jul 10 00:37:08.260156 kubelet[1947]: I0710 00:37:08.259577 1947 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/e898c44d-80a2-4702-a367-04a77e5bac00-tigera-ca-bundle\") pod \"calico-kube-controllers-89f4c7b56-xqnjf\" (UID: \"e898c44d-80a2-4702-a367-04a77e5bac00\") " pod="calico-system/calico-kube-controllers-89f4c7b56-xqnjf" Jul 10 00:37:08.260156 kubelet[1947]: I0710 00:37:08.259595 1947 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-lvjbg\" (UniqueName: \"kubernetes.io/projected/e898c44d-80a2-4702-a367-04a77e5bac00-kube-api-access-lvjbg\") pod \"calico-kube-controllers-89f4c7b56-xqnjf\" (UID: \"e898c44d-80a2-4702-a367-04a77e5bac00\") " pod="calico-system/calico-kube-controllers-89f4c7b56-xqnjf" Jul 10 00:37:08.260156 kubelet[1947]: I0710 00:37:08.259612 1947 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-5q8n7\" (UniqueName: \"kubernetes.io/projected/c8b0db9c-1785-4ce7-ba5a-244a4bfc9464-kube-api-access-5q8n7\") pod \"coredns-668d6bf9bc-sm7jj\" (UID: \"c8b0db9c-1785-4ce7-ba5a-244a4bfc9464\") " pod="kube-system/coredns-668d6bf9bc-sm7jj" Jul 10 00:37:08.260156 kubelet[1947]: I0710 00:37:08.259632 1947 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-84tkp\" (UniqueName: \"kubernetes.io/projected/b6385538-11ca-404b-bf9e-e69e438960db-kube-api-access-84tkp\") pod \"whisker-cd9dd8658-l5rm2\" (UID: \"b6385538-11ca-404b-bf9e-e69e438960db\") " pod="calico-system/whisker-cd9dd8658-l5rm2" Jul 10 00:37:08.260287 kubelet[1947]: I0710 00:37:08.259749 1947 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-5sdg6\" (UniqueName: \"kubernetes.io/projected/16b05d7c-51b7-4fb7-a4cb-692b527960e6-kube-api-access-5sdg6\") pod \"coredns-668d6bf9bc-fc26s\" (UID: \"16b05d7c-51b7-4fb7-a4cb-692b527960e6\") " pod="kube-system/coredns-668d6bf9bc-fc26s" Jul 10 00:37:08.260287 kubelet[1947]: I0710 00:37:08.259812 1947 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/b6385538-11ca-404b-bf9e-e69e438960db-whisker-backend-key-pair\") pod \"whisker-cd9dd8658-l5rm2\" (UID: \"b6385538-11ca-404b-bf9e-e69e438960db\") " pod="calico-system/whisker-cd9dd8658-l5rm2" Jul 10 00:37:08.260287 kubelet[1947]: I0710 00:37:08.259832 1947 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/b6385538-11ca-404b-bf9e-e69e438960db-whisker-ca-bundle\") pod \"whisker-cd9dd8658-l5rm2\" (UID: \"b6385538-11ca-404b-bf9e-e69e438960db\") " pod="calico-system/whisker-cd9dd8658-l5rm2" Jul 10 00:37:08.260287 kubelet[1947]: I0710 00:37:08.259845 1947 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-ng947\" (UniqueName: \"kubernetes.io/projected/7ab2b8e4-3818-4286-9287-142885fbf432-kube-api-access-ng947\") pod \"calico-apiserver-79f4d77569-v77g9\" (UID: \"7ab2b8e4-3818-4286-9287-142885fbf432\") " pod="calico-apiserver/calico-apiserver-79f4d77569-v77g9" Jul 10 00:37:08.410627 kubelet[1947]: E0710 00:37:08.410488 1947 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:37:08.411424 env[1205]: time="2025-07-10T00:37:08.411188316Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-sm7jj,Uid:c8b0db9c-1785-4ce7-ba5a-244a4bfc9464,Namespace:kube-system,Attempt:0,}" Jul 10 00:37:08.438626 kubelet[1947]: E0710 00:37:08.438572 1947 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:37:08.440577 env[1205]: time="2025-07-10T00:37:08.440520207Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-fc26s,Uid:16b05d7c-51b7-4fb7-a4cb-692b527960e6,Namespace:kube-system,Attempt:0,}" Jul 10 00:37:08.445140 env[1205]: time="2025-07-10T00:37:08.445106418Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-79f4d77569-qj846,Uid:359ec5e8-588d-464e-9261-faefb7bc02b1,Namespace:calico-apiserver,Attempt:0,}" Jul 10 00:37:08.449697 env[1205]: time="2025-07-10T00:37:08.449642885Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-79f4d77569-v77g9,Uid:7ab2b8e4-3818-4286-9287-142885fbf432,Namespace:calico-apiserver,Attempt:0,}" Jul 10 00:37:08.453370 env[1205]: time="2025-07-10T00:37:08.453331360Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-768f4c5c69-z2lth,Uid:8eadc06b-a096-4667-a191-bf6882f37d75,Namespace:calico-system,Attempt:0,}" Jul 10 00:37:08.458282 env[1205]: time="2025-07-10T00:37:08.458230518Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-cd9dd8658-l5rm2,Uid:b6385538-11ca-404b-bf9e-e69e438960db,Namespace:calico-system,Attempt:0,}" Jul 10 00:37:08.461418 env[1205]: time="2025-07-10T00:37:08.461382336Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-89f4c7b56-xqnjf,Uid:e898c44d-80a2-4702-a367-04a77e5bac00,Namespace:calico-system,Attempt:0,}" Jul 10 00:37:08.469254 env[1205]: time="2025-07-10T00:37:08.469192780Z" level=error msg="Failed to destroy network for sandbox \"29dbdbc36f7112620340299d9724c9353cc804cb5e64eb7f4c38cb3cb82c8b78\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:37:08.469568 env[1205]: time="2025-07-10T00:37:08.469531615Z" level=error msg="encountered an error cleaning up failed sandbox \"29dbdbc36f7112620340299d9724c9353cc804cb5e64eb7f4c38cb3cb82c8b78\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:37:08.469614 env[1205]: time="2025-07-10T00:37:08.469592571Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-sm7jj,Uid:c8b0db9c-1785-4ce7-ba5a-244a4bfc9464,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"29dbdbc36f7112620340299d9724c9353cc804cb5e64eb7f4c38cb3cb82c8b78\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:37:08.469925 kubelet[1947]: E0710 00:37:08.469867 1947 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"29dbdbc36f7112620340299d9724c9353cc804cb5e64eb7f4c38cb3cb82c8b78\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:37:08.469996 kubelet[1947]: E0710 00:37:08.469965 1947 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"29dbdbc36f7112620340299d9724c9353cc804cb5e64eb7f4c38cb3cb82c8b78\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-668d6bf9bc-sm7jj" Jul 10 00:37:08.470023 kubelet[1947]: E0710 00:37:08.469992 1947 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"29dbdbc36f7112620340299d9724c9353cc804cb5e64eb7f4c38cb3cb82c8b78\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-668d6bf9bc-sm7jj" Jul 10 00:37:08.470064 kubelet[1947]: E0710 00:37:08.470035 1947 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-668d6bf9bc-sm7jj_kube-system(c8b0db9c-1785-4ce7-ba5a-244a4bfc9464)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-668d6bf9bc-sm7jj_kube-system(c8b0db9c-1785-4ce7-ba5a-244a4bfc9464)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"29dbdbc36f7112620340299d9724c9353cc804cb5e64eb7f4c38cb3cb82c8b78\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-668d6bf9bc-sm7jj" podUID="c8b0db9c-1785-4ce7-ba5a-244a4bfc9464" Jul 10 00:37:08.520998 env[1205]: time="2025-07-10T00:37:08.520923454Z" level=error msg="Failed to destroy network for sandbox \"5abb90b786ac02b562c618112212ee2dfbee220e28d90eadb110eb3731498daf\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:37:08.521344 env[1205]: time="2025-07-10T00:37:08.521307836Z" level=error msg="encountered an error cleaning up failed sandbox \"5abb90b786ac02b562c618112212ee2dfbee220e28d90eadb110eb3731498daf\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:37:08.521397 env[1205]: time="2025-07-10T00:37:08.521367458Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-fc26s,Uid:16b05d7c-51b7-4fb7-a4cb-692b527960e6,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"5abb90b786ac02b562c618112212ee2dfbee220e28d90eadb110eb3731498daf\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:37:08.521693 kubelet[1947]: E0710 00:37:08.521624 1947 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"5abb90b786ac02b562c618112212ee2dfbee220e28d90eadb110eb3731498daf\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:37:08.521779 kubelet[1947]: E0710 00:37:08.521716 1947 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"5abb90b786ac02b562c618112212ee2dfbee220e28d90eadb110eb3731498daf\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-668d6bf9bc-fc26s" Jul 10 00:37:08.521779 kubelet[1947]: E0710 00:37:08.521743 1947 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"5abb90b786ac02b562c618112212ee2dfbee220e28d90eadb110eb3731498daf\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-668d6bf9bc-fc26s" Jul 10 00:37:08.521837 kubelet[1947]: E0710 00:37:08.521784 1947 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-668d6bf9bc-fc26s_kube-system(16b05d7c-51b7-4fb7-a4cb-692b527960e6)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-668d6bf9bc-fc26s_kube-system(16b05d7c-51b7-4fb7-a4cb-692b527960e6)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"5abb90b786ac02b562c618112212ee2dfbee220e28d90eadb110eb3731498daf\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-668d6bf9bc-fc26s" podUID="16b05d7c-51b7-4fb7-a4cb-692b527960e6" Jul 10 00:37:08.574600 env[1205]: time="2025-07-10T00:37:08.574527195Z" level=error msg="Failed to destroy network for sandbox \"423e3d3c7782d0d5416d42fc8235d5c6141a7b366a18ec11e8f12a0e7ba8082c\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:37:08.574901 env[1205]: time="2025-07-10T00:37:08.574859789Z" level=error msg="encountered an error cleaning up failed sandbox \"423e3d3c7782d0d5416d42fc8235d5c6141a7b366a18ec11e8f12a0e7ba8082c\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:37:08.574951 env[1205]: time="2025-07-10T00:37:08.574918609Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-79f4d77569-v77g9,Uid:7ab2b8e4-3818-4286-9287-142885fbf432,Namespace:calico-apiserver,Attempt:0,} failed, error" error="failed to setup network for sandbox \"423e3d3c7782d0d5416d42fc8235d5c6141a7b366a18ec11e8f12a0e7ba8082c\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:37:08.575174 kubelet[1947]: E0710 00:37:08.575136 1947 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"423e3d3c7782d0d5416d42fc8235d5c6141a7b366a18ec11e8f12a0e7ba8082c\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:37:08.575250 kubelet[1947]: E0710 00:37:08.575205 1947 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"423e3d3c7782d0d5416d42fc8235d5c6141a7b366a18ec11e8f12a0e7ba8082c\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-79f4d77569-v77g9" Jul 10 00:37:08.575250 kubelet[1947]: E0710 00:37:08.575226 1947 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"423e3d3c7782d0d5416d42fc8235d5c6141a7b366a18ec11e8f12a0e7ba8082c\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-79f4d77569-v77g9" Jul 10 00:37:08.575302 kubelet[1947]: E0710 00:37:08.575273 1947 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-apiserver-79f4d77569-v77g9_calico-apiserver(7ab2b8e4-3818-4286-9287-142885fbf432)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-apiserver-79f4d77569-v77g9_calico-apiserver(7ab2b8e4-3818-4286-9287-142885fbf432)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"423e3d3c7782d0d5416d42fc8235d5c6141a7b366a18ec11e8f12a0e7ba8082c\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-79f4d77569-v77g9" podUID="7ab2b8e4-3818-4286-9287-142885fbf432" Jul 10 00:37:08.578382 env[1205]: time="2025-07-10T00:37:08.578323042Z" level=error msg="Failed to destroy network for sandbox \"57474fc9fca6152a4e4b87d3af2e28153a81adbc34eb97e6e1b76d35c1f7cc2e\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:37:08.579225 env[1205]: time="2025-07-10T00:37:08.578821457Z" level=error msg="encountered an error cleaning up failed sandbox \"57474fc9fca6152a4e4b87d3af2e28153a81adbc34eb97e6e1b76d35c1f7cc2e\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:37:08.579225 env[1205]: time="2025-07-10T00:37:08.578887421Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-768f4c5c69-z2lth,Uid:8eadc06b-a096-4667-a191-bf6882f37d75,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"57474fc9fca6152a4e4b87d3af2e28153a81adbc34eb97e6e1b76d35c1f7cc2e\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:37:08.579444 kubelet[1947]: E0710 00:37:08.579125 1947 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"57474fc9fca6152a4e4b87d3af2e28153a81adbc34eb97e6e1b76d35c1f7cc2e\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:37:08.579444 kubelet[1947]: E0710 00:37:08.579180 1947 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"57474fc9fca6152a4e4b87d3af2e28153a81adbc34eb97e6e1b76d35c1f7cc2e\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/goldmane-768f4c5c69-z2lth" Jul 10 00:37:08.579444 kubelet[1947]: E0710 00:37:08.579198 1947 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"57474fc9fca6152a4e4b87d3af2e28153a81adbc34eb97e6e1b76d35c1f7cc2e\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/goldmane-768f4c5c69-z2lth" Jul 10 00:37:08.579784 kubelet[1947]: E0710 00:37:08.579233 1947 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"goldmane-768f4c5c69-z2lth_calico-system(8eadc06b-a096-4667-a191-bf6882f37d75)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"goldmane-768f4c5c69-z2lth_calico-system(8eadc06b-a096-4667-a191-bf6882f37d75)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"57474fc9fca6152a4e4b87d3af2e28153a81adbc34eb97e6e1b76d35c1f7cc2e\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/goldmane-768f4c5c69-z2lth" podUID="8eadc06b-a096-4667-a191-bf6882f37d75" Jul 10 00:37:08.584142 env[1205]: time="2025-07-10T00:37:08.584070021Z" level=error msg="Failed to destroy network for sandbox \"f9b12d61848dadeff42022b62731bf12497a5b269cb7844851312ec0c464409d\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:37:08.584564 env[1205]: time="2025-07-10T00:37:08.584517702Z" level=error msg="encountered an error cleaning up failed sandbox \"f9b12d61848dadeff42022b62731bf12497a5b269cb7844851312ec0c464409d\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:37:08.584855 env[1205]: time="2025-07-10T00:37:08.584816572Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-79f4d77569-qj846,Uid:359ec5e8-588d-464e-9261-faefb7bc02b1,Namespace:calico-apiserver,Attempt:0,} failed, error" error="failed to setup network for sandbox \"f9b12d61848dadeff42022b62731bf12497a5b269cb7844851312ec0c464409d\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:37:08.585207 kubelet[1947]: E0710 00:37:08.585164 1947 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"f9b12d61848dadeff42022b62731bf12497a5b269cb7844851312ec0c464409d\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:37:08.585285 kubelet[1947]: E0710 00:37:08.585229 1947 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"f9b12d61848dadeff42022b62731bf12497a5b269cb7844851312ec0c464409d\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-79f4d77569-qj846" Jul 10 00:37:08.585285 kubelet[1947]: E0710 00:37:08.585254 1947 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"f9b12d61848dadeff42022b62731bf12497a5b269cb7844851312ec0c464409d\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-79f4d77569-qj846" Jul 10 00:37:08.585379 kubelet[1947]: E0710 00:37:08.585295 1947 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-apiserver-79f4d77569-qj846_calico-apiserver(359ec5e8-588d-464e-9261-faefb7bc02b1)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-apiserver-79f4d77569-qj846_calico-apiserver(359ec5e8-588d-464e-9261-faefb7bc02b1)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"f9b12d61848dadeff42022b62731bf12497a5b269cb7844851312ec0c464409d\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-79f4d77569-qj846" podUID="359ec5e8-588d-464e-9261-faefb7bc02b1" Jul 10 00:37:08.595392 env[1205]: time="2025-07-10T00:37:08.595329841Z" level=error msg="Failed to destroy network for sandbox \"7de3064a535962f3719ed9b06c3286809c692aa164314996492f8bad1009aff5\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:37:08.595897 env[1205]: time="2025-07-10T00:37:08.595871949Z" level=error msg="encountered an error cleaning up failed sandbox \"7de3064a535962f3719ed9b06c3286809c692aa164314996492f8bad1009aff5\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:37:08.596027 env[1205]: time="2025-07-10T00:37:08.595999458Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-89f4c7b56-xqnjf,Uid:e898c44d-80a2-4702-a367-04a77e5bac00,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"7de3064a535962f3719ed9b06c3286809c692aa164314996492f8bad1009aff5\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:37:08.596769 kubelet[1947]: E0710 00:37:08.596360 1947 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"7de3064a535962f3719ed9b06c3286809c692aa164314996492f8bad1009aff5\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:37:08.596769 kubelet[1947]: E0710 00:37:08.596433 1947 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"7de3064a535962f3719ed9b06c3286809c692aa164314996492f8bad1009aff5\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-89f4c7b56-xqnjf" Jul 10 00:37:08.596769 kubelet[1947]: E0710 00:37:08.596453 1947 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"7de3064a535962f3719ed9b06c3286809c692aa164314996492f8bad1009aff5\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-89f4c7b56-xqnjf" Jul 10 00:37:08.596885 kubelet[1947]: E0710 00:37:08.596497 1947 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-kube-controllers-89f4c7b56-xqnjf_calico-system(e898c44d-80a2-4702-a367-04a77e5bac00)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-kube-controllers-89f4c7b56-xqnjf_calico-system(e898c44d-80a2-4702-a367-04a77e5bac00)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"7de3064a535962f3719ed9b06c3286809c692aa164314996492f8bad1009aff5\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-89f4c7b56-xqnjf" podUID="e898c44d-80a2-4702-a367-04a77e5bac00" Jul 10 00:37:08.598090 env[1205]: time="2025-07-10T00:37:08.598005355Z" level=error msg="Failed to destroy network for sandbox \"e63fa483445dc68ce19243877e768c35439587a9b368ec33b0df45e0661f9d20\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:37:08.598557 env[1205]: time="2025-07-10T00:37:08.598509231Z" level=error msg="encountered an error cleaning up failed sandbox \"e63fa483445dc68ce19243877e768c35439587a9b368ec33b0df45e0661f9d20\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:37:08.598616 env[1205]: time="2025-07-10T00:37:08.598585193Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-cd9dd8658-l5rm2,Uid:b6385538-11ca-404b-bf9e-e69e438960db,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"e63fa483445dc68ce19243877e768c35439587a9b368ec33b0df45e0661f9d20\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:37:08.598996 kubelet[1947]: E0710 00:37:08.598819 1947 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"e63fa483445dc68ce19243877e768c35439587a9b368ec33b0df45e0661f9d20\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:37:08.598996 kubelet[1947]: E0710 00:37:08.598876 1947 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"e63fa483445dc68ce19243877e768c35439587a9b368ec33b0df45e0661f9d20\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/whisker-cd9dd8658-l5rm2" Jul 10 00:37:08.598996 kubelet[1947]: E0710 00:37:08.598907 1947 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"e63fa483445dc68ce19243877e768c35439587a9b368ec33b0df45e0661f9d20\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/whisker-cd9dd8658-l5rm2" Jul 10 00:37:08.599182 kubelet[1947]: E0710 00:37:08.598948 1947 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"whisker-cd9dd8658-l5rm2_calico-system(b6385538-11ca-404b-bf9e-e69e438960db)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"whisker-cd9dd8658-l5rm2_calico-system(b6385538-11ca-404b-bf9e-e69e438960db)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"e63fa483445dc68ce19243877e768c35439587a9b368ec33b0df45e0661f9d20\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/whisker-cd9dd8658-l5rm2" podUID="b6385538-11ca-404b-bf9e-e69e438960db" Jul 10 00:37:08.972284 kubelet[1947]: I0710 00:37:08.972249 1947 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="29dbdbc36f7112620340299d9724c9353cc804cb5e64eb7f4c38cb3cb82c8b78" Jul 10 00:37:08.974269 env[1205]: time="2025-07-10T00:37:08.973223563Z" level=info msg="StopPodSandbox for \"29dbdbc36f7112620340299d9724c9353cc804cb5e64eb7f4c38cb3cb82c8b78\"" Jul 10 00:37:08.980251 env[1205]: time="2025-07-10T00:37:08.979561713Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.30.2\"" Jul 10 00:37:08.980444 kubelet[1947]: I0710 00:37:08.979923 1947 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="1a137de9d036b4eecbaadec3635f738c0153ae639090811abef60bdc1c0bcbde" Jul 10 00:37:08.980595 env[1205]: time="2025-07-10T00:37:08.980445442Z" level=info msg="StopPodSandbox for \"1a137de9d036b4eecbaadec3635f738c0153ae639090811abef60bdc1c0bcbde\"" Jul 10 00:37:08.982235 kubelet[1947]: I0710 00:37:08.982201 1947 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="57474fc9fca6152a4e4b87d3af2e28153a81adbc34eb97e6e1b76d35c1f7cc2e" Jul 10 00:37:08.982682 env[1205]: time="2025-07-10T00:37:08.982634491Z" level=info msg="StopPodSandbox for \"57474fc9fca6152a4e4b87d3af2e28153a81adbc34eb97e6e1b76d35c1f7cc2e\"" Jul 10 00:37:08.983418 kubelet[1947]: I0710 00:37:08.983386 1947 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="e63fa483445dc68ce19243877e768c35439587a9b368ec33b0df45e0661f9d20" Jul 10 00:37:08.984266 env[1205]: time="2025-07-10T00:37:08.984225840Z" level=info msg="StopPodSandbox for \"e63fa483445dc68ce19243877e768c35439587a9b368ec33b0df45e0661f9d20\"" Jul 10 00:37:08.984972 kubelet[1947]: I0710 00:37:08.984932 1947 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="f9b12d61848dadeff42022b62731bf12497a5b269cb7844851312ec0c464409d" Jul 10 00:37:08.985479 env[1205]: time="2025-07-10T00:37:08.985449937Z" level=info msg="StopPodSandbox for \"f9b12d61848dadeff42022b62731bf12497a5b269cb7844851312ec0c464409d\"" Jul 10 00:37:08.986182 kubelet[1947]: I0710 00:37:08.986157 1947 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="5abb90b786ac02b562c618112212ee2dfbee220e28d90eadb110eb3731498daf" Jul 10 00:37:08.986623 env[1205]: time="2025-07-10T00:37:08.986599747Z" level=info msg="StopPodSandbox for \"5abb90b786ac02b562c618112212ee2dfbee220e28d90eadb110eb3731498daf\"" Jul 10 00:37:08.987968 kubelet[1947]: I0710 00:37:08.987753 1947 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="423e3d3c7782d0d5416d42fc8235d5c6141a7b366a18ec11e8f12a0e7ba8082c" Jul 10 00:37:08.988162 env[1205]: time="2025-07-10T00:37:08.988142803Z" level=info msg="StopPodSandbox for \"423e3d3c7782d0d5416d42fc8235d5c6141a7b366a18ec11e8f12a0e7ba8082c\"" Jul 10 00:37:08.989969 kubelet[1947]: I0710 00:37:08.989748 1947 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="7de3064a535962f3719ed9b06c3286809c692aa164314996492f8bad1009aff5" Jul 10 00:37:08.990169 env[1205]: time="2025-07-10T00:37:08.990150673Z" level=info msg="StopPodSandbox for \"7de3064a535962f3719ed9b06c3286809c692aa164314996492f8bad1009aff5\"" Jul 10 00:37:09.024330 env[1205]: time="2025-07-10T00:37:09.024269109Z" level=error msg="StopPodSandbox for \"f9b12d61848dadeff42022b62731bf12497a5b269cb7844851312ec0c464409d\" failed" error="failed to destroy network for sandbox \"f9b12d61848dadeff42022b62731bf12497a5b269cb7844851312ec0c464409d\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:37:09.025011 kubelet[1947]: E0710 00:37:09.024787 1947 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"f9b12d61848dadeff42022b62731bf12497a5b269cb7844851312ec0c464409d\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="f9b12d61848dadeff42022b62731bf12497a5b269cb7844851312ec0c464409d" Jul 10 00:37:09.025011 kubelet[1947]: E0710 00:37:09.024867 1947 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"f9b12d61848dadeff42022b62731bf12497a5b269cb7844851312ec0c464409d"} Jul 10 00:37:09.025011 kubelet[1947]: E0710 00:37:09.024937 1947 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"359ec5e8-588d-464e-9261-faefb7bc02b1\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"f9b12d61848dadeff42022b62731bf12497a5b269cb7844851312ec0c464409d\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 10 00:37:09.025011 kubelet[1947]: E0710 00:37:09.024963 1947 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"359ec5e8-588d-464e-9261-faefb7bc02b1\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"f9b12d61848dadeff42022b62731bf12497a5b269cb7844851312ec0c464409d\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-79f4d77569-qj846" podUID="359ec5e8-588d-464e-9261-faefb7bc02b1" Jul 10 00:37:09.042563 env[1205]: time="2025-07-10T00:37:09.042458939Z" level=error msg="StopPodSandbox for \"57474fc9fca6152a4e4b87d3af2e28153a81adbc34eb97e6e1b76d35c1f7cc2e\" failed" error="failed to destroy network for sandbox \"57474fc9fca6152a4e4b87d3af2e28153a81adbc34eb97e6e1b76d35c1f7cc2e\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:37:09.043314 kubelet[1947]: E0710 00:37:09.043024 1947 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"57474fc9fca6152a4e4b87d3af2e28153a81adbc34eb97e6e1b76d35c1f7cc2e\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="57474fc9fca6152a4e4b87d3af2e28153a81adbc34eb97e6e1b76d35c1f7cc2e" Jul 10 00:37:09.043314 kubelet[1947]: E0710 00:37:09.043176 1947 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"57474fc9fca6152a4e4b87d3af2e28153a81adbc34eb97e6e1b76d35c1f7cc2e"} Jul 10 00:37:09.043314 kubelet[1947]: E0710 00:37:09.043231 1947 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"8eadc06b-a096-4667-a191-bf6882f37d75\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"57474fc9fca6152a4e4b87d3af2e28153a81adbc34eb97e6e1b76d35c1f7cc2e\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 10 00:37:09.043314 kubelet[1947]: E0710 00:37:09.043265 1947 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"8eadc06b-a096-4667-a191-bf6882f37d75\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"57474fc9fca6152a4e4b87d3af2e28153a81adbc34eb97e6e1b76d35c1f7cc2e\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/goldmane-768f4c5c69-z2lth" podUID="8eadc06b-a096-4667-a191-bf6882f37d75" Jul 10 00:37:09.057724 env[1205]: time="2025-07-10T00:37:09.057636764Z" level=error msg="StopPodSandbox for \"29dbdbc36f7112620340299d9724c9353cc804cb5e64eb7f4c38cb3cb82c8b78\" failed" error="failed to destroy network for sandbox \"29dbdbc36f7112620340299d9724c9353cc804cb5e64eb7f4c38cb3cb82c8b78\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:37:09.058003 kubelet[1947]: E0710 00:37:09.057943 1947 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"29dbdbc36f7112620340299d9724c9353cc804cb5e64eb7f4c38cb3cb82c8b78\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="29dbdbc36f7112620340299d9724c9353cc804cb5e64eb7f4c38cb3cb82c8b78" Jul 10 00:37:09.058105 kubelet[1947]: E0710 00:37:09.058020 1947 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"29dbdbc36f7112620340299d9724c9353cc804cb5e64eb7f4c38cb3cb82c8b78"} Jul 10 00:37:09.058105 kubelet[1947]: E0710 00:37:09.058073 1947 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"c8b0db9c-1785-4ce7-ba5a-244a4bfc9464\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"29dbdbc36f7112620340299d9724c9353cc804cb5e64eb7f4c38cb3cb82c8b78\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 10 00:37:09.058221 kubelet[1947]: E0710 00:37:09.058097 1947 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"c8b0db9c-1785-4ce7-ba5a-244a4bfc9464\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"29dbdbc36f7112620340299d9724c9353cc804cb5e64eb7f4c38cb3cb82c8b78\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-668d6bf9bc-sm7jj" podUID="c8b0db9c-1785-4ce7-ba5a-244a4bfc9464" Jul 10 00:37:09.058929 env[1205]: time="2025-07-10T00:37:09.058846356Z" level=error msg="StopPodSandbox for \"e63fa483445dc68ce19243877e768c35439587a9b368ec33b0df45e0661f9d20\" failed" error="failed to destroy network for sandbox \"e63fa483445dc68ce19243877e768c35439587a9b368ec33b0df45e0661f9d20\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:37:09.059194 kubelet[1947]: E0710 00:37:09.059137 1947 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"e63fa483445dc68ce19243877e768c35439587a9b368ec33b0df45e0661f9d20\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="e63fa483445dc68ce19243877e768c35439587a9b368ec33b0df45e0661f9d20" Jul 10 00:37:09.059278 kubelet[1947]: E0710 00:37:09.059195 1947 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"e63fa483445dc68ce19243877e768c35439587a9b368ec33b0df45e0661f9d20"} Jul 10 00:37:09.059278 kubelet[1947]: E0710 00:37:09.059255 1947 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"b6385538-11ca-404b-bf9e-e69e438960db\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"e63fa483445dc68ce19243877e768c35439587a9b368ec33b0df45e0661f9d20\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 10 00:37:09.059581 kubelet[1947]: E0710 00:37:09.059279 1947 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"b6385538-11ca-404b-bf9e-e69e438960db\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"e63fa483445dc68ce19243877e768c35439587a9b368ec33b0df45e0661f9d20\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/whisker-cd9dd8658-l5rm2" podUID="b6385538-11ca-404b-bf9e-e69e438960db" Jul 10 00:37:09.067524 env[1205]: time="2025-07-10T00:37:09.065328625Z" level=error msg="StopPodSandbox for \"5abb90b786ac02b562c618112212ee2dfbee220e28d90eadb110eb3731498daf\" failed" error="failed to destroy network for sandbox \"5abb90b786ac02b562c618112212ee2dfbee220e28d90eadb110eb3731498daf\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:37:09.067707 kubelet[1947]: E0710 00:37:09.067644 1947 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"5abb90b786ac02b562c618112212ee2dfbee220e28d90eadb110eb3731498daf\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="5abb90b786ac02b562c618112212ee2dfbee220e28d90eadb110eb3731498daf" Jul 10 00:37:09.067707 kubelet[1947]: E0710 00:37:09.067697 1947 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"5abb90b786ac02b562c618112212ee2dfbee220e28d90eadb110eb3731498daf"} Jul 10 00:37:09.067817 kubelet[1947]: E0710 00:37:09.067731 1947 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"16b05d7c-51b7-4fb7-a4cb-692b527960e6\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"5abb90b786ac02b562c618112212ee2dfbee220e28d90eadb110eb3731498daf\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 10 00:37:09.067817 kubelet[1947]: E0710 00:37:09.067763 1947 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"16b05d7c-51b7-4fb7-a4cb-692b527960e6\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"5abb90b786ac02b562c618112212ee2dfbee220e28d90eadb110eb3731498daf\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-668d6bf9bc-fc26s" podUID="16b05d7c-51b7-4fb7-a4cb-692b527960e6" Jul 10 00:37:09.071816 env[1205]: time="2025-07-10T00:37:09.071741756Z" level=error msg="StopPodSandbox for \"1a137de9d036b4eecbaadec3635f738c0153ae639090811abef60bdc1c0bcbde\" failed" error="failed to destroy network for sandbox \"1a137de9d036b4eecbaadec3635f738c0153ae639090811abef60bdc1c0bcbde\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:37:09.072060 kubelet[1947]: E0710 00:37:09.072008 1947 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"1a137de9d036b4eecbaadec3635f738c0153ae639090811abef60bdc1c0bcbde\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="1a137de9d036b4eecbaadec3635f738c0153ae639090811abef60bdc1c0bcbde" Jul 10 00:37:09.072060 kubelet[1947]: E0710 00:37:09.072056 1947 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"1a137de9d036b4eecbaadec3635f738c0153ae639090811abef60bdc1c0bcbde"} Jul 10 00:37:09.072208 kubelet[1947]: E0710 00:37:09.072087 1947 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"11ff2135-d9e8-4055-b855-c59ae8ddcd79\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"1a137de9d036b4eecbaadec3635f738c0153ae639090811abef60bdc1c0bcbde\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 10 00:37:09.072208 kubelet[1947]: E0710 00:37:09.072110 1947 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"11ff2135-d9e8-4055-b855-c59ae8ddcd79\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"1a137de9d036b4eecbaadec3635f738c0153ae639090811abef60bdc1c0bcbde\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-xcq57" podUID="11ff2135-d9e8-4055-b855-c59ae8ddcd79" Jul 10 00:37:09.080592 env[1205]: time="2025-07-10T00:37:09.080506842Z" level=error msg="StopPodSandbox for \"7de3064a535962f3719ed9b06c3286809c692aa164314996492f8bad1009aff5\" failed" error="failed to destroy network for sandbox \"7de3064a535962f3719ed9b06c3286809c692aa164314996492f8bad1009aff5\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:37:09.080903 kubelet[1947]: E0710 00:37:09.080861 1947 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"7de3064a535962f3719ed9b06c3286809c692aa164314996492f8bad1009aff5\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="7de3064a535962f3719ed9b06c3286809c692aa164314996492f8bad1009aff5" Jul 10 00:37:09.080999 kubelet[1947]: E0710 00:37:09.080922 1947 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"7de3064a535962f3719ed9b06c3286809c692aa164314996492f8bad1009aff5"} Jul 10 00:37:09.080999 kubelet[1947]: E0710 00:37:09.080970 1947 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"e898c44d-80a2-4702-a367-04a77e5bac00\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"7de3064a535962f3719ed9b06c3286809c692aa164314996492f8bad1009aff5\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 10 00:37:09.081090 kubelet[1947]: E0710 00:37:09.081001 1947 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"e898c44d-80a2-4702-a367-04a77e5bac00\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"7de3064a535962f3719ed9b06c3286809c692aa164314996492f8bad1009aff5\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-89f4c7b56-xqnjf" podUID="e898c44d-80a2-4702-a367-04a77e5bac00" Jul 10 00:37:09.081323 env[1205]: time="2025-07-10T00:37:09.081258372Z" level=error msg="StopPodSandbox for \"423e3d3c7782d0d5416d42fc8235d5c6141a7b366a18ec11e8f12a0e7ba8082c\" failed" error="failed to destroy network for sandbox \"423e3d3c7782d0d5416d42fc8235d5c6141a7b366a18ec11e8f12a0e7ba8082c\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:37:09.081430 kubelet[1947]: E0710 00:37:09.081402 1947 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"423e3d3c7782d0d5416d42fc8235d5c6141a7b366a18ec11e8f12a0e7ba8082c\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="423e3d3c7782d0d5416d42fc8235d5c6141a7b366a18ec11e8f12a0e7ba8082c" Jul 10 00:37:09.081469 kubelet[1947]: E0710 00:37:09.081433 1947 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"423e3d3c7782d0d5416d42fc8235d5c6141a7b366a18ec11e8f12a0e7ba8082c"} Jul 10 00:37:09.081469 kubelet[1947]: E0710 00:37:09.081459 1947 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"7ab2b8e4-3818-4286-9287-142885fbf432\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"423e3d3c7782d0d5416d42fc8235d5c6141a7b366a18ec11e8f12a0e7ba8082c\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 10 00:37:09.081544 kubelet[1947]: E0710 00:37:09.081481 1947 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"7ab2b8e4-3818-4286-9287-142885fbf432\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"423e3d3c7782d0d5416d42fc8235d5c6141a7b366a18ec11e8f12a0e7ba8082c\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-79f4d77569-v77g9" podUID="7ab2b8e4-3818-4286-9287-142885fbf432" Jul 10 00:37:14.041628 kubelet[1947]: I0710 00:37:14.041288 1947 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Jul 10 00:37:14.042394 kubelet[1947]: E0710 00:37:14.042376 1947 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:37:14.195983 systemd[1]: Started sshd@7-10.0.0.36:22-10.0.0.1:57976.service. Jul 10 00:37:14.194000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.0.0.36:22-10.0.0.1:57976 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:37:14.201586 kernel: kauditd_printk_skb: 34 callbacks suppressed Jul 10 00:37:14.201955 kernel: audit: type=1130 audit(1752107834.194:992): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.0.0.36:22-10.0.0.1:57976 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:37:14.251593 sshd[3141]: Accepted publickey for core from 10.0.0.1 port 57976 ssh2: RSA SHA256:suUhWV759MqU0C+Dl6JG8TPW8PqnqlsB4qushdi9Ejw Jul 10 00:37:14.249000 audit[3141]: USER_ACCT pid=3141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:37:14.263817 kernel: audit: type=1101 audit(1752107834.249:993): pid=3141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:37:14.263869 kernel: audit: type=1103 audit(1752107834.256:994): pid=3141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:37:14.263888 kernel: audit: type=1006 audit(1752107834.256:995): pid=3141 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=8 res=1 Jul 10 00:37:14.256000 audit[3141]: CRED_ACQ pid=3141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:37:14.264213 sshd[3141]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 00:37:14.274694 kernel: audit: type=1300 audit(1752107834.256:995): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe9e72f130 a2=3 a3=0 items=0 ppid=1 pid=3141 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:14.274755 kernel: audit: type=1327 audit(1752107834.256:995): proctitle=737368643A20636F7265205B707269765D Jul 10 00:37:14.256000 audit[3141]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe9e72f130 a2=3 a3=0 items=0 ppid=1 pid=3141 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:14.256000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 10 00:37:14.277803 systemd[1]: Started session-8.scope. Jul 10 00:37:14.278345 systemd-logind[1194]: New session 8 of user core. Jul 10 00:37:14.282000 audit[3141]: USER_START pid=3141 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:37:14.293915 kernel: audit: type=1105 audit(1752107834.282:996): pid=3141 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:37:14.293975 kernel: audit: type=1103 audit(1752107834.282:997): pid=3143 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:37:14.282000 audit[3143]: CRED_ACQ pid=3143 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:37:14.338000 audit[3154]: NETFILTER_CFG table=filter:97 family=2 entries=21 op=nft_register_rule pid=3154 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:37:14.338000 audit[3154]: SYSCALL arch=c000003e syscall=46 success=yes exit=7480 a0=3 a1=7ffc0532bbb0 a2=0 a3=7ffc0532bb9c items=0 ppid=2093 pid=3154 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:14.347804 kernel: audit: type=1325 audit(1752107834.338:998): table=filter:97 family=2 entries=21 op=nft_register_rule pid=3154 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:37:14.347965 kernel: audit: type=1300 audit(1752107834.338:998): arch=c000003e syscall=46 success=yes exit=7480 a0=3 a1=7ffc0532bbb0 a2=0 a3=7ffc0532bb9c items=0 ppid=2093 pid=3154 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:14.338000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:37:14.351000 audit[3154]: NETFILTER_CFG table=nat:98 family=2 entries=19 op=nft_register_chain pid=3154 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:37:14.351000 audit[3154]: SYSCALL arch=c000003e syscall=46 success=yes exit=6276 a0=3 a1=7ffc0532bbb0 a2=0 a3=7ffc0532bb9c items=0 ppid=2093 pid=3154 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:14.351000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:37:14.407720 sshd[3141]: pam_unix(sshd:session): session closed for user core Jul 10 00:37:14.407000 audit[3141]: USER_END pid=3141 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:37:14.407000 audit[3141]: CRED_DISP pid=3141 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:37:14.410903 systemd[1]: sshd@7-10.0.0.36:22-10.0.0.1:57976.service: Deactivated successfully. Jul 10 00:37:14.409000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.0.0.36:22-10.0.0.1:57976 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:37:14.411593 systemd[1]: session-8.scope: Deactivated successfully. Jul 10 00:37:14.412463 systemd-logind[1194]: Session 8 logged out. Waiting for processes to exit. Jul 10 00:37:14.413139 systemd-logind[1194]: Removed session 8. Jul 10 00:37:15.001733 kubelet[1947]: E0710 00:37:15.001699 1947 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:37:15.458939 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3169451569.mount: Deactivated successfully. Jul 10 00:37:16.433303 env[1205]: time="2025-07-10T00:37:16.433232696Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:37:16.435968 env[1205]: time="2025-07-10T00:37:16.435932113Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:cc52550d767f73458fee2ee68db9db5de30d175e8fa4569ebdb43610127b6d20,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:37:16.437279 env[1205]: time="2025-07-10T00:37:16.437249717Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/node:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:37:16.438567 env[1205]: time="2025-07-10T00:37:16.438544748Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node@sha256:e94d49349cc361ef2216d27dda4a097278984d778279f66e79b0616c827c6760,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:37:16.439052 env[1205]: time="2025-07-10T00:37:16.439015742Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.30.2\" returns image reference \"sha256:cc52550d767f73458fee2ee68db9db5de30d175e8fa4569ebdb43610127b6d20\"" Jul 10 00:37:16.445502 env[1205]: time="2025-07-10T00:37:16.445467001Z" level=info msg="CreateContainer within sandbox \"ec01c053a4a318e712857f19806878031313d70021c91dc955e39a7ec3044310\" for container &ContainerMetadata{Name:calico-node,Attempt:0,}" Jul 10 00:37:16.462774 env[1205]: time="2025-07-10T00:37:16.462709758Z" level=info msg="CreateContainer within sandbox \"ec01c053a4a318e712857f19806878031313d70021c91dc955e39a7ec3044310\" for &ContainerMetadata{Name:calico-node,Attempt:0,} returns container id \"ea2c8e0f16e40cff08cb91d4b77a42f0c4d2f4352511ed453d2af75bac840afc\"" Jul 10 00:37:16.463329 env[1205]: time="2025-07-10T00:37:16.463284647Z" level=info msg="StartContainer for \"ea2c8e0f16e40cff08cb91d4b77a42f0c4d2f4352511ed453d2af75bac840afc\"" Jul 10 00:37:16.482971 systemd[1]: Started cri-containerd-ea2c8e0f16e40cff08cb91d4b77a42f0c4d2f4352511ed453d2af75bac840afc.scope. Jul 10 00:37:16.495000 audit[3168]: AVC avc: denied { perfmon } for pid=3168 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:16.495000 audit[3168]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001bd6b0 a2=3c a3=7fcada989fa8 items=0 ppid=2448 pid=3168 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:16.495000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6561326338653066313665343063666630386362393164346237376134 Jul 10 00:37:16.495000 audit[3168]: AVC avc: denied { bpf } for pid=3168 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:16.495000 audit[3168]: AVC avc: denied { bpf } for pid=3168 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:16.495000 audit[3168]: AVC avc: denied { bpf } for pid=3168 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:16.495000 audit[3168]: AVC avc: denied { perfmon } for pid=3168 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:16.495000 audit[3168]: AVC avc: denied { perfmon } for pid=3168 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:16.495000 audit[3168]: AVC avc: denied { perfmon } for pid=3168 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:16.495000 audit[3168]: AVC avc: denied { perfmon } for pid=3168 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:16.495000 audit[3168]: AVC avc: denied { perfmon } for pid=3168 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:16.495000 audit[3168]: AVC avc: denied { bpf } for pid=3168 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:16.495000 audit[3168]: AVC avc: denied { bpf } for pid=3168 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:16.495000 audit: BPF prog-id=136 op=LOAD Jul 10 00:37:16.495000 audit[3168]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001bd9d8 a2=78 a3=c0002e1eb8 items=0 ppid=2448 pid=3168 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:16.495000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6561326338653066313665343063666630386362393164346237376134 Jul 10 00:37:16.495000 audit[3168]: AVC avc: denied { bpf } for pid=3168 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:16.495000 audit[3168]: AVC avc: denied { bpf } for pid=3168 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:16.495000 audit[3168]: AVC avc: denied { perfmon } for pid=3168 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:16.495000 audit[3168]: AVC avc: denied { perfmon } for pid=3168 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:16.495000 audit[3168]: AVC avc: denied { perfmon } for pid=3168 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:16.495000 audit[3168]: AVC avc: denied { perfmon } for pid=3168 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:16.495000 audit[3168]: AVC avc: denied { perfmon } for pid=3168 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:16.495000 audit[3168]: AVC avc: denied { bpf } for pid=3168 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:16.495000 audit[3168]: AVC avc: denied { bpf } for pid=3168 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:16.495000 audit: BPF prog-id=137 op=LOAD Jul 10 00:37:16.495000 audit[3168]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c0001bd770 a2=78 a3=c0002e1f08 items=0 ppid=2448 pid=3168 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:16.495000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6561326338653066313665343063666630386362393164346237376134 Jul 10 00:37:16.495000 audit: BPF prog-id=137 op=UNLOAD Jul 10 00:37:16.495000 audit: BPF prog-id=136 op=UNLOAD Jul 10 00:37:16.495000 audit[3168]: AVC avc: denied { bpf } for pid=3168 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:16.495000 audit[3168]: AVC avc: denied { bpf } for pid=3168 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:16.495000 audit[3168]: AVC avc: denied { bpf } for pid=3168 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:16.495000 audit[3168]: AVC avc: denied { perfmon } for pid=3168 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:16.495000 audit[3168]: AVC avc: denied { perfmon } for pid=3168 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:16.495000 audit[3168]: AVC avc: denied { perfmon } for pid=3168 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:16.495000 audit[3168]: AVC avc: denied { perfmon } for pid=3168 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:16.495000 audit[3168]: AVC avc: denied { perfmon } for pid=3168 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:16.495000 audit[3168]: AVC avc: denied { bpf } for pid=3168 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:16.495000 audit[3168]: AVC avc: denied { bpf } for pid=3168 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:16.495000 audit: BPF prog-id=138 op=LOAD Jul 10 00:37:16.495000 audit[3168]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001bdc30 a2=78 a3=c0002e1f98 items=0 ppid=2448 pid=3168 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:16.495000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6561326338653066313665343063666630386362393164346237376134 Jul 10 00:37:16.516274 env[1205]: time="2025-07-10T00:37:16.516224611Z" level=info msg="StartContainer for \"ea2c8e0f16e40cff08cb91d4b77a42f0c4d2f4352511ed453d2af75bac840afc\" returns successfully" Jul 10 00:37:16.590606 kernel: wireguard: WireGuard 1.0.0 loaded. See www.wireguard.com for information. Jul 10 00:37:16.590743 kernel: wireguard: Copyright (C) 2015-2019 Jason A. Donenfeld . All Rights Reserved. Jul 10 00:37:16.694534 env[1205]: time="2025-07-10T00:37:16.694399426Z" level=info msg="StopPodSandbox for \"e63fa483445dc68ce19243877e768c35439587a9b368ec33b0df45e0661f9d20\"" Jul 10 00:37:16.809165 env[1205]: 2025-07-10 00:37:16.749 [INFO][3225] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="e63fa483445dc68ce19243877e768c35439587a9b368ec33b0df45e0661f9d20" Jul 10 00:37:16.809165 env[1205]: 2025-07-10 00:37:16.749 [INFO][3225] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="e63fa483445dc68ce19243877e768c35439587a9b368ec33b0df45e0661f9d20" iface="eth0" netns="/var/run/netns/cni-f4c7c1b5-b0d9-2c9f-0c49-ebb7110c5479" Jul 10 00:37:16.809165 env[1205]: 2025-07-10 00:37:16.749 [INFO][3225] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="e63fa483445dc68ce19243877e768c35439587a9b368ec33b0df45e0661f9d20" iface="eth0" netns="/var/run/netns/cni-f4c7c1b5-b0d9-2c9f-0c49-ebb7110c5479" Jul 10 00:37:16.809165 env[1205]: 2025-07-10 00:37:16.750 [INFO][3225] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="e63fa483445dc68ce19243877e768c35439587a9b368ec33b0df45e0661f9d20" iface="eth0" netns="/var/run/netns/cni-f4c7c1b5-b0d9-2c9f-0c49-ebb7110c5479" Jul 10 00:37:16.809165 env[1205]: 2025-07-10 00:37:16.750 [INFO][3225] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="e63fa483445dc68ce19243877e768c35439587a9b368ec33b0df45e0661f9d20" Jul 10 00:37:16.809165 env[1205]: 2025-07-10 00:37:16.750 [INFO][3225] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="e63fa483445dc68ce19243877e768c35439587a9b368ec33b0df45e0661f9d20" Jul 10 00:37:16.809165 env[1205]: 2025-07-10 00:37:16.795 [INFO][3234] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="e63fa483445dc68ce19243877e768c35439587a9b368ec33b0df45e0661f9d20" HandleID="k8s-pod-network.e63fa483445dc68ce19243877e768c35439587a9b368ec33b0df45e0661f9d20" Workload="localhost-k8s-whisker--cd9dd8658--l5rm2-eth0" Jul 10 00:37:16.809165 env[1205]: 2025-07-10 00:37:16.796 [INFO][3234] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:37:16.809165 env[1205]: 2025-07-10 00:37:16.796 [INFO][3234] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:37:16.809165 env[1205]: 2025-07-10 00:37:16.803 [WARNING][3234] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="e63fa483445dc68ce19243877e768c35439587a9b368ec33b0df45e0661f9d20" HandleID="k8s-pod-network.e63fa483445dc68ce19243877e768c35439587a9b368ec33b0df45e0661f9d20" Workload="localhost-k8s-whisker--cd9dd8658--l5rm2-eth0" Jul 10 00:37:16.809165 env[1205]: 2025-07-10 00:37:16.803 [INFO][3234] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="e63fa483445dc68ce19243877e768c35439587a9b368ec33b0df45e0661f9d20" HandleID="k8s-pod-network.e63fa483445dc68ce19243877e768c35439587a9b368ec33b0df45e0661f9d20" Workload="localhost-k8s-whisker--cd9dd8658--l5rm2-eth0" Jul 10 00:37:16.809165 env[1205]: 2025-07-10 00:37:16.805 [INFO][3234] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:37:16.809165 env[1205]: 2025-07-10 00:37:16.807 [INFO][3225] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="e63fa483445dc68ce19243877e768c35439587a9b368ec33b0df45e0661f9d20" Jul 10 00:37:16.809841 env[1205]: time="2025-07-10T00:37:16.809285620Z" level=info msg="TearDown network for sandbox \"e63fa483445dc68ce19243877e768c35439587a9b368ec33b0df45e0661f9d20\" successfully" Jul 10 00:37:16.809841 env[1205]: time="2025-07-10T00:37:16.809319874Z" level=info msg="StopPodSandbox for \"e63fa483445dc68ce19243877e768c35439587a9b368ec33b0df45e0661f9d20\" returns successfully" Jul 10 00:37:16.811480 systemd[1]: run-netns-cni\x2df4c7c1b5\x2db0d9\x2d2c9f\x2d0c49\x2debb7110c5479.mount: Deactivated successfully. Jul 10 00:37:16.921797 kubelet[1947]: I0710 00:37:16.921730 1947 reconciler_common.go:162] "operationExecutor.UnmountVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/b6385538-11ca-404b-bf9e-e69e438960db-whisker-ca-bundle\") pod \"b6385538-11ca-404b-bf9e-e69e438960db\" (UID: \"b6385538-11ca-404b-bf9e-e69e438960db\") " Jul 10 00:37:16.921797 kubelet[1947]: I0710 00:37:16.921800 1947 reconciler_common.go:162] "operationExecutor.UnmountVolume started for volume \"kube-api-access-84tkp\" (UniqueName: \"kubernetes.io/projected/b6385538-11ca-404b-bf9e-e69e438960db-kube-api-access-84tkp\") pod \"b6385538-11ca-404b-bf9e-e69e438960db\" (UID: \"b6385538-11ca-404b-bf9e-e69e438960db\") " Jul 10 00:37:16.922201 kubelet[1947]: I0710 00:37:16.921862 1947 reconciler_common.go:162] "operationExecutor.UnmountVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/b6385538-11ca-404b-bf9e-e69e438960db-whisker-backend-key-pair\") pod \"b6385538-11ca-404b-bf9e-e69e438960db\" (UID: \"b6385538-11ca-404b-bf9e-e69e438960db\") " Jul 10 00:37:16.922266 kubelet[1947]: I0710 00:37:16.922222 1947 operation_generator.go:780] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/b6385538-11ca-404b-bf9e-e69e438960db-whisker-ca-bundle" (OuterVolumeSpecName: "whisker-ca-bundle") pod "b6385538-11ca-404b-bf9e-e69e438960db" (UID: "b6385538-11ca-404b-bf9e-e69e438960db"). InnerVolumeSpecName "whisker-ca-bundle". PluginName "kubernetes.io/configmap", VolumeGIDValue "" Jul 10 00:37:16.926989 kubelet[1947]: I0710 00:37:16.925429 1947 operation_generator.go:780] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/b6385538-11ca-404b-bf9e-e69e438960db-kube-api-access-84tkp" (OuterVolumeSpecName: "kube-api-access-84tkp") pod "b6385538-11ca-404b-bf9e-e69e438960db" (UID: "b6385538-11ca-404b-bf9e-e69e438960db"). InnerVolumeSpecName "kube-api-access-84tkp". PluginName "kubernetes.io/projected", VolumeGIDValue "" Jul 10 00:37:16.926989 kubelet[1947]: I0710 00:37:16.926804 1947 operation_generator.go:780] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/b6385538-11ca-404b-bf9e-e69e438960db-whisker-backend-key-pair" (OuterVolumeSpecName: "whisker-backend-key-pair") pod "b6385538-11ca-404b-bf9e-e69e438960db" (UID: "b6385538-11ca-404b-bf9e-e69e438960db"). InnerVolumeSpecName "whisker-backend-key-pair". PluginName "kubernetes.io/secret", VolumeGIDValue "" Jul 10 00:37:16.929309 systemd[1]: var-lib-kubelet-pods-b6385538\x2d11ca\x2d404b\x2dbf9e\x2de69e438960db-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2d84tkp.mount: Deactivated successfully. Jul 10 00:37:16.929438 systemd[1]: var-lib-kubelet-pods-b6385538\x2d11ca\x2d404b\x2dbf9e\x2de69e438960db-volumes-kubernetes.io\x7esecret-whisker\x2dbackend\x2dkey\x2dpair.mount: Deactivated successfully. Jul 10 00:37:17.011145 systemd[1]: Removed slice kubepods-besteffort-podb6385538_11ca_404b_bf9e_e69e438960db.slice. Jul 10 00:37:17.022782 kubelet[1947]: I0710 00:37:17.022745 1947 reconciler_common.go:299] "Volume detached for volume \"kube-api-access-84tkp\" (UniqueName: \"kubernetes.io/projected/b6385538-11ca-404b-bf9e-e69e438960db-kube-api-access-84tkp\") on node \"localhost\" DevicePath \"\"" Jul 10 00:37:17.022782 kubelet[1947]: I0710 00:37:17.022774 1947 reconciler_common.go:299] "Volume detached for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/b6385538-11ca-404b-bf9e-e69e438960db-whisker-ca-bundle\") on node \"localhost\" DevicePath \"\"" Jul 10 00:37:17.022782 kubelet[1947]: I0710 00:37:17.022783 1947 reconciler_common.go:299] "Volume detached for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/b6385538-11ca-404b-bf9e-e69e438960db-whisker-backend-key-pair\") on node \"localhost\" DevicePath \"\"" Jul 10 00:37:17.035675 kubelet[1947]: I0710 00:37:17.035440 1947 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-node-klvkz" podStartSLOduration=1.444471879 podStartE2EDuration="22.035417092s" podCreationTimestamp="2025-07-10 00:36:55 +0000 UTC" firstStartedPulling="2025-07-10 00:36:55.848876071 +0000 UTC m=+21.271301079" lastFinishedPulling="2025-07-10 00:37:16.439821294 +0000 UTC m=+41.862246292" observedRunningTime="2025-07-10 00:37:17.024604897 +0000 UTC m=+42.447029905" watchObservedRunningTime="2025-07-10 00:37:17.035417092 +0000 UTC m=+42.457842100" Jul 10 00:37:17.064278 systemd[1]: Created slice kubepods-besteffort-pod3ec7563c_ea4a_49f1_be81_7ab13290c4df.slice. Jul 10 00:37:17.123813 kubelet[1947]: I0710 00:37:17.123761 1947 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-v5lcg\" (UniqueName: \"kubernetes.io/projected/3ec7563c-ea4a-49f1-be81-7ab13290c4df-kube-api-access-v5lcg\") pod \"whisker-6665466778-b6ngb\" (UID: \"3ec7563c-ea4a-49f1-be81-7ab13290c4df\") " pod="calico-system/whisker-6665466778-b6ngb" Jul 10 00:37:17.123813 kubelet[1947]: I0710 00:37:17.123824 1947 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/3ec7563c-ea4a-49f1-be81-7ab13290c4df-whisker-backend-key-pair\") pod \"whisker-6665466778-b6ngb\" (UID: \"3ec7563c-ea4a-49f1-be81-7ab13290c4df\") " pod="calico-system/whisker-6665466778-b6ngb" Jul 10 00:37:17.124051 kubelet[1947]: I0710 00:37:17.123853 1947 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/3ec7563c-ea4a-49f1-be81-7ab13290c4df-whisker-ca-bundle\") pod \"whisker-6665466778-b6ngb\" (UID: \"3ec7563c-ea4a-49f1-be81-7ab13290c4df\") " pod="calico-system/whisker-6665466778-b6ngb" Jul 10 00:37:17.368308 env[1205]: time="2025-07-10T00:37:17.368166619Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-6665466778-b6ngb,Uid:3ec7563c-ea4a-49f1-be81-7ab13290c4df,Namespace:calico-system,Attempt:0,}" Jul 10 00:37:17.472938 systemd-networkd[1023]: cali8fd98246d3d: Link UP Jul 10 00:37:17.475116 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Jul 10 00:37:17.475163 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali8fd98246d3d: link becomes ready Jul 10 00:37:17.475270 systemd-networkd[1023]: cali8fd98246d3d: Gained carrier Jul 10 00:37:17.486594 env[1205]: 2025-07-10 00:37:17.398 [INFO][3256] cni-plugin/utils.go 100: File /var/lib/calico/mtu does not exist Jul 10 00:37:17.486594 env[1205]: 2025-07-10 00:37:17.409 [INFO][3256] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-whisker--6665466778--b6ngb-eth0 whisker-6665466778- calico-system 3ec7563c-ea4a-49f1-be81-7ab13290c4df 944 0 2025-07-10 00:37:17 +0000 UTC map[app.kubernetes.io/name:whisker k8s-app:whisker pod-template-hash:6665466778 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:whisker] map[] [] [] []} {k8s localhost whisker-6665466778-b6ngb eth0 whisker [] [] [kns.calico-system ksa.calico-system.whisker] cali8fd98246d3d [] [] }} ContainerID="40d4ec2b7f2c3c77557beb393c82fccc4ccd4b4162535b3beb7666e27973924b" Namespace="calico-system" Pod="whisker-6665466778-b6ngb" WorkloadEndpoint="localhost-k8s-whisker--6665466778--b6ngb-" Jul 10 00:37:17.486594 env[1205]: 2025-07-10 00:37:17.409 [INFO][3256] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="40d4ec2b7f2c3c77557beb393c82fccc4ccd4b4162535b3beb7666e27973924b" Namespace="calico-system" Pod="whisker-6665466778-b6ngb" WorkloadEndpoint="localhost-k8s-whisker--6665466778--b6ngb-eth0" Jul 10 00:37:17.486594 env[1205]: 2025-07-10 00:37:17.431 [INFO][3270] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="40d4ec2b7f2c3c77557beb393c82fccc4ccd4b4162535b3beb7666e27973924b" HandleID="k8s-pod-network.40d4ec2b7f2c3c77557beb393c82fccc4ccd4b4162535b3beb7666e27973924b" Workload="localhost-k8s-whisker--6665466778--b6ngb-eth0" Jul 10 00:37:17.486594 env[1205]: 2025-07-10 00:37:17.431 [INFO][3270] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="40d4ec2b7f2c3c77557beb393c82fccc4ccd4b4162535b3beb7666e27973924b" HandleID="k8s-pod-network.40d4ec2b7f2c3c77557beb393c82fccc4ccd4b4162535b3beb7666e27973924b" Workload="localhost-k8s-whisker--6665466778--b6ngb-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0002c8fe0), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"whisker-6665466778-b6ngb", "timestamp":"2025-07-10 00:37:17.431354228 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 10 00:37:17.486594 env[1205]: 2025-07-10 00:37:17.431 [INFO][3270] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:37:17.486594 env[1205]: 2025-07-10 00:37:17.431 [INFO][3270] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:37:17.486594 env[1205]: 2025-07-10 00:37:17.431 [INFO][3270] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 10 00:37:17.486594 env[1205]: 2025-07-10 00:37:17.437 [INFO][3270] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.40d4ec2b7f2c3c77557beb393c82fccc4ccd4b4162535b3beb7666e27973924b" host="localhost" Jul 10 00:37:17.486594 env[1205]: 2025-07-10 00:37:17.442 [INFO][3270] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 10 00:37:17.486594 env[1205]: 2025-07-10 00:37:17.445 [INFO][3270] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 10 00:37:17.486594 env[1205]: 2025-07-10 00:37:17.447 [INFO][3270] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 10 00:37:17.486594 env[1205]: 2025-07-10 00:37:17.449 [INFO][3270] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 10 00:37:17.486594 env[1205]: 2025-07-10 00:37:17.449 [INFO][3270] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.40d4ec2b7f2c3c77557beb393c82fccc4ccd4b4162535b3beb7666e27973924b" host="localhost" Jul 10 00:37:17.486594 env[1205]: 2025-07-10 00:37:17.450 [INFO][3270] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.40d4ec2b7f2c3c77557beb393c82fccc4ccd4b4162535b3beb7666e27973924b Jul 10 00:37:17.486594 env[1205]: 2025-07-10 00:37:17.454 [INFO][3270] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.40d4ec2b7f2c3c77557beb393c82fccc4ccd4b4162535b3beb7666e27973924b" host="localhost" Jul 10 00:37:17.486594 env[1205]: 2025-07-10 00:37:17.459 [INFO][3270] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.129/26] block=192.168.88.128/26 handle="k8s-pod-network.40d4ec2b7f2c3c77557beb393c82fccc4ccd4b4162535b3beb7666e27973924b" host="localhost" Jul 10 00:37:17.486594 env[1205]: 2025-07-10 00:37:17.459 [INFO][3270] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.129/26] handle="k8s-pod-network.40d4ec2b7f2c3c77557beb393c82fccc4ccd4b4162535b3beb7666e27973924b" host="localhost" Jul 10 00:37:17.486594 env[1205]: 2025-07-10 00:37:17.459 [INFO][3270] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:37:17.486594 env[1205]: 2025-07-10 00:37:17.459 [INFO][3270] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.129/26] IPv6=[] ContainerID="40d4ec2b7f2c3c77557beb393c82fccc4ccd4b4162535b3beb7666e27973924b" HandleID="k8s-pod-network.40d4ec2b7f2c3c77557beb393c82fccc4ccd4b4162535b3beb7666e27973924b" Workload="localhost-k8s-whisker--6665466778--b6ngb-eth0" Jul 10 00:37:17.487355 env[1205]: 2025-07-10 00:37:17.465 [INFO][3256] cni-plugin/k8s.go 418: Populated endpoint ContainerID="40d4ec2b7f2c3c77557beb393c82fccc4ccd4b4162535b3beb7666e27973924b" Namespace="calico-system" Pod="whisker-6665466778-b6ngb" WorkloadEndpoint="localhost-k8s-whisker--6665466778--b6ngb-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-whisker--6665466778--b6ngb-eth0", GenerateName:"whisker-6665466778-", Namespace:"calico-system", SelfLink:"", UID:"3ec7563c-ea4a-49f1-be81-7ab13290c4df", ResourceVersion:"944", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 37, 17, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"whisker", "k8s-app":"whisker", "pod-template-hash":"6665466778", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"whisker"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"whisker-6665466778-b6ngb", Endpoint:"eth0", ServiceAccountName:"whisker", IPNetworks:[]string{"192.168.88.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.whisker"}, InterfaceName:"cali8fd98246d3d", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:37:17.487355 env[1205]: 2025-07-10 00:37:17.465 [INFO][3256] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.129/32] ContainerID="40d4ec2b7f2c3c77557beb393c82fccc4ccd4b4162535b3beb7666e27973924b" Namespace="calico-system" Pod="whisker-6665466778-b6ngb" WorkloadEndpoint="localhost-k8s-whisker--6665466778--b6ngb-eth0" Jul 10 00:37:17.487355 env[1205]: 2025-07-10 00:37:17.466 [INFO][3256] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali8fd98246d3d ContainerID="40d4ec2b7f2c3c77557beb393c82fccc4ccd4b4162535b3beb7666e27973924b" Namespace="calico-system" Pod="whisker-6665466778-b6ngb" WorkloadEndpoint="localhost-k8s-whisker--6665466778--b6ngb-eth0" Jul 10 00:37:17.487355 env[1205]: 2025-07-10 00:37:17.475 [INFO][3256] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="40d4ec2b7f2c3c77557beb393c82fccc4ccd4b4162535b3beb7666e27973924b" Namespace="calico-system" Pod="whisker-6665466778-b6ngb" WorkloadEndpoint="localhost-k8s-whisker--6665466778--b6ngb-eth0" Jul 10 00:37:17.487355 env[1205]: 2025-07-10 00:37:17.475 [INFO][3256] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="40d4ec2b7f2c3c77557beb393c82fccc4ccd4b4162535b3beb7666e27973924b" Namespace="calico-system" Pod="whisker-6665466778-b6ngb" WorkloadEndpoint="localhost-k8s-whisker--6665466778--b6ngb-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-whisker--6665466778--b6ngb-eth0", GenerateName:"whisker-6665466778-", Namespace:"calico-system", SelfLink:"", UID:"3ec7563c-ea4a-49f1-be81-7ab13290c4df", ResourceVersion:"944", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 37, 17, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"whisker", "k8s-app":"whisker", "pod-template-hash":"6665466778", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"whisker"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"40d4ec2b7f2c3c77557beb393c82fccc4ccd4b4162535b3beb7666e27973924b", Pod:"whisker-6665466778-b6ngb", Endpoint:"eth0", ServiceAccountName:"whisker", IPNetworks:[]string{"192.168.88.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.whisker"}, InterfaceName:"cali8fd98246d3d", MAC:"f2:e5:e4:30:66:d0", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:37:17.487355 env[1205]: 2025-07-10 00:37:17.484 [INFO][3256] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="40d4ec2b7f2c3c77557beb393c82fccc4ccd4b4162535b3beb7666e27973924b" Namespace="calico-system" Pod="whisker-6665466778-b6ngb" WorkloadEndpoint="localhost-k8s-whisker--6665466778--b6ngb-eth0" Jul 10 00:37:17.496623 env[1205]: time="2025-07-10T00:37:17.496563520Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 10 00:37:17.496623 env[1205]: time="2025-07-10T00:37:17.496598165Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 10 00:37:17.496623 env[1205]: time="2025-07-10T00:37:17.496608174Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 10 00:37:17.496798 env[1205]: time="2025-07-10T00:37:17.496751292Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/40d4ec2b7f2c3c77557beb393c82fccc4ccd4b4162535b3beb7666e27973924b pid=3293 runtime=io.containerd.runc.v2 Jul 10 00:37:17.514819 systemd[1]: Started cri-containerd-40d4ec2b7f2c3c77557beb393c82fccc4ccd4b4162535b3beb7666e27973924b.scope. Jul 10 00:37:17.523000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:17.523000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:17.523000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:17.523000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:17.523000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:17.523000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:17.523000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:17.523000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:17.523000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:17.523000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:17.523000 audit: BPF prog-id=139 op=LOAD Jul 10 00:37:17.523000 audit[3304]: AVC avc: denied { bpf } for pid=3304 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:17.523000 audit[3304]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000147c48 a2=10 a3=1c items=0 ppid=3293 pid=3304 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:17.523000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3430643465633262376632633363373735353762656233393363383266 Jul 10 00:37:17.523000 audit[3304]: AVC avc: denied { perfmon } for pid=3304 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:17.523000 audit[3304]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001476b0 a2=3c a3=c items=0 ppid=3293 pid=3304 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:17.523000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3430643465633262376632633363373735353762656233393363383266 Jul 10 00:37:17.523000 audit[3304]: AVC avc: denied { bpf } for pid=3304 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:17.523000 audit[3304]: AVC avc: denied { bpf } for pid=3304 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:17.523000 audit[3304]: AVC avc: denied { bpf } for pid=3304 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:17.523000 audit[3304]: AVC avc: denied { perfmon } for pid=3304 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:17.523000 audit[3304]: AVC avc: denied { perfmon } for pid=3304 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:17.523000 audit[3304]: AVC avc: denied { perfmon } for pid=3304 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:17.523000 audit[3304]: AVC avc: denied { perfmon } for pid=3304 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:17.523000 audit[3304]: AVC avc: denied { perfmon } for pid=3304 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:17.523000 audit[3304]: AVC avc: denied { bpf } for pid=3304 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:17.523000 audit[3304]: AVC avc: denied { bpf } for pid=3304 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:17.523000 audit: BPF prog-id=140 op=LOAD Jul 10 00:37:17.523000 audit[3304]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001479d8 a2=78 a3=c000273f40 items=0 ppid=3293 pid=3304 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:17.523000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3430643465633262376632633363373735353762656233393363383266 Jul 10 00:37:17.523000 audit[3304]: AVC avc: denied { bpf } for pid=3304 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:17.523000 audit[3304]: AVC avc: denied { bpf } for pid=3304 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:17.523000 audit[3304]: AVC avc: denied { perfmon } for pid=3304 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:17.523000 audit[3304]: AVC avc: denied { perfmon } for pid=3304 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:17.523000 audit[3304]: AVC avc: denied { perfmon } for pid=3304 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:17.523000 audit[3304]: AVC avc: denied { perfmon } for pid=3304 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:17.523000 audit[3304]: AVC avc: denied { perfmon } for pid=3304 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:17.523000 audit[3304]: AVC avc: denied { bpf } for pid=3304 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:17.523000 audit[3304]: AVC avc: denied { bpf } for pid=3304 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:17.523000 audit: BPF prog-id=141 op=LOAD Jul 10 00:37:17.523000 audit[3304]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000147770 a2=78 a3=c000273f88 items=0 ppid=3293 pid=3304 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:17.523000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3430643465633262376632633363373735353762656233393363383266 Jul 10 00:37:17.523000 audit: BPF prog-id=141 op=UNLOAD Jul 10 00:37:17.523000 audit: BPF prog-id=140 op=UNLOAD Jul 10 00:37:17.524000 audit[3304]: AVC avc: denied { bpf } for pid=3304 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:17.524000 audit[3304]: AVC avc: denied { bpf } for pid=3304 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:17.524000 audit[3304]: AVC avc: denied { bpf } for pid=3304 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:17.524000 audit[3304]: AVC avc: denied { perfmon } for pid=3304 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:17.524000 audit[3304]: AVC avc: denied { perfmon } for pid=3304 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:17.524000 audit[3304]: AVC avc: denied { perfmon } for pid=3304 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:17.524000 audit[3304]: AVC avc: denied { perfmon } for pid=3304 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:17.524000 audit[3304]: AVC avc: denied { perfmon } for pid=3304 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:17.524000 audit[3304]: AVC avc: denied { bpf } for pid=3304 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:17.524000 audit[3304]: AVC avc: denied { bpf } for pid=3304 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:17.524000 audit: BPF prog-id=142 op=LOAD Jul 10 00:37:17.524000 audit[3304]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000147c30 a2=78 a3=c000372398 items=0 ppid=3293 pid=3304 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:17.524000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3430643465633262376632633363373735353762656233393363383266 Jul 10 00:37:17.526230 systemd-resolved[1142]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 10 00:37:17.549257 env[1205]: time="2025-07-10T00:37:17.549193080Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-6665466778-b6ngb,Uid:3ec7563c-ea4a-49f1-be81-7ab13290c4df,Namespace:calico-system,Attempt:0,} returns sandbox id \"40d4ec2b7f2c3c77557beb393c82fccc4ccd4b4162535b3beb7666e27973924b\"" Jul 10 00:37:17.550972 env[1205]: time="2025-07-10T00:37:17.550927937Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.2\"" Jul 10 00:37:17.935000 audit[3374]: AVC avc: denied { write } for pid=3374 comm="tee" name="fd" dev="proc" ino=22416 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 10 00:37:17.935000 audit[3374]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7fff3e1f07f5 a2=241 a3=1b6 items=1 ppid=3336 pid=3374 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:17.935000 audit: CWD cwd="/etc/service/enabled/confd/log" Jul 10 00:37:17.935000 audit: PATH item=0 name="/dev/fd/63" inode=22410 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:37:17.935000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 10 00:37:17.941000 audit[3385]: AVC avc: denied { write } for pid=3385 comm="tee" name="fd" dev="proc" ino=24475 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 10 00:37:17.941000 audit[3388]: AVC avc: denied { write } for pid=3388 comm="tee" name="fd" dev="proc" ino=23389 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 10 00:37:17.941000 audit[3388]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffdc63697e5 a2=241 a3=1b6 items=1 ppid=3335 pid=3388 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:17.941000 audit: CWD cwd="/etc/service/enabled/allocate-tunnel-addrs/log" Jul 10 00:37:17.941000 audit: PATH item=0 name="/dev/fd/63" inode=22413 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:37:17.941000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 10 00:37:17.941000 audit[3385]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffc10bf47f5 a2=241 a3=1b6 items=1 ppid=3346 pid=3385 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:17.941000 audit: CWD cwd="/etc/service/enabled/felix/log" Jul 10 00:37:17.941000 audit: PATH item=0 name="/dev/fd/63" inode=24468 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:37:17.941000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 10 00:37:17.957000 audit[3392]: AVC avc: denied { write } for pid=3392 comm="tee" name="fd" dev="proc" ino=22424 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 10 00:37:17.957000 audit[3392]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffc792847f6 a2=241 a3=1b6 items=1 ppid=3341 pid=3392 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:17.957000 audit: CWD cwd="/etc/service/enabled/bird/log" Jul 10 00:37:17.957000 audit: PATH item=0 name="/dev/fd/63" inode=25355 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:37:17.957000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 10 00:37:17.960000 audit[3410]: AVC avc: denied { write } for pid=3410 comm="tee" name="fd" dev="proc" ino=22430 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 10 00:37:17.960000 audit[3410]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffc983aa7f7 a2=241 a3=1b6 items=1 ppid=3345 pid=3410 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:17.960000 audit: CWD cwd="/etc/service/enabled/cni/log" Jul 10 00:37:17.960000 audit: PATH item=0 name="/dev/fd/63" inode=24479 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:37:17.960000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 10 00:37:17.973000 audit[3408]: AVC avc: denied { write } for pid=3408 comm="tee" name="fd" dev="proc" ino=24482 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 10 00:37:17.973000 audit[3408]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffcd01d17e6 a2=241 a3=1b6 items=1 ppid=3350 pid=3408 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:17.973000 audit: CWD cwd="/etc/service/enabled/node-status-reporter/log" Jul 10 00:37:17.973000 audit: PATH item=0 name="/dev/fd/63" inode=23393 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:37:17.973000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 10 00:37:17.983000 audit[3415]: AVC avc: denied { write } for pid=3415 comm="tee" name="fd" dev="proc" ino=22435 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 10 00:37:17.983000 audit[3415]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffdbe54c7f5 a2=241 a3=1b6 items=1 ppid=3343 pid=3415 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:17.983000 audit: CWD cwd="/etc/service/enabled/bird6/log" Jul 10 00:37:17.983000 audit: PATH item=0 name="/dev/fd/63" inode=22432 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:37:17.983000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 10 00:37:18.103000 audit[3455]: AVC avc: denied { bpf } for pid=3455 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.103000 audit[3455]: AVC avc: denied { bpf } for pid=3455 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.103000 audit[3455]: AVC avc: denied { perfmon } for pid=3455 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.103000 audit[3455]: AVC avc: denied { perfmon } for pid=3455 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.103000 audit[3455]: AVC avc: denied { perfmon } for pid=3455 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.103000 audit[3455]: AVC avc: denied { perfmon } for pid=3455 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.103000 audit[3455]: AVC avc: denied { perfmon } for pid=3455 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.103000 audit[3455]: AVC avc: denied { bpf } for pid=3455 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.103000 audit[3455]: AVC avc: denied { bpf } for pid=3455 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.103000 audit: BPF prog-id=143 op=LOAD Jul 10 00:37:18.103000 audit[3455]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffd3eb21cd0 a2=98 a3=1fffffffffffffff items=0 ppid=3348 pid=3455 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:18.103000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Jul 10 00:37:18.104000 audit: BPF prog-id=143 op=UNLOAD Jul 10 00:37:18.104000 audit[3455]: AVC avc: denied { bpf } for pid=3455 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.104000 audit[3455]: AVC avc: denied { bpf } for pid=3455 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.104000 audit[3455]: AVC avc: denied { perfmon } for pid=3455 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.104000 audit[3455]: AVC avc: denied { perfmon } for pid=3455 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.104000 audit[3455]: AVC avc: denied { perfmon } for pid=3455 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.104000 audit[3455]: AVC avc: denied { perfmon } for pid=3455 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.104000 audit[3455]: AVC avc: denied { perfmon } for pid=3455 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.104000 audit[3455]: AVC avc: denied { bpf } for pid=3455 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.104000 audit[3455]: AVC avc: denied { bpf } for pid=3455 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.104000 audit: BPF prog-id=144 op=LOAD Jul 10 00:37:18.104000 audit[3455]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffd3eb21bb0 a2=94 a3=3 items=0 ppid=3348 pid=3455 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:18.104000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Jul 10 00:37:18.104000 audit: BPF prog-id=144 op=UNLOAD Jul 10 00:37:18.104000 audit[3455]: AVC avc: denied { bpf } for pid=3455 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.104000 audit[3455]: AVC avc: denied { bpf } for pid=3455 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.104000 audit[3455]: AVC avc: denied { perfmon } for pid=3455 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.104000 audit[3455]: AVC avc: denied { perfmon } for pid=3455 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.104000 audit[3455]: AVC avc: denied { perfmon } for pid=3455 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.104000 audit[3455]: AVC avc: denied { perfmon } for pid=3455 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.104000 audit[3455]: AVC avc: denied { perfmon } for pid=3455 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.104000 audit[3455]: AVC avc: denied { bpf } for pid=3455 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.104000 audit[3455]: AVC avc: denied { bpf } for pid=3455 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.104000 audit: BPF prog-id=145 op=LOAD Jul 10 00:37:18.104000 audit[3455]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffd3eb21bf0 a2=94 a3=7ffd3eb21dd0 items=0 ppid=3348 pid=3455 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:18.104000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Jul 10 00:37:18.104000 audit: BPF prog-id=145 op=UNLOAD Jul 10 00:37:18.104000 audit[3455]: AVC avc: denied { perfmon } for pid=3455 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.104000 audit[3455]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=0 a1=7ffd3eb21cc0 a2=50 a3=a000000085 items=0 ppid=3348 pid=3455 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:18.104000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Jul 10 00:37:18.105000 audit[3457]: AVC avc: denied { bpf } for pid=3457 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.105000 audit[3457]: AVC avc: denied { bpf } for pid=3457 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.105000 audit[3457]: AVC avc: denied { perfmon } for pid=3457 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.105000 audit[3457]: AVC avc: denied { perfmon } for pid=3457 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.105000 audit[3457]: AVC avc: denied { perfmon } for pid=3457 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.105000 audit[3457]: AVC avc: denied { perfmon } for pid=3457 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.105000 audit[3457]: AVC avc: denied { perfmon } for pid=3457 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.105000 audit[3457]: AVC avc: denied { bpf } for pid=3457 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.105000 audit[3457]: AVC avc: denied { bpf } for pid=3457 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.105000 audit: BPF prog-id=146 op=LOAD Jul 10 00:37:18.105000 audit[3457]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffc31c8b970 a2=98 a3=3 items=0 ppid=3348 pid=3457 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:18.105000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 00:37:18.105000 audit: BPF prog-id=146 op=UNLOAD Jul 10 00:37:18.105000 audit[3457]: AVC avc: denied { bpf } for pid=3457 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.105000 audit[3457]: AVC avc: denied { bpf } for pid=3457 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.105000 audit[3457]: AVC avc: denied { perfmon } for pid=3457 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.105000 audit[3457]: AVC avc: denied { perfmon } for pid=3457 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.105000 audit[3457]: AVC avc: denied { perfmon } for pid=3457 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.105000 audit[3457]: AVC avc: denied { perfmon } for pid=3457 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.105000 audit[3457]: AVC avc: denied { perfmon } for pid=3457 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.105000 audit[3457]: AVC avc: denied { bpf } for pid=3457 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.105000 audit[3457]: AVC avc: denied { bpf } for pid=3457 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.105000 audit: BPF prog-id=147 op=LOAD Jul 10 00:37:18.105000 audit[3457]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffc31c8b760 a2=94 a3=54428f items=0 ppid=3348 pid=3457 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:18.105000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 00:37:18.105000 audit: BPF prog-id=147 op=UNLOAD Jul 10 00:37:18.105000 audit[3457]: AVC avc: denied { bpf } for pid=3457 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.105000 audit[3457]: AVC avc: denied { bpf } for pid=3457 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.105000 audit[3457]: AVC avc: denied { perfmon } for pid=3457 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.105000 audit[3457]: AVC avc: denied { perfmon } for pid=3457 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.105000 audit[3457]: AVC avc: denied { perfmon } for pid=3457 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.105000 audit[3457]: AVC avc: denied { perfmon } for pid=3457 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.105000 audit[3457]: AVC avc: denied { perfmon } for pid=3457 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.105000 audit[3457]: AVC avc: denied { bpf } for pid=3457 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.105000 audit[3457]: AVC avc: denied { bpf } for pid=3457 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.105000 audit: BPF prog-id=148 op=LOAD Jul 10 00:37:18.105000 audit[3457]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffc31c8b790 a2=94 a3=2 items=0 ppid=3348 pid=3457 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:18.105000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 00:37:18.105000 audit: BPF prog-id=148 op=UNLOAD Jul 10 00:37:18.218000 audit[3457]: AVC avc: denied { bpf } for pid=3457 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.218000 audit[3457]: AVC avc: denied { bpf } for pid=3457 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.218000 audit[3457]: AVC avc: denied { perfmon } for pid=3457 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.218000 audit[3457]: AVC avc: denied { perfmon } for pid=3457 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.218000 audit[3457]: AVC avc: denied { perfmon } for pid=3457 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.218000 audit[3457]: AVC avc: denied { perfmon } for pid=3457 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.218000 audit[3457]: AVC avc: denied { perfmon } for pid=3457 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.218000 audit[3457]: AVC avc: denied { bpf } for pid=3457 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.218000 audit[3457]: AVC avc: denied { bpf } for pid=3457 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.218000 audit: BPF prog-id=149 op=LOAD Jul 10 00:37:18.218000 audit[3457]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffc31c8b650 a2=94 a3=1 items=0 ppid=3348 pid=3457 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:18.218000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 00:37:18.218000 audit: BPF prog-id=149 op=UNLOAD Jul 10 00:37:18.218000 audit[3457]: AVC avc: denied { perfmon } for pid=3457 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.218000 audit[3457]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=0 a1=7ffc31c8b720 a2=50 a3=7ffc31c8b800 items=0 ppid=3348 pid=3457 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:18.218000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 00:37:18.227000 audit[3457]: AVC avc: denied { bpf } for pid=3457 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.227000 audit[3457]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffc31c8b660 a2=28 a3=0 items=0 ppid=3348 pid=3457 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:18.227000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 00:37:18.227000 audit[3457]: AVC avc: denied { bpf } for pid=3457 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.227000 audit[3457]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffc31c8b690 a2=28 a3=0 items=0 ppid=3348 pid=3457 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:18.227000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 00:37:18.227000 audit[3457]: AVC avc: denied { bpf } for pid=3457 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.227000 audit[3457]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffc31c8b5a0 a2=28 a3=0 items=0 ppid=3348 pid=3457 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:18.227000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 00:37:18.227000 audit[3457]: AVC avc: denied { bpf } for pid=3457 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.227000 audit[3457]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffc31c8b6b0 a2=28 a3=0 items=0 ppid=3348 pid=3457 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:18.227000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 00:37:18.227000 audit[3457]: AVC avc: denied { bpf } for pid=3457 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.227000 audit[3457]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffc31c8b690 a2=28 a3=0 items=0 ppid=3348 pid=3457 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:18.227000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 00:37:18.227000 audit[3457]: AVC avc: denied { bpf } for pid=3457 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.227000 audit[3457]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffc31c8b680 a2=28 a3=0 items=0 ppid=3348 pid=3457 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:18.227000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 00:37:18.227000 audit[3457]: AVC avc: denied { bpf } for pid=3457 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.227000 audit[3457]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffc31c8b6b0 a2=28 a3=0 items=0 ppid=3348 pid=3457 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:18.227000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 00:37:18.227000 audit[3457]: AVC avc: denied { bpf } for pid=3457 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.227000 audit[3457]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffc31c8b690 a2=28 a3=0 items=0 ppid=3348 pid=3457 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:18.227000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 00:37:18.227000 audit[3457]: AVC avc: denied { bpf } for pid=3457 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.227000 audit[3457]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffc31c8b6b0 a2=28 a3=0 items=0 ppid=3348 pid=3457 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:18.227000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 00:37:18.227000 audit[3457]: AVC avc: denied { bpf } for pid=3457 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.227000 audit[3457]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffc31c8b680 a2=28 a3=0 items=0 ppid=3348 pid=3457 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:18.227000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 00:37:18.227000 audit[3457]: AVC avc: denied { bpf } for pid=3457 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.227000 audit[3457]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffc31c8b6f0 a2=28 a3=0 items=0 ppid=3348 pid=3457 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:18.227000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 00:37:18.227000 audit[3457]: AVC avc: denied { perfmon } for pid=3457 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.227000 audit[3457]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=0 a1=7ffc31c8b4a0 a2=50 a3=1 items=0 ppid=3348 pid=3457 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:18.227000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 00:37:18.227000 audit[3457]: AVC avc: denied { bpf } for pid=3457 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.227000 audit[3457]: AVC avc: denied { bpf } for pid=3457 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.227000 audit[3457]: AVC avc: denied { perfmon } for pid=3457 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.227000 audit[3457]: AVC avc: denied { perfmon } for pid=3457 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.227000 audit[3457]: AVC avc: denied { perfmon } for pid=3457 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.227000 audit[3457]: AVC avc: denied { perfmon } for pid=3457 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.227000 audit[3457]: AVC avc: denied { perfmon } for pid=3457 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.227000 audit[3457]: AVC avc: denied { bpf } for pid=3457 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.227000 audit[3457]: AVC avc: denied { bpf } for pid=3457 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.227000 audit: BPF prog-id=150 op=LOAD Jul 10 00:37:18.227000 audit[3457]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7ffc31c8b4a0 a2=94 a3=5 items=0 ppid=3348 pid=3457 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:18.227000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 00:37:18.227000 audit: BPF prog-id=150 op=UNLOAD Jul 10 00:37:18.227000 audit[3457]: AVC avc: denied { perfmon } for pid=3457 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.227000 audit[3457]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=0 a1=7ffc31c8b550 a2=50 a3=1 items=0 ppid=3348 pid=3457 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:18.227000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 00:37:18.227000 audit[3457]: AVC avc: denied { bpf } for pid=3457 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.227000 audit[3457]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=16 a1=7ffc31c8b670 a2=4 a3=38 items=0 ppid=3348 pid=3457 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:18.227000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 00:37:18.227000 audit[3457]: AVC avc: denied { bpf } for pid=3457 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.227000 audit[3457]: AVC avc: denied { bpf } for pid=3457 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.227000 audit[3457]: AVC avc: denied { perfmon } for pid=3457 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.227000 audit[3457]: AVC avc: denied { bpf } for pid=3457 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.227000 audit[3457]: AVC avc: denied { perfmon } for pid=3457 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.227000 audit[3457]: AVC avc: denied { perfmon } for pid=3457 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.227000 audit[3457]: AVC avc: denied { perfmon } for pid=3457 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.227000 audit[3457]: AVC avc: denied { perfmon } for pid=3457 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.227000 audit[3457]: AVC avc: denied { perfmon } for pid=3457 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.227000 audit[3457]: AVC avc: denied { bpf } for pid=3457 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.227000 audit[3457]: AVC avc: denied { confidentiality } for pid=3457 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 10 00:37:18.227000 audit[3457]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7ffc31c8b6c0 a2=94 a3=6 items=0 ppid=3348 pid=3457 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:18.227000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 00:37:18.228000 audit[3457]: AVC avc: denied { bpf } for pid=3457 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.228000 audit[3457]: AVC avc: denied { bpf } for pid=3457 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.228000 audit[3457]: AVC avc: denied { perfmon } for pid=3457 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.228000 audit[3457]: AVC avc: denied { bpf } for pid=3457 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.228000 audit[3457]: AVC avc: denied { perfmon } for pid=3457 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.228000 audit[3457]: AVC avc: denied { perfmon } for pid=3457 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.228000 audit[3457]: AVC avc: denied { perfmon } for pid=3457 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.228000 audit[3457]: AVC avc: denied { perfmon } for pid=3457 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.228000 audit[3457]: AVC avc: denied { perfmon } for pid=3457 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.228000 audit[3457]: AVC avc: denied { bpf } for pid=3457 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.228000 audit[3457]: AVC avc: denied { confidentiality } for pid=3457 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 10 00:37:18.228000 audit[3457]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7ffc31c8ae70 a2=94 a3=88 items=0 ppid=3348 pid=3457 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:18.228000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 00:37:18.228000 audit[3457]: AVC avc: denied { bpf } for pid=3457 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.228000 audit[3457]: AVC avc: denied { bpf } for pid=3457 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.228000 audit[3457]: AVC avc: denied { perfmon } for pid=3457 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.228000 audit[3457]: AVC avc: denied { bpf } for pid=3457 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.228000 audit[3457]: AVC avc: denied { perfmon } for pid=3457 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.228000 audit[3457]: AVC avc: denied { perfmon } for pid=3457 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.228000 audit[3457]: AVC avc: denied { perfmon } for pid=3457 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.228000 audit[3457]: AVC avc: denied { perfmon } for pid=3457 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.228000 audit[3457]: AVC avc: denied { perfmon } for pid=3457 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.228000 audit[3457]: AVC avc: denied { bpf } for pid=3457 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.228000 audit[3457]: AVC avc: denied { confidentiality } for pid=3457 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 10 00:37:18.228000 audit[3457]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7ffc31c8ae70 a2=94 a3=88 items=0 ppid=3348 pid=3457 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:18.228000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 00:37:18.235000 audit[3460]: AVC avc: denied { bpf } for pid=3460 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.235000 audit[3460]: AVC avc: denied { bpf } for pid=3460 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.235000 audit[3460]: AVC avc: denied { perfmon } for pid=3460 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.235000 audit[3460]: AVC avc: denied { perfmon } for pid=3460 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.235000 audit[3460]: AVC avc: denied { perfmon } for pid=3460 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.235000 audit[3460]: AVC avc: denied { perfmon } for pid=3460 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.235000 audit[3460]: AVC avc: denied { perfmon } for pid=3460 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.235000 audit[3460]: AVC avc: denied { bpf } for pid=3460 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.235000 audit[3460]: AVC avc: denied { bpf } for pid=3460 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.235000 audit: BPF prog-id=151 op=LOAD Jul 10 00:37:18.235000 audit[3460]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffebfa4cbe0 a2=98 a3=1999999999999999 items=0 ppid=3348 pid=3460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:18.235000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Jul 10 00:37:18.235000 audit: BPF prog-id=151 op=UNLOAD Jul 10 00:37:18.235000 audit[3460]: AVC avc: denied { bpf } for pid=3460 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.235000 audit[3460]: AVC avc: denied { bpf } for pid=3460 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.235000 audit[3460]: AVC avc: denied { perfmon } for pid=3460 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.235000 audit[3460]: AVC avc: denied { perfmon } for pid=3460 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.235000 audit[3460]: AVC avc: denied { perfmon } for pid=3460 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.235000 audit[3460]: AVC avc: denied { perfmon } for pid=3460 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.235000 audit[3460]: AVC avc: denied { perfmon } for pid=3460 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.235000 audit[3460]: AVC avc: denied { bpf } for pid=3460 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.235000 audit[3460]: AVC avc: denied { bpf } for pid=3460 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.235000 audit: BPF prog-id=152 op=LOAD Jul 10 00:37:18.235000 audit[3460]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffebfa4cac0 a2=94 a3=ffff items=0 ppid=3348 pid=3460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:18.235000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Jul 10 00:37:18.236000 audit: BPF prog-id=152 op=UNLOAD Jul 10 00:37:18.236000 audit[3460]: AVC avc: denied { bpf } for pid=3460 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.236000 audit[3460]: AVC avc: denied { bpf } for pid=3460 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.236000 audit[3460]: AVC avc: denied { perfmon } for pid=3460 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.236000 audit[3460]: AVC avc: denied { perfmon } for pid=3460 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.236000 audit[3460]: AVC avc: denied { perfmon } for pid=3460 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.236000 audit[3460]: AVC avc: denied { perfmon } for pid=3460 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.236000 audit[3460]: AVC avc: denied { perfmon } for pid=3460 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.236000 audit[3460]: AVC avc: denied { bpf } for pid=3460 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.236000 audit[3460]: AVC avc: denied { bpf } for pid=3460 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.236000 audit: BPF prog-id=153 op=LOAD Jul 10 00:37:18.236000 audit[3460]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffebfa4cb00 a2=94 a3=7ffebfa4cce0 items=0 ppid=3348 pid=3460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:18.236000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Jul 10 00:37:18.236000 audit: BPF prog-id=153 op=UNLOAD Jul 10 00:37:18.290956 systemd-networkd[1023]: vxlan.calico: Link UP Jul 10 00:37:18.290963 systemd-networkd[1023]: vxlan.calico: Gained carrier Jul 10 00:37:18.306000 audit[3484]: AVC avc: denied { bpf } for pid=3484 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.306000 audit[3484]: AVC avc: denied { bpf } for pid=3484 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.306000 audit[3484]: AVC avc: denied { perfmon } for pid=3484 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.306000 audit[3484]: AVC avc: denied { perfmon } for pid=3484 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.306000 audit[3484]: AVC avc: denied { perfmon } for pid=3484 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.306000 audit[3484]: AVC avc: denied { perfmon } for pid=3484 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.306000 audit[3484]: AVC avc: denied { perfmon } for pid=3484 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.306000 audit[3484]: AVC avc: denied { bpf } for pid=3484 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.306000 audit[3484]: AVC avc: denied { bpf } for pid=3484 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.306000 audit: BPF prog-id=154 op=LOAD Jul 10 00:37:18.306000 audit[3484]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7fff8c22fe10 a2=98 a3=0 items=0 ppid=3348 pid=3484 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:18.306000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 10 00:37:18.307000 audit: BPF prog-id=154 op=UNLOAD Jul 10 00:37:18.307000 audit[3484]: AVC avc: denied { bpf } for pid=3484 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.307000 audit[3484]: AVC avc: denied { bpf } for pid=3484 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.307000 audit[3484]: AVC avc: denied { perfmon } for pid=3484 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.307000 audit[3484]: AVC avc: denied { perfmon } for pid=3484 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.307000 audit[3484]: AVC avc: denied { perfmon } for pid=3484 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.307000 audit[3484]: AVC avc: denied { perfmon } for pid=3484 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.307000 audit[3484]: AVC avc: denied { perfmon } for pid=3484 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.307000 audit[3484]: AVC avc: denied { bpf } for pid=3484 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.307000 audit[3484]: AVC avc: denied { bpf } for pid=3484 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.307000 audit: BPF prog-id=155 op=LOAD Jul 10 00:37:18.307000 audit[3484]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7fff8c22fc20 a2=94 a3=54428f items=0 ppid=3348 pid=3484 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:18.307000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 10 00:37:18.307000 audit: BPF prog-id=155 op=UNLOAD Jul 10 00:37:18.307000 audit[3484]: AVC avc: denied { bpf } for pid=3484 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.307000 audit[3484]: AVC avc: denied { bpf } for pid=3484 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.307000 audit[3484]: AVC avc: denied { perfmon } for pid=3484 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.307000 audit[3484]: AVC avc: denied { perfmon } for pid=3484 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.307000 audit[3484]: AVC avc: denied { perfmon } for pid=3484 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.307000 audit[3484]: AVC avc: denied { perfmon } for pid=3484 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.307000 audit[3484]: AVC avc: denied { perfmon } for pid=3484 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.307000 audit[3484]: AVC avc: denied { bpf } for pid=3484 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.307000 audit[3484]: AVC avc: denied { bpf } for pid=3484 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.307000 audit: BPF prog-id=156 op=LOAD Jul 10 00:37:18.307000 audit[3484]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7fff8c22fc50 a2=94 a3=2 items=0 ppid=3348 pid=3484 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:18.307000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 10 00:37:18.307000 audit: BPF prog-id=156 op=UNLOAD Jul 10 00:37:18.307000 audit[3484]: AVC avc: denied { bpf } for pid=3484 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.307000 audit[3484]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7fff8c22fb20 a2=28 a3=0 items=0 ppid=3348 pid=3484 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:18.307000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 10 00:37:18.307000 audit[3484]: AVC avc: denied { bpf } for pid=3484 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.307000 audit[3484]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7fff8c22fb50 a2=28 a3=0 items=0 ppid=3348 pid=3484 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:18.307000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 10 00:37:18.307000 audit[3484]: AVC avc: denied { bpf } for pid=3484 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.307000 audit[3484]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7fff8c22fa60 a2=28 a3=0 items=0 ppid=3348 pid=3484 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:18.307000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 10 00:37:18.307000 audit[3484]: AVC avc: denied { bpf } for pid=3484 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.307000 audit[3484]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7fff8c22fb70 a2=28 a3=0 items=0 ppid=3348 pid=3484 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:18.307000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 10 00:37:18.307000 audit[3484]: AVC avc: denied { bpf } for pid=3484 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.307000 audit[3484]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7fff8c22fb50 a2=28 a3=0 items=0 ppid=3348 pid=3484 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:18.307000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 10 00:37:18.307000 audit[3484]: AVC avc: denied { bpf } for pid=3484 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.307000 audit[3484]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7fff8c22fb40 a2=28 a3=0 items=0 ppid=3348 pid=3484 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:18.307000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 10 00:37:18.307000 audit[3484]: AVC avc: denied { bpf } for pid=3484 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.307000 audit[3484]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7fff8c22fb70 a2=28 a3=0 items=0 ppid=3348 pid=3484 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:18.307000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 10 00:37:18.307000 audit[3484]: AVC avc: denied { bpf } for pid=3484 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.307000 audit[3484]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7fff8c22fb50 a2=28 a3=0 items=0 ppid=3348 pid=3484 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:18.307000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 10 00:37:18.307000 audit[3484]: AVC avc: denied { bpf } for pid=3484 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.307000 audit[3484]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7fff8c22fb70 a2=28 a3=0 items=0 ppid=3348 pid=3484 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:18.307000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 10 00:37:18.307000 audit[3484]: AVC avc: denied { bpf } for pid=3484 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.307000 audit[3484]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7fff8c22fb40 a2=28 a3=0 items=0 ppid=3348 pid=3484 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:18.307000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 10 00:37:18.307000 audit[3484]: AVC avc: denied { bpf } for pid=3484 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.307000 audit[3484]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7fff8c22fbb0 a2=28 a3=0 items=0 ppid=3348 pid=3484 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:18.307000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 10 00:37:18.307000 audit[3484]: AVC avc: denied { bpf } for pid=3484 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.307000 audit[3484]: AVC avc: denied { bpf } for pid=3484 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.307000 audit[3484]: AVC avc: denied { perfmon } for pid=3484 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.307000 audit[3484]: AVC avc: denied { perfmon } for pid=3484 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.307000 audit[3484]: AVC avc: denied { perfmon } for pid=3484 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.307000 audit[3484]: AVC avc: denied { perfmon } for pid=3484 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.307000 audit[3484]: AVC avc: denied { perfmon } for pid=3484 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.307000 audit[3484]: AVC avc: denied { bpf } for pid=3484 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.307000 audit[3484]: AVC avc: denied { bpf } for pid=3484 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.307000 audit[3484]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7fff8c22fa20 a2=94 a3=0 items=0 ppid=3348 pid=3484 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:18.307000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 10 00:37:18.309000 audit: BPF prog-id=157 op=UNLOAD Jul 10 00:37:18.310000 audit[3484]: AVC avc: denied { bpf } for pid=3484 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.310000 audit[3484]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=0 a1=7fff8c22fa10 a2=50 a3=2800 items=0 ppid=3348 pid=3484 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:18.310000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 10 00:37:18.310000 audit[3484]: AVC avc: denied { bpf } for pid=3484 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.310000 audit[3484]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=0 a1=7fff8c22fa10 a2=50 a3=2800 items=0 ppid=3348 pid=3484 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:18.310000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 10 00:37:18.310000 audit[3484]: AVC avc: denied { bpf } for pid=3484 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.310000 audit[3484]: AVC avc: denied { bpf } for pid=3484 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.310000 audit[3484]: AVC avc: denied { bpf } for pid=3484 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.310000 audit[3484]: AVC avc: denied { perfmon } for pid=3484 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.310000 audit[3484]: AVC avc: denied { perfmon } for pid=3484 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.310000 audit[3484]: AVC avc: denied { perfmon } for pid=3484 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.310000 audit[3484]: AVC avc: denied { perfmon } for pid=3484 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.310000 audit[3484]: AVC avc: denied { perfmon } for pid=3484 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.310000 audit[3484]: AVC avc: denied { bpf } for pid=3484 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.310000 audit[3484]: AVC avc: denied { bpf } for pid=3484 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.310000 audit: BPF prog-id=158 op=LOAD Jul 10 00:37:18.310000 audit[3484]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7fff8c22f230 a2=94 a3=2 items=0 ppid=3348 pid=3484 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:18.310000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 10 00:37:18.310000 audit: BPF prog-id=158 op=UNLOAD Jul 10 00:37:18.310000 audit[3484]: AVC avc: denied { bpf } for pid=3484 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.310000 audit[3484]: AVC avc: denied { bpf } for pid=3484 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.310000 audit[3484]: AVC avc: denied { bpf } for pid=3484 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.310000 audit[3484]: AVC avc: denied { perfmon } for pid=3484 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.310000 audit[3484]: AVC avc: denied { perfmon } for pid=3484 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.310000 audit[3484]: AVC avc: denied { perfmon } for pid=3484 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.310000 audit[3484]: AVC avc: denied { perfmon } for pid=3484 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.310000 audit[3484]: AVC avc: denied { perfmon } for pid=3484 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.310000 audit[3484]: AVC avc: denied { bpf } for pid=3484 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.310000 audit[3484]: AVC avc: denied { bpf } for pid=3484 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.310000 audit: BPF prog-id=159 op=LOAD Jul 10 00:37:18.310000 audit[3484]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7fff8c22f330 a2=94 a3=30 items=0 ppid=3348 pid=3484 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:18.310000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 10 00:37:18.313000 audit[3488]: AVC avc: denied { bpf } for pid=3488 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.313000 audit[3488]: AVC avc: denied { bpf } for pid=3488 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.313000 audit[3488]: AVC avc: denied { perfmon } for pid=3488 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.313000 audit[3488]: AVC avc: denied { perfmon } for pid=3488 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.313000 audit[3488]: AVC avc: denied { perfmon } for pid=3488 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.313000 audit[3488]: AVC avc: denied { perfmon } for pid=3488 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.313000 audit[3488]: AVC avc: denied { perfmon } for pid=3488 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.313000 audit[3488]: AVC avc: denied { bpf } for pid=3488 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.313000 audit[3488]: AVC avc: denied { bpf } for pid=3488 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.313000 audit: BPF prog-id=160 op=LOAD Jul 10 00:37:18.313000 audit[3488]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffeb818eae0 a2=98 a3=0 items=0 ppid=3348 pid=3488 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:18.313000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:37:18.313000 audit: BPF prog-id=160 op=UNLOAD Jul 10 00:37:18.314000 audit[3488]: AVC avc: denied { bpf } for pid=3488 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.314000 audit[3488]: AVC avc: denied { bpf } for pid=3488 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.314000 audit[3488]: AVC avc: denied { perfmon } for pid=3488 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.314000 audit[3488]: AVC avc: denied { perfmon } for pid=3488 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.314000 audit[3488]: AVC avc: denied { perfmon } for pid=3488 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.314000 audit[3488]: AVC avc: denied { perfmon } for pid=3488 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.314000 audit[3488]: AVC avc: denied { perfmon } for pid=3488 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.314000 audit[3488]: AVC avc: denied { bpf } for pid=3488 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.314000 audit[3488]: AVC avc: denied { bpf } for pid=3488 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.314000 audit: BPF prog-id=161 op=LOAD Jul 10 00:37:18.314000 audit[3488]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffeb818e8d0 a2=94 a3=54428f items=0 ppid=3348 pid=3488 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:18.314000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:37:18.314000 audit: BPF prog-id=161 op=UNLOAD Jul 10 00:37:18.314000 audit[3488]: AVC avc: denied { bpf } for pid=3488 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.314000 audit[3488]: AVC avc: denied { bpf } for pid=3488 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.314000 audit[3488]: AVC avc: denied { perfmon } for pid=3488 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.314000 audit[3488]: AVC avc: denied { perfmon } for pid=3488 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.314000 audit[3488]: AVC avc: denied { perfmon } for pid=3488 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.314000 audit[3488]: AVC avc: denied { perfmon } for pid=3488 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.314000 audit[3488]: AVC avc: denied { perfmon } for pid=3488 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.314000 audit[3488]: AVC avc: denied { bpf } for pid=3488 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.314000 audit[3488]: AVC avc: denied { bpf } for pid=3488 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.314000 audit: BPF prog-id=162 op=LOAD Jul 10 00:37:18.314000 audit[3488]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffeb818e900 a2=94 a3=2 items=0 ppid=3348 pid=3488 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:18.314000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:37:18.314000 audit: BPF prog-id=162 op=UNLOAD Jul 10 00:37:18.420000 audit[3488]: AVC avc: denied { bpf } for pid=3488 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.420000 audit[3488]: AVC avc: denied { bpf } for pid=3488 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.420000 audit[3488]: AVC avc: denied { perfmon } for pid=3488 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.420000 audit[3488]: AVC avc: denied { perfmon } for pid=3488 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.420000 audit[3488]: AVC avc: denied { perfmon } for pid=3488 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.420000 audit[3488]: AVC avc: denied { perfmon } for pid=3488 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.420000 audit[3488]: AVC avc: denied { perfmon } for pid=3488 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.420000 audit[3488]: AVC avc: denied { bpf } for pid=3488 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.420000 audit[3488]: AVC avc: denied { bpf } for pid=3488 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.420000 audit: BPF prog-id=163 op=LOAD Jul 10 00:37:18.420000 audit[3488]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffeb818e7c0 a2=94 a3=1 items=0 ppid=3348 pid=3488 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:18.420000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:37:18.421000 audit: BPF prog-id=163 op=UNLOAD Jul 10 00:37:18.421000 audit[3488]: AVC avc: denied { perfmon } for pid=3488 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.421000 audit[3488]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=0 a1=7ffeb818e890 a2=50 a3=7ffeb818e970 items=0 ppid=3348 pid=3488 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:18.421000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:37:18.428000 audit[3488]: AVC avc: denied { bpf } for pid=3488 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.428000 audit[3488]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffeb818e7d0 a2=28 a3=0 items=0 ppid=3348 pid=3488 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:18.428000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:37:18.428000 audit[3488]: AVC avc: denied { bpf } for pid=3488 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.428000 audit[3488]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffeb818e800 a2=28 a3=0 items=0 ppid=3348 pid=3488 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:18.428000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:37:18.428000 audit[3488]: AVC avc: denied { bpf } for pid=3488 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.428000 audit[3488]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffeb818e710 a2=28 a3=0 items=0 ppid=3348 pid=3488 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:18.428000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:37:18.428000 audit[3488]: AVC avc: denied { bpf } for pid=3488 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.428000 audit[3488]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffeb818e820 a2=28 a3=0 items=0 ppid=3348 pid=3488 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:18.428000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:37:18.428000 audit[3488]: AVC avc: denied { bpf } for pid=3488 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.428000 audit[3488]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffeb818e800 a2=28 a3=0 items=0 ppid=3348 pid=3488 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:18.428000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:37:18.428000 audit[3488]: AVC avc: denied { bpf } for pid=3488 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.428000 audit[3488]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffeb818e7f0 a2=28 a3=0 items=0 ppid=3348 pid=3488 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:18.428000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:37:18.428000 audit[3488]: AVC avc: denied { bpf } for pid=3488 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.428000 audit[3488]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffeb818e820 a2=28 a3=0 items=0 ppid=3348 pid=3488 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:18.428000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:37:18.429000 audit[3488]: AVC avc: denied { bpf } for pid=3488 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.429000 audit[3488]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffeb818e800 a2=28 a3=0 items=0 ppid=3348 pid=3488 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:18.429000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:37:18.429000 audit[3488]: AVC avc: denied { bpf } for pid=3488 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.429000 audit[3488]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffeb818e820 a2=28 a3=0 items=0 ppid=3348 pid=3488 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:18.429000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:37:18.429000 audit[3488]: AVC avc: denied { bpf } for pid=3488 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.429000 audit[3488]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffeb818e7f0 a2=28 a3=0 items=0 ppid=3348 pid=3488 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:18.429000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:37:18.429000 audit[3488]: AVC avc: denied { bpf } for pid=3488 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.429000 audit[3488]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffeb818e860 a2=28 a3=0 items=0 ppid=3348 pid=3488 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:18.429000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:37:18.429000 audit[3488]: AVC avc: denied { perfmon } for pid=3488 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.429000 audit[3488]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=0 a1=7ffeb818e610 a2=50 a3=1 items=0 ppid=3348 pid=3488 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:18.429000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:37:18.429000 audit[3488]: AVC avc: denied { bpf } for pid=3488 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.429000 audit[3488]: AVC avc: denied { bpf } for pid=3488 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.429000 audit[3488]: AVC avc: denied { perfmon } for pid=3488 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.429000 audit[3488]: AVC avc: denied { perfmon } for pid=3488 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.429000 audit[3488]: AVC avc: denied { perfmon } for pid=3488 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.429000 audit[3488]: AVC avc: denied { perfmon } for pid=3488 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.429000 audit[3488]: AVC avc: denied { perfmon } for pid=3488 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.429000 audit[3488]: AVC avc: denied { bpf } for pid=3488 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.429000 audit[3488]: AVC avc: denied { bpf } for pid=3488 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.429000 audit: BPF prog-id=164 op=LOAD Jul 10 00:37:18.429000 audit[3488]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7ffeb818e610 a2=94 a3=5 items=0 ppid=3348 pid=3488 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:18.429000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:37:18.429000 audit: BPF prog-id=164 op=UNLOAD Jul 10 00:37:18.429000 audit[3488]: AVC avc: denied { perfmon } for pid=3488 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.429000 audit[3488]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=0 a1=7ffeb818e6c0 a2=50 a3=1 items=0 ppid=3348 pid=3488 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:18.429000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:37:18.429000 audit[3488]: AVC avc: denied { bpf } for pid=3488 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.429000 audit[3488]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=16 a1=7ffeb818e7e0 a2=4 a3=38 items=0 ppid=3348 pid=3488 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:18.429000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:37:18.429000 audit[3488]: AVC avc: denied { bpf } for pid=3488 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.429000 audit[3488]: AVC avc: denied { bpf } for pid=3488 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.429000 audit[3488]: AVC avc: denied { perfmon } for pid=3488 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.429000 audit[3488]: AVC avc: denied { bpf } for pid=3488 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.429000 audit[3488]: AVC avc: denied { perfmon } for pid=3488 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.429000 audit[3488]: AVC avc: denied { perfmon } for pid=3488 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.429000 audit[3488]: AVC avc: denied { perfmon } for pid=3488 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.429000 audit[3488]: AVC avc: denied { perfmon } for pid=3488 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.429000 audit[3488]: AVC avc: denied { perfmon } for pid=3488 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.429000 audit[3488]: AVC avc: denied { bpf } for pid=3488 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.429000 audit[3488]: AVC avc: denied { confidentiality } for pid=3488 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 10 00:37:18.429000 audit[3488]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7ffeb818e830 a2=94 a3=6 items=0 ppid=3348 pid=3488 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:18.429000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:37:18.429000 audit[3488]: AVC avc: denied { bpf } for pid=3488 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.429000 audit[3488]: AVC avc: denied { bpf } for pid=3488 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.429000 audit[3488]: AVC avc: denied { perfmon } for pid=3488 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.429000 audit[3488]: AVC avc: denied { bpf } for pid=3488 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.429000 audit[3488]: AVC avc: denied { perfmon } for pid=3488 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.429000 audit[3488]: AVC avc: denied { perfmon } for pid=3488 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.429000 audit[3488]: AVC avc: denied { perfmon } for pid=3488 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.429000 audit[3488]: AVC avc: denied { perfmon } for pid=3488 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.429000 audit[3488]: AVC avc: denied { perfmon } for pid=3488 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.429000 audit[3488]: AVC avc: denied { bpf } for pid=3488 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.429000 audit[3488]: AVC avc: denied { confidentiality } for pid=3488 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 10 00:37:18.429000 audit[3488]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7ffeb818dfe0 a2=94 a3=88 items=0 ppid=3348 pid=3488 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:18.429000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:37:18.429000 audit[3488]: AVC avc: denied { bpf } for pid=3488 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.429000 audit[3488]: AVC avc: denied { bpf } for pid=3488 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.429000 audit[3488]: AVC avc: denied { perfmon } for pid=3488 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.429000 audit[3488]: AVC avc: denied { bpf } for pid=3488 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.429000 audit[3488]: AVC avc: denied { perfmon } for pid=3488 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.429000 audit[3488]: AVC avc: denied { perfmon } for pid=3488 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.429000 audit[3488]: AVC avc: denied { perfmon } for pid=3488 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.429000 audit[3488]: AVC avc: denied { perfmon } for pid=3488 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.429000 audit[3488]: AVC avc: denied { perfmon } for pid=3488 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.429000 audit[3488]: AVC avc: denied { bpf } for pid=3488 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.429000 audit[3488]: AVC avc: denied { confidentiality } for pid=3488 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 10 00:37:18.429000 audit[3488]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7ffeb818dfe0 a2=94 a3=88 items=0 ppid=3348 pid=3488 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:18.429000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:37:18.430000 audit[3488]: AVC avc: denied { bpf } for pid=3488 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.430000 audit[3488]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7ffeb818fa10 a2=10 a3=208 items=0 ppid=3348 pid=3488 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:18.430000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:37:18.430000 audit[3488]: AVC avc: denied { bpf } for pid=3488 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.430000 audit[3488]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7ffeb818f8b0 a2=10 a3=3 items=0 ppid=3348 pid=3488 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:18.430000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:37:18.430000 audit[3488]: AVC avc: denied { bpf } for pid=3488 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.430000 audit[3488]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7ffeb818f850 a2=10 a3=3 items=0 ppid=3348 pid=3488 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:18.430000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:37:18.430000 audit[3488]: AVC avc: denied { bpf } for pid=3488 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:18.430000 audit[3488]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7ffeb818f850 a2=10 a3=7 items=0 ppid=3348 pid=3488 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:18.430000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:37:18.436000 audit: BPF prog-id=159 op=UNLOAD Jul 10 00:37:18.506000 audit[3519]: NETFILTER_CFG table=mangle:99 family=2 entries=16 op=nft_register_chain pid=3519 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 10 00:37:18.506000 audit[3519]: SYSCALL arch=c000003e syscall=46 success=yes exit=6868 a0=3 a1=7fff8008ba40 a2=0 a3=7fff8008ba2c items=0 ppid=3348 pid=3519 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:18.506000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 10 00:37:18.510000 audit[3518]: NETFILTER_CFG table=nat:100 family=2 entries=15 op=nft_register_chain pid=3518 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 10 00:37:18.510000 audit[3518]: SYSCALL arch=c000003e syscall=46 success=yes exit=5084 a0=3 a1=7ffeb845ce30 a2=0 a3=7ffeb845ce1c items=0 ppid=3348 pid=3518 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:18.510000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 10 00:37:18.515000 audit[3517]: NETFILTER_CFG table=raw:101 family=2 entries=21 op=nft_register_chain pid=3517 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 10 00:37:18.515000 audit[3517]: SYSCALL arch=c000003e syscall=46 success=yes exit=8452 a0=3 a1=7ffc0df103c0 a2=0 a3=7ffc0df103ac items=0 ppid=3348 pid=3517 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:18.515000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 10 00:37:18.522000 audit[3523]: NETFILTER_CFG table=filter:102 family=2 entries=94 op=nft_register_chain pid=3523 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 10 00:37:18.522000 audit[3523]: SYSCALL arch=c000003e syscall=46 success=yes exit=53116 a0=3 a1=7fffdcba1c20 a2=0 a3=7fffdcba1c0c items=0 ppid=3348 pid=3523 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:18.522000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 10 00:37:18.890419 kubelet[1947]: I0710 00:37:18.890316 1947 kubelet_volumes.go:163] "Cleaned up orphaned pod volumes dir" podUID="b6385538-11ca-404b-bf9e-e69e438960db" path="/var/lib/kubelet/pods/b6385538-11ca-404b-bf9e-e69e438960db/volumes" Jul 10 00:37:19.412433 systemd[1]: Started sshd@8-10.0.0.36:22-10.0.0.1:57980.service. Jul 10 00:37:19.410000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.0.0.36:22-10.0.0.1:57980 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:37:19.414515 kernel: kauditd_printk_skb: 666 callbacks suppressed Jul 10 00:37:19.414575 kernel: audit: type=1130 audit(1752107839.410:1136): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.0.0.36:22-10.0.0.1:57980 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:37:19.458000 audit[3533]: USER_ACCT pid=3533 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:37:19.459933 sshd[3533]: Accepted publickey for core from 10.0.0.1 port 57980 ssh2: RSA SHA256:suUhWV759MqU0C+Dl6JG8TPW8PqnqlsB4qushdi9Ejw Jul 10 00:37:19.462000 audit[3533]: CRED_ACQ pid=3533 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:37:19.464825 sshd[3533]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 00:37:19.471139 kernel: audit: type=1101 audit(1752107839.458:1137): pid=3533 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:37:19.471232 kernel: audit: type=1103 audit(1752107839.462:1138): pid=3533 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:37:19.471260 kernel: audit: type=1006 audit(1752107839.462:1139): pid=3533 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=9 res=1 Jul 10 00:37:19.469485 systemd[1]: Started session-9.scope. Jul 10 00:37:19.470137 systemd-logind[1194]: New session 9 of user core. Jul 10 00:37:19.462000 audit[3533]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffff860a180 a2=3 a3=0 items=0 ppid=1 pid=3533 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:19.476003 kernel: audit: type=1300 audit(1752107839.462:1139): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffff860a180 a2=3 a3=0 items=0 ppid=1 pid=3533 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:19.476058 kernel: audit: type=1327 audit(1752107839.462:1139): proctitle=737368643A20636F7265205B707269765D Jul 10 00:37:19.462000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 10 00:37:19.473000 audit[3533]: USER_START pid=3533 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:37:19.485794 kernel: audit: type=1105 audit(1752107839.473:1140): pid=3533 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:37:19.485896 kernel: audit: type=1103 audit(1752107839.474:1141): pid=3535 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:37:19.474000 audit[3535]: CRED_ACQ pid=3535 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:37:19.497759 systemd-networkd[1023]: cali8fd98246d3d: Gained IPv6LL Jul 10 00:37:19.498044 systemd-networkd[1023]: vxlan.calico: Gained IPv6LL Jul 10 00:37:19.569135 env[1205]: time="2025-07-10T00:37:19.569081265Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:37:19.571547 env[1205]: time="2025-07-10T00:37:19.571518520Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:eb8f512acf9402730da120a7b0d47d3d9d451b56e6e5eb8bad53ab24f926f954,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:37:19.573361 env[1205]: time="2025-07-10T00:37:19.573323067Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/whisker:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:37:19.574902 env[1205]: time="2025-07-10T00:37:19.574877805Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker@sha256:31346d4524252a3b0d2a1d289c4985b8402b498b5ce82a12e682096ab7446678,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:37:19.575266 env[1205]: time="2025-07-10T00:37:19.575225778Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.2\" returns image reference \"sha256:eb8f512acf9402730da120a7b0d47d3d9d451b56e6e5eb8bad53ab24f926f954\"" Jul 10 00:37:19.577356 env[1205]: time="2025-07-10T00:37:19.577330679Z" level=info msg="CreateContainer within sandbox \"40d4ec2b7f2c3c77557beb393c82fccc4ccd4b4162535b3beb7666e27973924b\" for container &ContainerMetadata{Name:whisker,Attempt:0,}" Jul 10 00:37:19.621824 sshd[3533]: pam_unix(sshd:session): session closed for user core Jul 10 00:37:19.621000 audit[3533]: USER_END pid=3533 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:37:19.624502 systemd[1]: sshd@8-10.0.0.36:22-10.0.0.1:57980.service: Deactivated successfully. Jul 10 00:37:19.625224 systemd[1]: session-9.scope: Deactivated successfully. Jul 10 00:37:19.625785 systemd-logind[1194]: Session 9 logged out. Waiting for processes to exit. Jul 10 00:37:19.626517 systemd-logind[1194]: Removed session 9. Jul 10 00:37:19.621000 audit[3533]: CRED_DISP pid=3533 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:37:19.630588 kernel: audit: type=1106 audit(1752107839.621:1142): pid=3533 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:37:19.630646 kernel: audit: type=1104 audit(1752107839.621:1143): pid=3533 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:37:19.621000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.0.0.36:22-10.0.0.1:57980 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:37:19.637223 env[1205]: time="2025-07-10T00:37:19.637156081Z" level=info msg="CreateContainer within sandbox \"40d4ec2b7f2c3c77557beb393c82fccc4ccd4b4162535b3beb7666e27973924b\" for &ContainerMetadata{Name:whisker,Attempt:0,} returns container id \"8aedfb09bf0d395a185512b0cce8534a4d9d398016d88e704e15d86b0c212d2f\"" Jul 10 00:37:19.637882 env[1205]: time="2025-07-10T00:37:19.637837861Z" level=info msg="StartContainer for \"8aedfb09bf0d395a185512b0cce8534a4d9d398016d88e704e15d86b0c212d2f\"" Jul 10 00:37:19.657962 systemd[1]: Started cri-containerd-8aedfb09bf0d395a185512b0cce8534a4d9d398016d88e704e15d86b0c212d2f.scope. Jul 10 00:37:19.672000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:19.672000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:19.672000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:19.672000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:19.672000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:19.672000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:19.672000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:19.672000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:19.672000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:19.672000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:19.672000 audit: BPF prog-id=165 op=LOAD Jul 10 00:37:19.673000 audit[3553]: AVC avc: denied { bpf } for pid=3553 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:19.673000 audit[3553]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=3293 pid=3553 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:19.673000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3861656466623039626630643339356131383535313262306363653835 Jul 10 00:37:19.673000 audit[3553]: AVC avc: denied { perfmon } for pid=3553 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:19.673000 audit[3553]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=3293 pid=3553 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:19.673000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3861656466623039626630643339356131383535313262306363653835 Jul 10 00:37:19.673000 audit[3553]: AVC avc: denied { bpf } for pid=3553 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:19.673000 audit[3553]: AVC avc: denied { bpf } for pid=3553 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:19.673000 audit[3553]: AVC avc: denied { bpf } for pid=3553 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:19.673000 audit[3553]: AVC avc: denied { perfmon } for pid=3553 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:19.673000 audit[3553]: AVC avc: denied { perfmon } for pid=3553 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:19.673000 audit[3553]: AVC avc: denied { perfmon } for pid=3553 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:19.673000 audit[3553]: AVC avc: denied { perfmon } for pid=3553 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:19.673000 audit[3553]: AVC avc: denied { perfmon } for pid=3553 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:19.673000 audit[3553]: AVC avc: denied { bpf } for pid=3553 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:19.673000 audit[3553]: AVC avc: denied { bpf } for pid=3553 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:19.673000 audit: BPF prog-id=166 op=LOAD Jul 10 00:37:19.673000 audit[3553]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0003c8220 items=0 ppid=3293 pid=3553 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:19.673000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3861656466623039626630643339356131383535313262306363653835 Jul 10 00:37:19.673000 audit[3553]: AVC avc: denied { bpf } for pid=3553 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:19.673000 audit[3553]: AVC avc: denied { bpf } for pid=3553 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:19.673000 audit[3553]: AVC avc: denied { perfmon } for pid=3553 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:19.673000 audit[3553]: AVC avc: denied { perfmon } for pid=3553 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:19.673000 audit[3553]: AVC avc: denied { perfmon } for pid=3553 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:19.673000 audit[3553]: AVC avc: denied { perfmon } for pid=3553 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:19.673000 audit[3553]: AVC avc: denied { perfmon } for pid=3553 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:19.673000 audit[3553]: AVC avc: denied { bpf } for pid=3553 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:19.673000 audit[3553]: AVC avc: denied { bpf } for pid=3553 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:19.673000 audit: BPF prog-id=167 op=LOAD Jul 10 00:37:19.673000 audit[3553]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0003c8268 items=0 ppid=3293 pid=3553 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:19.673000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3861656466623039626630643339356131383535313262306363653835 Jul 10 00:37:19.673000 audit: BPF prog-id=167 op=UNLOAD Jul 10 00:37:19.673000 audit: BPF prog-id=166 op=UNLOAD Jul 10 00:37:19.673000 audit[3553]: AVC avc: denied { bpf } for pid=3553 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:19.673000 audit[3553]: AVC avc: denied { bpf } for pid=3553 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:19.673000 audit[3553]: AVC avc: denied { bpf } for pid=3553 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:19.673000 audit[3553]: AVC avc: denied { perfmon } for pid=3553 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:19.673000 audit[3553]: AVC avc: denied { perfmon } for pid=3553 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:19.673000 audit[3553]: AVC avc: denied { perfmon } for pid=3553 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:19.673000 audit[3553]: AVC avc: denied { perfmon } for pid=3553 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:19.673000 audit[3553]: AVC avc: denied { perfmon } for pid=3553 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:19.673000 audit[3553]: AVC avc: denied { bpf } for pid=3553 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:19.673000 audit[3553]: AVC avc: denied { bpf } for pid=3553 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:19.673000 audit: BPF prog-id=168 op=LOAD Jul 10 00:37:19.673000 audit[3553]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0003c8678 items=0 ppid=3293 pid=3553 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:19.673000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3861656466623039626630643339356131383535313262306363653835 Jul 10 00:37:19.709745 env[1205]: time="2025-07-10T00:37:19.709648161Z" level=info msg="StartContainer for \"8aedfb09bf0d395a185512b0cce8534a4d9d398016d88e704e15d86b0c212d2f\" returns successfully" Jul 10 00:37:19.711032 env[1205]: time="2025-07-10T00:37:19.710973598Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.2\"" Jul 10 00:37:19.715000 audit[3565]: AVC avc: denied { search } for pid=3565 comm="nginx" name="crypto" dev="proc" ino=25562 scontext=system_u:system_r:svirt_lxc_net_t:s0:c239,c300 tcontext=system_u:object_r:sysctl_crypto_t:s0 tclass=dir permissive=0 Jul 10 00:37:19.715000 audit[3565]: SYSCALL arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7f0a338bf728 a2=0 a3=0 items=0 ppid=3293 pid=3565 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="nginx" exe="/usr/sbin/nginx" subj=system_u:system_r:svirt_lxc_net_t:s0:c239,c300 key=(null) Jul 10 00:37:19.715000 audit: PROCTITLE proctitle=2F7573722F7362696E2F6E67696E78002D67006461656D6F6E206F66663B Jul 10 00:37:20.592286 systemd[1]: run-containerd-runc-k8s.io-8aedfb09bf0d395a185512b0cce8534a4d9d398016d88e704e15d86b0c212d2f-runc.4RMUX8.mount: Deactivated successfully. Jul 10 00:37:21.841263 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1524168169.mount: Deactivated successfully. Jul 10 00:37:21.857113 env[1205]: time="2025-07-10T00:37:21.857073149Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker-backend:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:37:21.858906 env[1205]: time="2025-07-10T00:37:21.858863339Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:6ba7e39edcd8be6d32dfccbfdb65533a727b14a19173515e91607d4259f8ee7f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:37:21.860345 env[1205]: time="2025-07-10T00:37:21.860325333Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/whisker-backend:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:37:21.861769 env[1205]: time="2025-07-10T00:37:21.861748865Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker-backend@sha256:fbf7f21f5aba95930803ad7e7dea8b083220854eae72c2a7c51681c09c5614b5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:37:21.862181 env[1205]: time="2025-07-10T00:37:21.862158103Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.2\" returns image reference \"sha256:6ba7e39edcd8be6d32dfccbfdb65533a727b14a19173515e91607d4259f8ee7f\"" Jul 10 00:37:21.864025 env[1205]: time="2025-07-10T00:37:21.863982507Z" level=info msg="CreateContainer within sandbox \"40d4ec2b7f2c3c77557beb393c82fccc4ccd4b4162535b3beb7666e27973924b\" for container &ContainerMetadata{Name:whisker-backend,Attempt:0,}" Jul 10 00:37:21.875386 env[1205]: time="2025-07-10T00:37:21.875336167Z" level=info msg="CreateContainer within sandbox \"40d4ec2b7f2c3c77557beb393c82fccc4ccd4b4162535b3beb7666e27973924b\" for &ContainerMetadata{Name:whisker-backend,Attempt:0,} returns container id \"896c70c47806bbf561a58d9ce1caf2e7d09afef60ed2f3f6b9ead5de0b872fcb\"" Jul 10 00:37:21.875822 env[1205]: time="2025-07-10T00:37:21.875798666Z" level=info msg="StartContainer for \"896c70c47806bbf561a58d9ce1caf2e7d09afef60ed2f3f6b9ead5de0b872fcb\"" Jul 10 00:37:21.890131 env[1205]: time="2025-07-10T00:37:21.890086283Z" level=info msg="StopPodSandbox for \"7de3064a535962f3719ed9b06c3286809c692aa164314996492f8bad1009aff5\"" Jul 10 00:37:21.890282 env[1205]: time="2025-07-10T00:37:21.890206288Z" level=info msg="StopPodSandbox for \"423e3d3c7782d0d5416d42fc8235d5c6141a7b366a18ec11e8f12a0e7ba8082c\"" Jul 10 00:37:21.890479 env[1205]: time="2025-07-10T00:37:21.890087675Z" level=info msg="StopPodSandbox for \"29dbdbc36f7112620340299d9724c9353cc804cb5e64eb7f4c38cb3cb82c8b78\"" Jul 10 00:37:21.890850 env[1205]: time="2025-07-10T00:37:21.890094037Z" level=info msg="StopPodSandbox for \"1a137de9d036b4eecbaadec3635f738c0153ae639090811abef60bdc1c0bcbde\"" Jul 10 00:37:21.892564 systemd[1]: Started cri-containerd-896c70c47806bbf561a58d9ce1caf2e7d09afef60ed2f3f6b9ead5de0b872fcb.scope. Jul 10 00:37:21.907000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:21.907000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:21.907000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:21.907000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:21.907000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:21.907000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:21.907000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:21.907000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:21.907000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:21.907000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:21.907000 audit: BPF prog-id=169 op=LOAD Jul 10 00:37:21.908000 audit[3593]: AVC avc: denied { bpf } for pid=3593 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:21.908000 audit[3593]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00011fc48 a2=10 a3=1c items=0 ppid=3293 pid=3593 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:21.908000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3839366337306334373830366262663536316135386439636531636166 Jul 10 00:37:21.908000 audit[3593]: AVC avc: denied { perfmon } for pid=3593 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:21.908000 audit[3593]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00011f6b0 a2=3c a3=8 items=0 ppid=3293 pid=3593 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:21.908000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3839366337306334373830366262663536316135386439636531636166 Jul 10 00:37:21.908000 audit[3593]: AVC avc: denied { bpf } for pid=3593 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:21.908000 audit[3593]: AVC avc: denied { bpf } for pid=3593 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:21.908000 audit[3593]: AVC avc: denied { bpf } for pid=3593 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:21.908000 audit[3593]: AVC avc: denied { perfmon } for pid=3593 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:21.908000 audit[3593]: AVC avc: denied { perfmon } for pid=3593 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:21.908000 audit[3593]: AVC avc: denied { perfmon } for pid=3593 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:21.908000 audit[3593]: AVC avc: denied { perfmon } for pid=3593 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:21.908000 audit[3593]: AVC avc: denied { perfmon } for pid=3593 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:21.908000 audit[3593]: AVC avc: denied { bpf } for pid=3593 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:21.908000 audit[3593]: AVC avc: denied { bpf } for pid=3593 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:21.908000 audit: BPF prog-id=170 op=LOAD Jul 10 00:37:21.908000 audit[3593]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00011f9d8 a2=78 a3=c000286830 items=0 ppid=3293 pid=3593 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:21.908000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3839366337306334373830366262663536316135386439636531636166 Jul 10 00:37:21.908000 audit[3593]: AVC avc: denied { bpf } for pid=3593 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:21.908000 audit[3593]: AVC avc: denied { bpf } for pid=3593 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:21.908000 audit[3593]: AVC avc: denied { perfmon } for pid=3593 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:21.908000 audit[3593]: AVC avc: denied { perfmon } for pid=3593 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:21.908000 audit[3593]: AVC avc: denied { perfmon } for pid=3593 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:21.908000 audit[3593]: AVC avc: denied { perfmon } for pid=3593 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:21.908000 audit[3593]: AVC avc: denied { perfmon } for pid=3593 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:21.908000 audit[3593]: AVC avc: denied { bpf } for pid=3593 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:21.908000 audit[3593]: AVC avc: denied { bpf } for pid=3593 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:21.908000 audit: BPF prog-id=171 op=LOAD Jul 10 00:37:21.908000 audit[3593]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00011f770 a2=78 a3=c000286878 items=0 ppid=3293 pid=3593 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:21.908000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3839366337306334373830366262663536316135386439636531636166 Jul 10 00:37:21.908000 audit: BPF prog-id=171 op=UNLOAD Jul 10 00:37:21.908000 audit: BPF prog-id=170 op=UNLOAD Jul 10 00:37:21.908000 audit[3593]: AVC avc: denied { bpf } for pid=3593 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:21.908000 audit[3593]: AVC avc: denied { bpf } for pid=3593 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:21.908000 audit[3593]: AVC avc: denied { bpf } for pid=3593 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:21.908000 audit[3593]: AVC avc: denied { perfmon } for pid=3593 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:21.908000 audit[3593]: AVC avc: denied { perfmon } for pid=3593 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:21.908000 audit[3593]: AVC avc: denied { perfmon } for pid=3593 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:21.908000 audit[3593]: AVC avc: denied { perfmon } for pid=3593 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:21.908000 audit[3593]: AVC avc: denied { perfmon } for pid=3593 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:21.908000 audit[3593]: AVC avc: denied { bpf } for pid=3593 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:21.908000 audit[3593]: AVC avc: denied { bpf } for pid=3593 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:21.908000 audit: BPF prog-id=172 op=LOAD Jul 10 00:37:21.908000 audit[3593]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00011fc30 a2=78 a3=c000286c88 items=0 ppid=3293 pid=3593 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:21.908000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3839366337306334373830366262663536316135386439636531636166 Jul 10 00:37:22.080056 env[1205]: time="2025-07-10T00:37:22.079982488Z" level=info msg="StartContainer for \"896c70c47806bbf561a58d9ce1caf2e7d09afef60ed2f3f6b9ead5de0b872fcb\" returns successfully" Jul 10 00:37:22.156886 kubelet[1947]: I0710 00:37:22.155516 1947 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/whisker-6665466778-b6ngb" podStartSLOduration=0.843270587 podStartE2EDuration="5.155488688s" podCreationTimestamp="2025-07-10 00:37:17 +0000 UTC" firstStartedPulling="2025-07-10 00:37:17.550576286 +0000 UTC m=+42.973001294" lastFinishedPulling="2025-07-10 00:37:21.862794387 +0000 UTC m=+47.285219395" observedRunningTime="2025-07-10 00:37:22.153284461 +0000 UTC m=+47.575709489" watchObservedRunningTime="2025-07-10 00:37:22.155488688 +0000 UTC m=+47.577913696" Jul 10 00:37:22.183000 audit[3728]: NETFILTER_CFG table=filter:103 family=2 entries=19 op=nft_register_rule pid=3728 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:37:22.183000 audit[3728]: SYSCALL arch=c000003e syscall=46 success=yes exit=6736 a0=3 a1=7ffe04dd2e40 a2=0 a3=7ffe04dd2e2c items=0 ppid=2093 pid=3728 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:22.183000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:37:22.190000 audit[3728]: NETFILTER_CFG table=nat:104 family=2 entries=21 op=nft_register_chain pid=3728 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:37:22.190000 audit[3728]: SYSCALL arch=c000003e syscall=46 success=yes exit=7044 a0=3 a1=7ffe04dd2e40 a2=0 a3=7ffe04dd2e2c items=0 ppid=2093 pid=3728 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:22.190000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:37:22.199988 env[1205]: 2025-07-10 00:37:22.137 [INFO][3651] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="7de3064a535962f3719ed9b06c3286809c692aa164314996492f8bad1009aff5" Jul 10 00:37:22.199988 env[1205]: 2025-07-10 00:37:22.137 [INFO][3651] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="7de3064a535962f3719ed9b06c3286809c692aa164314996492f8bad1009aff5" iface="eth0" netns="/var/run/netns/cni-368722e4-13bc-b527-b25a-2f81906c94ab" Jul 10 00:37:22.199988 env[1205]: 2025-07-10 00:37:22.138 [INFO][3651] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="7de3064a535962f3719ed9b06c3286809c692aa164314996492f8bad1009aff5" iface="eth0" netns="/var/run/netns/cni-368722e4-13bc-b527-b25a-2f81906c94ab" Jul 10 00:37:22.199988 env[1205]: 2025-07-10 00:37:22.138 [INFO][3651] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="7de3064a535962f3719ed9b06c3286809c692aa164314996492f8bad1009aff5" iface="eth0" netns="/var/run/netns/cni-368722e4-13bc-b527-b25a-2f81906c94ab" Jul 10 00:37:22.199988 env[1205]: 2025-07-10 00:37:22.138 [INFO][3651] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="7de3064a535962f3719ed9b06c3286809c692aa164314996492f8bad1009aff5" Jul 10 00:37:22.199988 env[1205]: 2025-07-10 00:37:22.138 [INFO][3651] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="7de3064a535962f3719ed9b06c3286809c692aa164314996492f8bad1009aff5" Jul 10 00:37:22.199988 env[1205]: 2025-07-10 00:37:22.187 [INFO][3700] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="7de3064a535962f3719ed9b06c3286809c692aa164314996492f8bad1009aff5" HandleID="k8s-pod-network.7de3064a535962f3719ed9b06c3286809c692aa164314996492f8bad1009aff5" Workload="localhost-k8s-calico--kube--controllers--89f4c7b56--xqnjf-eth0" Jul 10 00:37:22.199988 env[1205]: 2025-07-10 00:37:22.187 [INFO][3700] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:37:22.199988 env[1205]: 2025-07-10 00:37:22.187 [INFO][3700] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:37:22.199988 env[1205]: 2025-07-10 00:37:22.195 [WARNING][3700] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="7de3064a535962f3719ed9b06c3286809c692aa164314996492f8bad1009aff5" HandleID="k8s-pod-network.7de3064a535962f3719ed9b06c3286809c692aa164314996492f8bad1009aff5" Workload="localhost-k8s-calico--kube--controllers--89f4c7b56--xqnjf-eth0" Jul 10 00:37:22.199988 env[1205]: 2025-07-10 00:37:22.195 [INFO][3700] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="7de3064a535962f3719ed9b06c3286809c692aa164314996492f8bad1009aff5" HandleID="k8s-pod-network.7de3064a535962f3719ed9b06c3286809c692aa164314996492f8bad1009aff5" Workload="localhost-k8s-calico--kube--controllers--89f4c7b56--xqnjf-eth0" Jul 10 00:37:22.199988 env[1205]: 2025-07-10 00:37:22.196 [INFO][3700] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:37:22.199988 env[1205]: 2025-07-10 00:37:22.198 [INFO][3651] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="7de3064a535962f3719ed9b06c3286809c692aa164314996492f8bad1009aff5" Jul 10 00:37:22.200714 env[1205]: time="2025-07-10T00:37:22.200678406Z" level=info msg="TearDown network for sandbox \"7de3064a535962f3719ed9b06c3286809c692aa164314996492f8bad1009aff5\" successfully" Jul 10 00:37:22.200828 env[1205]: time="2025-07-10T00:37:22.200803972Z" level=info msg="StopPodSandbox for \"7de3064a535962f3719ed9b06c3286809c692aa164314996492f8bad1009aff5\" returns successfully" Jul 10 00:37:22.201632 env[1205]: time="2025-07-10T00:37:22.201611448Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-89f4c7b56-xqnjf,Uid:e898c44d-80a2-4702-a367-04a77e5bac00,Namespace:calico-system,Attempt:1,}" Jul 10 00:37:22.211355 env[1205]: 2025-07-10 00:37:22.154 [INFO][3657] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="29dbdbc36f7112620340299d9724c9353cc804cb5e64eb7f4c38cb3cb82c8b78" Jul 10 00:37:22.211355 env[1205]: 2025-07-10 00:37:22.154 [INFO][3657] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="29dbdbc36f7112620340299d9724c9353cc804cb5e64eb7f4c38cb3cb82c8b78" iface="eth0" netns="/var/run/netns/cni-380bc42b-9ab4-4196-eecd-531fce001a88" Jul 10 00:37:22.211355 env[1205]: 2025-07-10 00:37:22.155 [INFO][3657] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="29dbdbc36f7112620340299d9724c9353cc804cb5e64eb7f4c38cb3cb82c8b78" iface="eth0" netns="/var/run/netns/cni-380bc42b-9ab4-4196-eecd-531fce001a88" Jul 10 00:37:22.211355 env[1205]: 2025-07-10 00:37:22.155 [INFO][3657] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="29dbdbc36f7112620340299d9724c9353cc804cb5e64eb7f4c38cb3cb82c8b78" iface="eth0" netns="/var/run/netns/cni-380bc42b-9ab4-4196-eecd-531fce001a88" Jul 10 00:37:22.211355 env[1205]: 2025-07-10 00:37:22.155 [INFO][3657] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="29dbdbc36f7112620340299d9724c9353cc804cb5e64eb7f4c38cb3cb82c8b78" Jul 10 00:37:22.211355 env[1205]: 2025-07-10 00:37:22.155 [INFO][3657] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="29dbdbc36f7112620340299d9724c9353cc804cb5e64eb7f4c38cb3cb82c8b78" Jul 10 00:37:22.211355 env[1205]: 2025-07-10 00:37:22.200 [INFO][3708] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="29dbdbc36f7112620340299d9724c9353cc804cb5e64eb7f4c38cb3cb82c8b78" HandleID="k8s-pod-network.29dbdbc36f7112620340299d9724c9353cc804cb5e64eb7f4c38cb3cb82c8b78" Workload="localhost-k8s-coredns--668d6bf9bc--sm7jj-eth0" Jul 10 00:37:22.211355 env[1205]: 2025-07-10 00:37:22.200 [INFO][3708] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:37:22.211355 env[1205]: 2025-07-10 00:37:22.200 [INFO][3708] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:37:22.211355 env[1205]: 2025-07-10 00:37:22.206 [WARNING][3708] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="29dbdbc36f7112620340299d9724c9353cc804cb5e64eb7f4c38cb3cb82c8b78" HandleID="k8s-pod-network.29dbdbc36f7112620340299d9724c9353cc804cb5e64eb7f4c38cb3cb82c8b78" Workload="localhost-k8s-coredns--668d6bf9bc--sm7jj-eth0" Jul 10 00:37:22.211355 env[1205]: 2025-07-10 00:37:22.206 [INFO][3708] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="29dbdbc36f7112620340299d9724c9353cc804cb5e64eb7f4c38cb3cb82c8b78" HandleID="k8s-pod-network.29dbdbc36f7112620340299d9724c9353cc804cb5e64eb7f4c38cb3cb82c8b78" Workload="localhost-k8s-coredns--668d6bf9bc--sm7jj-eth0" Jul 10 00:37:22.211355 env[1205]: 2025-07-10 00:37:22.208 [INFO][3708] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:37:22.211355 env[1205]: 2025-07-10 00:37:22.209 [INFO][3657] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="29dbdbc36f7112620340299d9724c9353cc804cb5e64eb7f4c38cb3cb82c8b78" Jul 10 00:37:22.212102 env[1205]: time="2025-07-10T00:37:22.212065719Z" level=info msg="TearDown network for sandbox \"29dbdbc36f7112620340299d9724c9353cc804cb5e64eb7f4c38cb3cb82c8b78\" successfully" Jul 10 00:37:22.212198 env[1205]: time="2025-07-10T00:37:22.212174083Z" level=info msg="StopPodSandbox for \"29dbdbc36f7112620340299d9724c9353cc804cb5e64eb7f4c38cb3cb82c8b78\" returns successfully" Jul 10 00:37:22.212643 kubelet[1947]: E0710 00:37:22.212617 1947 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:37:22.214274 env[1205]: time="2025-07-10T00:37:22.214248757Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-sm7jj,Uid:c8b0db9c-1785-4ce7-ba5a-244a4bfc9464,Namespace:kube-system,Attempt:1,}" Jul 10 00:37:22.229919 env[1205]: 2025-07-10 00:37:22.167 [INFO][3668] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="1a137de9d036b4eecbaadec3635f738c0153ae639090811abef60bdc1c0bcbde" Jul 10 00:37:22.229919 env[1205]: 2025-07-10 00:37:22.167 [INFO][3668] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="1a137de9d036b4eecbaadec3635f738c0153ae639090811abef60bdc1c0bcbde" iface="eth0" netns="/var/run/netns/cni-0d969d09-c013-9011-4a73-e345b2dda5d1" Jul 10 00:37:22.229919 env[1205]: 2025-07-10 00:37:22.167 [INFO][3668] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="1a137de9d036b4eecbaadec3635f738c0153ae639090811abef60bdc1c0bcbde" iface="eth0" netns="/var/run/netns/cni-0d969d09-c013-9011-4a73-e345b2dda5d1" Jul 10 00:37:22.229919 env[1205]: 2025-07-10 00:37:22.167 [INFO][3668] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="1a137de9d036b4eecbaadec3635f738c0153ae639090811abef60bdc1c0bcbde" iface="eth0" netns="/var/run/netns/cni-0d969d09-c013-9011-4a73-e345b2dda5d1" Jul 10 00:37:22.229919 env[1205]: 2025-07-10 00:37:22.167 [INFO][3668] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="1a137de9d036b4eecbaadec3635f738c0153ae639090811abef60bdc1c0bcbde" Jul 10 00:37:22.229919 env[1205]: 2025-07-10 00:37:22.167 [INFO][3668] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="1a137de9d036b4eecbaadec3635f738c0153ae639090811abef60bdc1c0bcbde" Jul 10 00:37:22.229919 env[1205]: 2025-07-10 00:37:22.217 [INFO][3721] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="1a137de9d036b4eecbaadec3635f738c0153ae639090811abef60bdc1c0bcbde" HandleID="k8s-pod-network.1a137de9d036b4eecbaadec3635f738c0153ae639090811abef60bdc1c0bcbde" Workload="localhost-k8s-csi--node--driver--xcq57-eth0" Jul 10 00:37:22.229919 env[1205]: 2025-07-10 00:37:22.218 [INFO][3721] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:37:22.229919 env[1205]: 2025-07-10 00:37:22.218 [INFO][3721] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:37:22.229919 env[1205]: 2025-07-10 00:37:22.225 [WARNING][3721] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="1a137de9d036b4eecbaadec3635f738c0153ae639090811abef60bdc1c0bcbde" HandleID="k8s-pod-network.1a137de9d036b4eecbaadec3635f738c0153ae639090811abef60bdc1c0bcbde" Workload="localhost-k8s-csi--node--driver--xcq57-eth0" Jul 10 00:37:22.229919 env[1205]: 2025-07-10 00:37:22.225 [INFO][3721] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="1a137de9d036b4eecbaadec3635f738c0153ae639090811abef60bdc1c0bcbde" HandleID="k8s-pod-network.1a137de9d036b4eecbaadec3635f738c0153ae639090811abef60bdc1c0bcbde" Workload="localhost-k8s-csi--node--driver--xcq57-eth0" Jul 10 00:37:22.229919 env[1205]: 2025-07-10 00:37:22.227 [INFO][3721] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:37:22.229919 env[1205]: 2025-07-10 00:37:22.228 [INFO][3668] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="1a137de9d036b4eecbaadec3635f738c0153ae639090811abef60bdc1c0bcbde" Jul 10 00:37:22.230505 env[1205]: time="2025-07-10T00:37:22.230036058Z" level=info msg="TearDown network for sandbox \"1a137de9d036b4eecbaadec3635f738c0153ae639090811abef60bdc1c0bcbde\" successfully" Jul 10 00:37:22.230505 env[1205]: time="2025-07-10T00:37:22.230064441Z" level=info msg="StopPodSandbox for \"1a137de9d036b4eecbaadec3635f738c0153ae639090811abef60bdc1c0bcbde\" returns successfully" Jul 10 00:37:22.230865 env[1205]: time="2025-07-10T00:37:22.230831031Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-xcq57,Uid:11ff2135-d9e8-4055-b855-c59ae8ddcd79,Namespace:calico-system,Attempt:1,}" Jul 10 00:37:22.244885 env[1205]: 2025-07-10 00:37:22.164 [INFO][3656] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="423e3d3c7782d0d5416d42fc8235d5c6141a7b366a18ec11e8f12a0e7ba8082c" Jul 10 00:37:22.244885 env[1205]: 2025-07-10 00:37:22.164 [INFO][3656] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="423e3d3c7782d0d5416d42fc8235d5c6141a7b366a18ec11e8f12a0e7ba8082c" iface="eth0" netns="/var/run/netns/cni-e9348bd7-1614-2a21-1b0d-728c8f1822b3" Jul 10 00:37:22.244885 env[1205]: 2025-07-10 00:37:22.164 [INFO][3656] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="423e3d3c7782d0d5416d42fc8235d5c6141a7b366a18ec11e8f12a0e7ba8082c" iface="eth0" netns="/var/run/netns/cni-e9348bd7-1614-2a21-1b0d-728c8f1822b3" Jul 10 00:37:22.244885 env[1205]: 2025-07-10 00:37:22.164 [INFO][3656] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="423e3d3c7782d0d5416d42fc8235d5c6141a7b366a18ec11e8f12a0e7ba8082c" iface="eth0" netns="/var/run/netns/cni-e9348bd7-1614-2a21-1b0d-728c8f1822b3" Jul 10 00:37:22.244885 env[1205]: 2025-07-10 00:37:22.164 [INFO][3656] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="423e3d3c7782d0d5416d42fc8235d5c6141a7b366a18ec11e8f12a0e7ba8082c" Jul 10 00:37:22.244885 env[1205]: 2025-07-10 00:37:22.164 [INFO][3656] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="423e3d3c7782d0d5416d42fc8235d5c6141a7b366a18ec11e8f12a0e7ba8082c" Jul 10 00:37:22.244885 env[1205]: 2025-07-10 00:37:22.221 [INFO][3715] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="423e3d3c7782d0d5416d42fc8235d5c6141a7b366a18ec11e8f12a0e7ba8082c" HandleID="k8s-pod-network.423e3d3c7782d0d5416d42fc8235d5c6141a7b366a18ec11e8f12a0e7ba8082c" Workload="localhost-k8s-calico--apiserver--79f4d77569--v77g9-eth0" Jul 10 00:37:22.244885 env[1205]: 2025-07-10 00:37:22.221 [INFO][3715] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:37:22.244885 env[1205]: 2025-07-10 00:37:22.227 [INFO][3715] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:37:22.244885 env[1205]: 2025-07-10 00:37:22.235 [WARNING][3715] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="423e3d3c7782d0d5416d42fc8235d5c6141a7b366a18ec11e8f12a0e7ba8082c" HandleID="k8s-pod-network.423e3d3c7782d0d5416d42fc8235d5c6141a7b366a18ec11e8f12a0e7ba8082c" Workload="localhost-k8s-calico--apiserver--79f4d77569--v77g9-eth0" Jul 10 00:37:22.244885 env[1205]: 2025-07-10 00:37:22.235 [INFO][3715] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="423e3d3c7782d0d5416d42fc8235d5c6141a7b366a18ec11e8f12a0e7ba8082c" HandleID="k8s-pod-network.423e3d3c7782d0d5416d42fc8235d5c6141a7b366a18ec11e8f12a0e7ba8082c" Workload="localhost-k8s-calico--apiserver--79f4d77569--v77g9-eth0" Jul 10 00:37:22.244885 env[1205]: 2025-07-10 00:37:22.240 [INFO][3715] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:37:22.244885 env[1205]: 2025-07-10 00:37:22.242 [INFO][3656] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="423e3d3c7782d0d5416d42fc8235d5c6141a7b366a18ec11e8f12a0e7ba8082c" Jul 10 00:37:22.245496 env[1205]: time="2025-07-10T00:37:22.245463675Z" level=info msg="TearDown network for sandbox \"423e3d3c7782d0d5416d42fc8235d5c6141a7b366a18ec11e8f12a0e7ba8082c\" successfully" Jul 10 00:37:22.245578 env[1205]: time="2025-07-10T00:37:22.245557581Z" level=info msg="StopPodSandbox for \"423e3d3c7782d0d5416d42fc8235d5c6141a7b366a18ec11e8f12a0e7ba8082c\" returns successfully" Jul 10 00:37:22.246366 env[1205]: time="2025-07-10T00:37:22.246347083Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-79f4d77569-v77g9,Uid:7ab2b8e4-3818-4286-9287-142885fbf432,Namespace:calico-apiserver,Attempt:1,}" Jul 10 00:37:22.337088 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Jul 10 00:37:22.337352 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calibdc4ef6058b: link becomes ready Jul 10 00:37:22.336086 systemd-networkd[1023]: calibdc4ef6058b: Link UP Jul 10 00:37:22.337248 systemd-networkd[1023]: calibdc4ef6058b: Gained carrier Jul 10 00:37:22.349867 env[1205]: 2025-07-10 00:37:22.271 [INFO][3748] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-coredns--668d6bf9bc--sm7jj-eth0 coredns-668d6bf9bc- kube-system c8b0db9c-1785-4ce7-ba5a-244a4bfc9464 990 0 2025-07-10 00:36:41 +0000 UTC map[k8s-app:kube-dns pod-template-hash:668d6bf9bc projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s localhost coredns-668d6bf9bc-sm7jj eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] calibdc4ef6058b [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] [] }} ContainerID="a9b16baf9167f063546de397fe293afe4d7f1fa587956023a3386b038e2fc145" Namespace="kube-system" Pod="coredns-668d6bf9bc-sm7jj" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--sm7jj-" Jul 10 00:37:22.349867 env[1205]: 2025-07-10 00:37:22.271 [INFO][3748] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="a9b16baf9167f063546de397fe293afe4d7f1fa587956023a3386b038e2fc145" Namespace="kube-system" Pod="coredns-668d6bf9bc-sm7jj" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--sm7jj-eth0" Jul 10 00:37:22.349867 env[1205]: 2025-07-10 00:37:22.299 [INFO][3790] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="a9b16baf9167f063546de397fe293afe4d7f1fa587956023a3386b038e2fc145" HandleID="k8s-pod-network.a9b16baf9167f063546de397fe293afe4d7f1fa587956023a3386b038e2fc145" Workload="localhost-k8s-coredns--668d6bf9bc--sm7jj-eth0" Jul 10 00:37:22.349867 env[1205]: 2025-07-10 00:37:22.299 [INFO][3790] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="a9b16baf9167f063546de397fe293afe4d7f1fa587956023a3386b038e2fc145" HandleID="k8s-pod-network.a9b16baf9167f063546de397fe293afe4d7f1fa587956023a3386b038e2fc145" Workload="localhost-k8s-coredns--668d6bf9bc--sm7jj-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0004262e0), Attrs:map[string]string{"namespace":"kube-system", "node":"localhost", "pod":"coredns-668d6bf9bc-sm7jj", "timestamp":"2025-07-10 00:37:22.299734668 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 10 00:37:22.349867 env[1205]: 2025-07-10 00:37:22.299 [INFO][3790] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:37:22.349867 env[1205]: 2025-07-10 00:37:22.300 [INFO][3790] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:37:22.349867 env[1205]: 2025-07-10 00:37:22.300 [INFO][3790] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 10 00:37:22.349867 env[1205]: 2025-07-10 00:37:22.306 [INFO][3790] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.a9b16baf9167f063546de397fe293afe4d7f1fa587956023a3386b038e2fc145" host="localhost" Jul 10 00:37:22.349867 env[1205]: 2025-07-10 00:37:22.312 [INFO][3790] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 10 00:37:22.349867 env[1205]: 2025-07-10 00:37:22.316 [INFO][3790] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 10 00:37:22.349867 env[1205]: 2025-07-10 00:37:22.317 [INFO][3790] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 10 00:37:22.349867 env[1205]: 2025-07-10 00:37:22.319 [INFO][3790] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 10 00:37:22.349867 env[1205]: 2025-07-10 00:37:22.320 [INFO][3790] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.a9b16baf9167f063546de397fe293afe4d7f1fa587956023a3386b038e2fc145" host="localhost" Jul 10 00:37:22.349867 env[1205]: 2025-07-10 00:37:22.321 [INFO][3790] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.a9b16baf9167f063546de397fe293afe4d7f1fa587956023a3386b038e2fc145 Jul 10 00:37:22.349867 env[1205]: 2025-07-10 00:37:22.325 [INFO][3790] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.a9b16baf9167f063546de397fe293afe4d7f1fa587956023a3386b038e2fc145" host="localhost" Jul 10 00:37:22.349867 env[1205]: 2025-07-10 00:37:22.331 [INFO][3790] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.130/26] block=192.168.88.128/26 handle="k8s-pod-network.a9b16baf9167f063546de397fe293afe4d7f1fa587956023a3386b038e2fc145" host="localhost" Jul 10 00:37:22.349867 env[1205]: 2025-07-10 00:37:22.331 [INFO][3790] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.130/26] handle="k8s-pod-network.a9b16baf9167f063546de397fe293afe4d7f1fa587956023a3386b038e2fc145" host="localhost" Jul 10 00:37:22.349867 env[1205]: 2025-07-10 00:37:22.331 [INFO][3790] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:37:22.349867 env[1205]: 2025-07-10 00:37:22.331 [INFO][3790] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.130/26] IPv6=[] ContainerID="a9b16baf9167f063546de397fe293afe4d7f1fa587956023a3386b038e2fc145" HandleID="k8s-pod-network.a9b16baf9167f063546de397fe293afe4d7f1fa587956023a3386b038e2fc145" Workload="localhost-k8s-coredns--668d6bf9bc--sm7jj-eth0" Jul 10 00:37:22.350460 env[1205]: 2025-07-10 00:37:22.333 [INFO][3748] cni-plugin/k8s.go 418: Populated endpoint ContainerID="a9b16baf9167f063546de397fe293afe4d7f1fa587956023a3386b038e2fc145" Namespace="kube-system" Pod="coredns-668d6bf9bc-sm7jj" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--sm7jj-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--668d6bf9bc--sm7jj-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"c8b0db9c-1785-4ce7-ba5a-244a4bfc9464", ResourceVersion:"990", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 36, 41, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"coredns-668d6bf9bc-sm7jj", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calibdc4ef6058b", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:37:22.350460 env[1205]: 2025-07-10 00:37:22.333 [INFO][3748] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.130/32] ContainerID="a9b16baf9167f063546de397fe293afe4d7f1fa587956023a3386b038e2fc145" Namespace="kube-system" Pod="coredns-668d6bf9bc-sm7jj" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--sm7jj-eth0" Jul 10 00:37:22.350460 env[1205]: 2025-07-10 00:37:22.333 [INFO][3748] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calibdc4ef6058b ContainerID="a9b16baf9167f063546de397fe293afe4d7f1fa587956023a3386b038e2fc145" Namespace="kube-system" Pod="coredns-668d6bf9bc-sm7jj" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--sm7jj-eth0" Jul 10 00:37:22.350460 env[1205]: 2025-07-10 00:37:22.340 [INFO][3748] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="a9b16baf9167f063546de397fe293afe4d7f1fa587956023a3386b038e2fc145" Namespace="kube-system" Pod="coredns-668d6bf9bc-sm7jj" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--sm7jj-eth0" Jul 10 00:37:22.350460 env[1205]: 2025-07-10 00:37:22.340 [INFO][3748] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="a9b16baf9167f063546de397fe293afe4d7f1fa587956023a3386b038e2fc145" Namespace="kube-system" Pod="coredns-668d6bf9bc-sm7jj" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--sm7jj-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--668d6bf9bc--sm7jj-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"c8b0db9c-1785-4ce7-ba5a-244a4bfc9464", ResourceVersion:"990", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 36, 41, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"a9b16baf9167f063546de397fe293afe4d7f1fa587956023a3386b038e2fc145", Pod:"coredns-668d6bf9bc-sm7jj", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calibdc4ef6058b", MAC:"ae:74:1a:fa:de:e4", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:37:22.350460 env[1205]: 2025-07-10 00:37:22.347 [INFO][3748] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="a9b16baf9167f063546de397fe293afe4d7f1fa587956023a3386b038e2fc145" Namespace="kube-system" Pod="coredns-668d6bf9bc-sm7jj" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--sm7jj-eth0" Jul 10 00:37:22.363000 audit[3839]: NETFILTER_CFG table=filter:105 family=2 entries=42 op=nft_register_chain pid=3839 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 10 00:37:22.363000 audit[3839]: SYSCALL arch=c000003e syscall=46 success=yes exit=22552 a0=3 a1=7fff86599040 a2=0 a3=7fff8659902c items=0 ppid=3348 pid=3839 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:22.363000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 10 00:37:22.376247 env[1205]: time="2025-07-10T00:37:22.376181233Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 10 00:37:22.377347 env[1205]: time="2025-07-10T00:37:22.376224264Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 10 00:37:22.377347 env[1205]: time="2025-07-10T00:37:22.376234643Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 10 00:37:22.377347 env[1205]: time="2025-07-10T00:37:22.376398761Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/a9b16baf9167f063546de397fe293afe4d7f1fa587956023a3386b038e2fc145 pid=3849 runtime=io.containerd.runc.v2 Jul 10 00:37:22.386962 systemd[1]: Started cri-containerd-a9b16baf9167f063546de397fe293afe4d7f1fa587956023a3386b038e2fc145.scope. Jul 10 00:37:22.398000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:22.398000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:22.398000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:22.398000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:22.398000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:22.398000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:22.398000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:22.398000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:22.398000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:22.398000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:22.398000 audit: BPF prog-id=173 op=LOAD Jul 10 00:37:22.398000 audit[3859]: AVC avc: denied { bpf } for pid=3859 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:22.398000 audit[3859]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000199c48 a2=10 a3=1c items=0 ppid=3849 pid=3859 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:22.398000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6139623136626166393136376630363335343664653339376665323933 Jul 10 00:37:22.398000 audit[3859]: AVC avc: denied { perfmon } for pid=3859 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:22.398000 audit[3859]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001996b0 a2=3c a3=c items=0 ppid=3849 pid=3859 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:22.398000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6139623136626166393136376630363335343664653339376665323933 Jul 10 00:37:22.398000 audit[3859]: AVC avc: denied { bpf } for pid=3859 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:22.398000 audit[3859]: AVC avc: denied { bpf } for pid=3859 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:22.398000 audit[3859]: AVC avc: denied { bpf } for pid=3859 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:22.398000 audit[3859]: AVC avc: denied { perfmon } for pid=3859 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:22.398000 audit[3859]: AVC avc: denied { perfmon } for pid=3859 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:22.398000 audit[3859]: AVC avc: denied { perfmon } for pid=3859 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:22.398000 audit[3859]: AVC avc: denied { perfmon } for pid=3859 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:22.398000 audit[3859]: AVC avc: denied { perfmon } for pid=3859 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:22.398000 audit[3859]: AVC avc: denied { bpf } for pid=3859 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:22.398000 audit[3859]: AVC avc: denied { bpf } for pid=3859 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:22.398000 audit: BPF prog-id=174 op=LOAD Jul 10 00:37:22.398000 audit[3859]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001999d8 a2=78 a3=c0003a33b0 items=0 ppid=3849 pid=3859 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:22.398000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6139623136626166393136376630363335343664653339376665323933 Jul 10 00:37:22.399000 audit[3859]: AVC avc: denied { bpf } for pid=3859 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:22.399000 audit[3859]: AVC avc: denied { bpf } for pid=3859 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:22.399000 audit[3859]: AVC avc: denied { perfmon } for pid=3859 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:22.399000 audit[3859]: AVC avc: denied { perfmon } for pid=3859 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:22.399000 audit[3859]: AVC avc: denied { perfmon } for pid=3859 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:22.399000 audit[3859]: AVC avc: denied { perfmon } for pid=3859 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:22.399000 audit[3859]: AVC avc: denied { perfmon } for pid=3859 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:22.399000 audit[3859]: AVC avc: denied { bpf } for pid=3859 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:22.399000 audit[3859]: AVC avc: denied { bpf } for pid=3859 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:22.399000 audit: BPF prog-id=175 op=LOAD Jul 10 00:37:22.399000 audit[3859]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000199770 a2=78 a3=c0003a33f8 items=0 ppid=3849 pid=3859 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:22.399000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6139623136626166393136376630363335343664653339376665323933 Jul 10 00:37:22.399000 audit: BPF prog-id=175 op=UNLOAD Jul 10 00:37:22.399000 audit: BPF prog-id=174 op=UNLOAD Jul 10 00:37:22.399000 audit[3859]: AVC avc: denied { bpf } for pid=3859 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:22.399000 audit[3859]: AVC avc: denied { bpf } for pid=3859 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:22.399000 audit[3859]: AVC avc: denied { bpf } for pid=3859 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:22.399000 audit[3859]: AVC avc: denied { perfmon } for pid=3859 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:22.399000 audit[3859]: AVC avc: denied { perfmon } for pid=3859 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:22.399000 audit[3859]: AVC avc: denied { perfmon } for pid=3859 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:22.399000 audit[3859]: AVC avc: denied { perfmon } for pid=3859 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:22.399000 audit[3859]: AVC avc: denied { perfmon } for pid=3859 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:22.399000 audit[3859]: AVC avc: denied { bpf } for pid=3859 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:22.399000 audit[3859]: AVC avc: denied { bpf } for pid=3859 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:22.399000 audit: BPF prog-id=176 op=LOAD Jul 10 00:37:22.399000 audit[3859]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000199c30 a2=78 a3=c0003a3808 items=0 ppid=3849 pid=3859 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:22.399000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6139623136626166393136376630363335343664653339376665323933 Jul 10 00:37:22.402620 systemd-resolved[1142]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 10 00:37:22.427865 env[1205]: time="2025-07-10T00:37:22.427750234Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-sm7jj,Uid:c8b0db9c-1785-4ce7-ba5a-244a4bfc9464,Namespace:kube-system,Attempt:1,} returns sandbox id \"a9b16baf9167f063546de397fe293afe4d7f1fa587956023a3386b038e2fc145\"" Jul 10 00:37:22.429414 kubelet[1947]: E0710 00:37:22.428874 1947 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:37:22.431114 env[1205]: time="2025-07-10T00:37:22.431083331Z" level=info msg="CreateContainer within sandbox \"a9b16baf9167f063546de397fe293afe4d7f1fa587956023a3386b038e2fc145\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Jul 10 00:37:22.442410 systemd-networkd[1023]: cali7ba118bbdd0: Link UP Jul 10 00:37:22.445050 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali7ba118bbdd0: link becomes ready Jul 10 00:37:22.444678 systemd-networkd[1023]: cali7ba118bbdd0: Gained carrier Jul 10 00:37:22.466427 env[1205]: 2025-07-10 00:37:22.273 [INFO][3734] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-calico--kube--controllers--89f4c7b56--xqnjf-eth0 calico-kube-controllers-89f4c7b56- calico-system e898c44d-80a2-4702-a367-04a77e5bac00 987 0 2025-07-10 00:36:55 +0000 UTC map[app.kubernetes.io/name:calico-kube-controllers k8s-app:calico-kube-controllers pod-template-hash:89f4c7b56 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-kube-controllers] map[] [] [] []} {k8s localhost calico-kube-controllers-89f4c7b56-xqnjf eth0 calico-kube-controllers [] [] [kns.calico-system ksa.calico-system.calico-kube-controllers] cali7ba118bbdd0 [] [] }} ContainerID="ee9d6e8f4478ef709f58cbd1a1d53b0899154d7e46249e90d13b3be201c646fa" Namespace="calico-system" Pod="calico-kube-controllers-89f4c7b56-xqnjf" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--89f4c7b56--xqnjf-" Jul 10 00:37:22.466427 env[1205]: 2025-07-10 00:37:22.273 [INFO][3734] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="ee9d6e8f4478ef709f58cbd1a1d53b0899154d7e46249e90d13b3be201c646fa" Namespace="calico-system" Pod="calico-kube-controllers-89f4c7b56-xqnjf" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--89f4c7b56--xqnjf-eth0" Jul 10 00:37:22.466427 env[1205]: 2025-07-10 00:37:22.325 [INFO][3792] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="ee9d6e8f4478ef709f58cbd1a1d53b0899154d7e46249e90d13b3be201c646fa" HandleID="k8s-pod-network.ee9d6e8f4478ef709f58cbd1a1d53b0899154d7e46249e90d13b3be201c646fa" Workload="localhost-k8s-calico--kube--controllers--89f4c7b56--xqnjf-eth0" Jul 10 00:37:22.466427 env[1205]: 2025-07-10 00:37:22.325 [INFO][3792] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="ee9d6e8f4478ef709f58cbd1a1d53b0899154d7e46249e90d13b3be201c646fa" HandleID="k8s-pod-network.ee9d6e8f4478ef709f58cbd1a1d53b0899154d7e46249e90d13b3be201c646fa" Workload="localhost-k8s-calico--kube--controllers--89f4c7b56--xqnjf-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0002c8fe0), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"calico-kube-controllers-89f4c7b56-xqnjf", "timestamp":"2025-07-10 00:37:22.325529513 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 10 00:37:22.466427 env[1205]: 2025-07-10 00:37:22.325 [INFO][3792] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:37:22.466427 env[1205]: 2025-07-10 00:37:22.331 [INFO][3792] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:37:22.466427 env[1205]: 2025-07-10 00:37:22.331 [INFO][3792] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 10 00:37:22.466427 env[1205]: 2025-07-10 00:37:22.408 [INFO][3792] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.ee9d6e8f4478ef709f58cbd1a1d53b0899154d7e46249e90d13b3be201c646fa" host="localhost" Jul 10 00:37:22.466427 env[1205]: 2025-07-10 00:37:22.413 [INFO][3792] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 10 00:37:22.466427 env[1205]: 2025-07-10 00:37:22.417 [INFO][3792] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 10 00:37:22.466427 env[1205]: 2025-07-10 00:37:22.418 [INFO][3792] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 10 00:37:22.466427 env[1205]: 2025-07-10 00:37:22.420 [INFO][3792] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 10 00:37:22.466427 env[1205]: 2025-07-10 00:37:22.420 [INFO][3792] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.ee9d6e8f4478ef709f58cbd1a1d53b0899154d7e46249e90d13b3be201c646fa" host="localhost" Jul 10 00:37:22.466427 env[1205]: 2025-07-10 00:37:22.422 [INFO][3792] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.ee9d6e8f4478ef709f58cbd1a1d53b0899154d7e46249e90d13b3be201c646fa Jul 10 00:37:22.466427 env[1205]: 2025-07-10 00:37:22.426 [INFO][3792] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.ee9d6e8f4478ef709f58cbd1a1d53b0899154d7e46249e90d13b3be201c646fa" host="localhost" Jul 10 00:37:22.466427 env[1205]: 2025-07-10 00:37:22.435 [INFO][3792] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.131/26] block=192.168.88.128/26 handle="k8s-pod-network.ee9d6e8f4478ef709f58cbd1a1d53b0899154d7e46249e90d13b3be201c646fa" host="localhost" Jul 10 00:37:22.466427 env[1205]: 2025-07-10 00:37:22.435 [INFO][3792] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.131/26] handle="k8s-pod-network.ee9d6e8f4478ef709f58cbd1a1d53b0899154d7e46249e90d13b3be201c646fa" host="localhost" Jul 10 00:37:22.466427 env[1205]: 2025-07-10 00:37:22.435 [INFO][3792] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:37:22.466427 env[1205]: 2025-07-10 00:37:22.435 [INFO][3792] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.131/26] IPv6=[] ContainerID="ee9d6e8f4478ef709f58cbd1a1d53b0899154d7e46249e90d13b3be201c646fa" HandleID="k8s-pod-network.ee9d6e8f4478ef709f58cbd1a1d53b0899154d7e46249e90d13b3be201c646fa" Workload="localhost-k8s-calico--kube--controllers--89f4c7b56--xqnjf-eth0" Jul 10 00:37:22.467594 env[1205]: 2025-07-10 00:37:22.439 [INFO][3734] cni-plugin/k8s.go 418: Populated endpoint ContainerID="ee9d6e8f4478ef709f58cbd1a1d53b0899154d7e46249e90d13b3be201c646fa" Namespace="calico-system" Pod="calico-kube-controllers-89f4c7b56-xqnjf" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--89f4c7b56--xqnjf-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--89f4c7b56--xqnjf-eth0", GenerateName:"calico-kube-controllers-89f4c7b56-", Namespace:"calico-system", SelfLink:"", UID:"e898c44d-80a2-4702-a367-04a77e5bac00", ResourceVersion:"987", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 36, 55, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"89f4c7b56", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"calico-kube-controllers-89f4c7b56-xqnjf", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali7ba118bbdd0", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:37:22.467594 env[1205]: 2025-07-10 00:37:22.439 [INFO][3734] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.131/32] ContainerID="ee9d6e8f4478ef709f58cbd1a1d53b0899154d7e46249e90d13b3be201c646fa" Namespace="calico-system" Pod="calico-kube-controllers-89f4c7b56-xqnjf" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--89f4c7b56--xqnjf-eth0" Jul 10 00:37:22.467594 env[1205]: 2025-07-10 00:37:22.439 [INFO][3734] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali7ba118bbdd0 ContainerID="ee9d6e8f4478ef709f58cbd1a1d53b0899154d7e46249e90d13b3be201c646fa" Namespace="calico-system" Pod="calico-kube-controllers-89f4c7b56-xqnjf" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--89f4c7b56--xqnjf-eth0" Jul 10 00:37:22.467594 env[1205]: 2025-07-10 00:37:22.445 [INFO][3734] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="ee9d6e8f4478ef709f58cbd1a1d53b0899154d7e46249e90d13b3be201c646fa" Namespace="calico-system" Pod="calico-kube-controllers-89f4c7b56-xqnjf" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--89f4c7b56--xqnjf-eth0" Jul 10 00:37:22.467594 env[1205]: 2025-07-10 00:37:22.445 [INFO][3734] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="ee9d6e8f4478ef709f58cbd1a1d53b0899154d7e46249e90d13b3be201c646fa" Namespace="calico-system" Pod="calico-kube-controllers-89f4c7b56-xqnjf" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--89f4c7b56--xqnjf-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--89f4c7b56--xqnjf-eth0", GenerateName:"calico-kube-controllers-89f4c7b56-", Namespace:"calico-system", SelfLink:"", UID:"e898c44d-80a2-4702-a367-04a77e5bac00", ResourceVersion:"987", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 36, 55, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"89f4c7b56", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"ee9d6e8f4478ef709f58cbd1a1d53b0899154d7e46249e90d13b3be201c646fa", Pod:"calico-kube-controllers-89f4c7b56-xqnjf", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali7ba118bbdd0", MAC:"fa:7b:75:ee:dc:c3", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:37:22.467594 env[1205]: 2025-07-10 00:37:22.458 [INFO][3734] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="ee9d6e8f4478ef709f58cbd1a1d53b0899154d7e46249e90d13b3be201c646fa" Namespace="calico-system" Pod="calico-kube-controllers-89f4c7b56-xqnjf" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--89f4c7b56--xqnjf-eth0" Jul 10 00:37:22.474000 audit[3892]: NETFILTER_CFG table=filter:106 family=2 entries=40 op=nft_register_chain pid=3892 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 10 00:37:22.474000 audit[3892]: SYSCALL arch=c000003e syscall=46 success=yes exit=20764 a0=3 a1=7ffd1b6b6fc0 a2=0 a3=7ffd1b6b6fac items=0 ppid=3348 pid=3892 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:22.474000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 10 00:37:22.683693 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calie994b9b45eb: link becomes ready Jul 10 00:37:22.683867 systemd-networkd[1023]: calie994b9b45eb: Link UP Jul 10 00:37:22.684094 systemd-networkd[1023]: calie994b9b45eb: Gained carrier Jul 10 00:37:22.695194 env[1205]: 2025-07-10 00:37:22.323 [INFO][3762] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-csi--node--driver--xcq57-eth0 csi-node-driver- calico-system 11ff2135-d9e8-4055-b855-c59ae8ddcd79 995 0 2025-07-10 00:36:55 +0000 UTC map[app.kubernetes.io/name:csi-node-driver controller-revision-hash:8967bcb6f k8s-app:csi-node-driver name:csi-node-driver pod-template-generation:1 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:csi-node-driver] map[] [] [] []} {k8s localhost csi-node-driver-xcq57 eth0 csi-node-driver [] [] [kns.calico-system ksa.calico-system.csi-node-driver] calie994b9b45eb [] [] }} ContainerID="e85ccdde7862fa4c3cb351013b3e8613e58276bf4b718c855f3f5e86224e6cc8" Namespace="calico-system" Pod="csi-node-driver-xcq57" WorkloadEndpoint="localhost-k8s-csi--node--driver--xcq57-" Jul 10 00:37:22.695194 env[1205]: 2025-07-10 00:37:22.323 [INFO][3762] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="e85ccdde7862fa4c3cb351013b3e8613e58276bf4b718c855f3f5e86224e6cc8" Namespace="calico-system" Pod="csi-node-driver-xcq57" WorkloadEndpoint="localhost-k8s-csi--node--driver--xcq57-eth0" Jul 10 00:37:22.695194 env[1205]: 2025-07-10 00:37:22.365 [INFO][3821] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="e85ccdde7862fa4c3cb351013b3e8613e58276bf4b718c855f3f5e86224e6cc8" HandleID="k8s-pod-network.e85ccdde7862fa4c3cb351013b3e8613e58276bf4b718c855f3f5e86224e6cc8" Workload="localhost-k8s-csi--node--driver--xcq57-eth0" Jul 10 00:37:22.695194 env[1205]: 2025-07-10 00:37:22.365 [INFO][3821] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="e85ccdde7862fa4c3cb351013b3e8613e58276bf4b718c855f3f5e86224e6cc8" HandleID="k8s-pod-network.e85ccdde7862fa4c3cb351013b3e8613e58276bf4b718c855f3f5e86224e6cc8" Workload="localhost-k8s-csi--node--driver--xcq57-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0005198e0), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"csi-node-driver-xcq57", "timestamp":"2025-07-10 00:37:22.365738092 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 10 00:37:22.695194 env[1205]: 2025-07-10 00:37:22.366 [INFO][3821] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:37:22.695194 env[1205]: 2025-07-10 00:37:22.435 [INFO][3821] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:37:22.695194 env[1205]: 2025-07-10 00:37:22.435 [INFO][3821] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 10 00:37:22.695194 env[1205]: 2025-07-10 00:37:22.508 [INFO][3821] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.e85ccdde7862fa4c3cb351013b3e8613e58276bf4b718c855f3f5e86224e6cc8" host="localhost" Jul 10 00:37:22.695194 env[1205]: 2025-07-10 00:37:22.514 [INFO][3821] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 10 00:37:22.695194 env[1205]: 2025-07-10 00:37:22.518 [INFO][3821] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 10 00:37:22.695194 env[1205]: 2025-07-10 00:37:22.520 [INFO][3821] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 10 00:37:22.695194 env[1205]: 2025-07-10 00:37:22.522 [INFO][3821] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 10 00:37:22.695194 env[1205]: 2025-07-10 00:37:22.522 [INFO][3821] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.e85ccdde7862fa4c3cb351013b3e8613e58276bf4b718c855f3f5e86224e6cc8" host="localhost" Jul 10 00:37:22.695194 env[1205]: 2025-07-10 00:37:22.524 [INFO][3821] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.e85ccdde7862fa4c3cb351013b3e8613e58276bf4b718c855f3f5e86224e6cc8 Jul 10 00:37:22.695194 env[1205]: 2025-07-10 00:37:22.651 [INFO][3821] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.e85ccdde7862fa4c3cb351013b3e8613e58276bf4b718c855f3f5e86224e6cc8" host="localhost" Jul 10 00:37:22.695194 env[1205]: 2025-07-10 00:37:22.676 [INFO][3821] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.132/26] block=192.168.88.128/26 handle="k8s-pod-network.e85ccdde7862fa4c3cb351013b3e8613e58276bf4b718c855f3f5e86224e6cc8" host="localhost" Jul 10 00:37:22.695194 env[1205]: 2025-07-10 00:37:22.676 [INFO][3821] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.132/26] handle="k8s-pod-network.e85ccdde7862fa4c3cb351013b3e8613e58276bf4b718c855f3f5e86224e6cc8" host="localhost" Jul 10 00:37:22.695194 env[1205]: 2025-07-10 00:37:22.676 [INFO][3821] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:37:22.695194 env[1205]: 2025-07-10 00:37:22.676 [INFO][3821] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.132/26] IPv6=[] ContainerID="e85ccdde7862fa4c3cb351013b3e8613e58276bf4b718c855f3f5e86224e6cc8" HandleID="k8s-pod-network.e85ccdde7862fa4c3cb351013b3e8613e58276bf4b718c855f3f5e86224e6cc8" Workload="localhost-k8s-csi--node--driver--xcq57-eth0" Jul 10 00:37:22.696299 env[1205]: 2025-07-10 00:37:22.678 [INFO][3762] cni-plugin/k8s.go 418: Populated endpoint ContainerID="e85ccdde7862fa4c3cb351013b3e8613e58276bf4b718c855f3f5e86224e6cc8" Namespace="calico-system" Pod="csi-node-driver-xcq57" WorkloadEndpoint="localhost-k8s-csi--node--driver--xcq57-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--xcq57-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"11ff2135-d9e8-4055-b855-c59ae8ddcd79", ResourceVersion:"995", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 36, 55, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"8967bcb6f", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"csi-node-driver-xcq57", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"calie994b9b45eb", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:37:22.696299 env[1205]: 2025-07-10 00:37:22.679 [INFO][3762] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.132/32] ContainerID="e85ccdde7862fa4c3cb351013b3e8613e58276bf4b718c855f3f5e86224e6cc8" Namespace="calico-system" Pod="csi-node-driver-xcq57" WorkloadEndpoint="localhost-k8s-csi--node--driver--xcq57-eth0" Jul 10 00:37:22.696299 env[1205]: 2025-07-10 00:37:22.679 [INFO][3762] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calie994b9b45eb ContainerID="e85ccdde7862fa4c3cb351013b3e8613e58276bf4b718c855f3f5e86224e6cc8" Namespace="calico-system" Pod="csi-node-driver-xcq57" WorkloadEndpoint="localhost-k8s-csi--node--driver--xcq57-eth0" Jul 10 00:37:22.696299 env[1205]: 2025-07-10 00:37:22.683 [INFO][3762] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="e85ccdde7862fa4c3cb351013b3e8613e58276bf4b718c855f3f5e86224e6cc8" Namespace="calico-system" Pod="csi-node-driver-xcq57" WorkloadEndpoint="localhost-k8s-csi--node--driver--xcq57-eth0" Jul 10 00:37:22.696299 env[1205]: 2025-07-10 00:37:22.684 [INFO][3762] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="e85ccdde7862fa4c3cb351013b3e8613e58276bf4b718c855f3f5e86224e6cc8" Namespace="calico-system" Pod="csi-node-driver-xcq57" WorkloadEndpoint="localhost-k8s-csi--node--driver--xcq57-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--xcq57-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"11ff2135-d9e8-4055-b855-c59ae8ddcd79", ResourceVersion:"995", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 36, 55, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"8967bcb6f", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"e85ccdde7862fa4c3cb351013b3e8613e58276bf4b718c855f3f5e86224e6cc8", Pod:"csi-node-driver-xcq57", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"calie994b9b45eb", MAC:"16:c3:bf:0b:10:89", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:37:22.696299 env[1205]: 2025-07-10 00:37:22.691 [INFO][3762] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="e85ccdde7862fa4c3cb351013b3e8613e58276bf4b718c855f3f5e86224e6cc8" Namespace="calico-system" Pod="csi-node-driver-xcq57" WorkloadEndpoint="localhost-k8s-csi--node--driver--xcq57-eth0" Jul 10 00:37:22.701713 env[1205]: time="2025-07-10T00:37:22.701600462Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 10 00:37:22.701871 env[1205]: time="2025-07-10T00:37:22.701715860Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 10 00:37:22.701871 env[1205]: time="2025-07-10T00:37:22.701743912Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 10 00:37:22.702077 env[1205]: time="2025-07-10T00:37:22.702007747Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/ee9d6e8f4478ef709f58cbd1a1d53b0899154d7e46249e90d13b3be201c646fa pid=3908 runtime=io.containerd.runc.v2 Jul 10 00:37:22.706958 env[1205]: time="2025-07-10T00:37:22.706899719Z" level=info msg="CreateContainer within sandbox \"a9b16baf9167f063546de397fe293afe4d7f1fa587956023a3386b038e2fc145\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"ba1677fcfb7373ed82906c121a022ca7d72bf1f19008c9235da892dea5d8d61b\"" Jul 10 00:37:22.708300 env[1205]: time="2025-07-10T00:37:22.708262317Z" level=info msg="StartContainer for \"ba1677fcfb7373ed82906c121a022ca7d72bf1f19008c9235da892dea5d8d61b\"" Jul 10 00:37:22.709000 audit[3922]: NETFILTER_CFG table=filter:107 family=2 entries=44 op=nft_register_chain pid=3922 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 10 00:37:22.709000 audit[3922]: SYSCALL arch=c000003e syscall=46 success=yes exit=21952 a0=3 a1=7ffeba980080 a2=0 a3=7ffeba98006c items=0 ppid=3348 pid=3922 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:22.709000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 10 00:37:22.719064 env[1205]: time="2025-07-10T00:37:22.718980494Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 10 00:37:22.719201 env[1205]: time="2025-07-10T00:37:22.719041328Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 10 00:37:22.719201 env[1205]: time="2025-07-10T00:37:22.719056406Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 10 00:37:22.722930 env[1205]: time="2025-07-10T00:37:22.722880764Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/e85ccdde7862fa4c3cb351013b3e8613e58276bf4b718c855f3f5e86224e6cc8 pid=3941 runtime=io.containerd.runc.v2 Jul 10 00:37:22.727526 systemd[1]: Started cri-containerd-ee9d6e8f4478ef709f58cbd1a1d53b0899154d7e46249e90d13b3be201c646fa.scope. Jul 10 00:37:22.732532 systemd[1]: Started cri-containerd-ba1677fcfb7373ed82906c121a022ca7d72bf1f19008c9235da892dea5d8d61b.scope. Jul 10 00:37:22.736163 systemd-networkd[1023]: cali9ad06ea0f05: Link UP Jul 10 00:37:22.742698 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali9ad06ea0f05: link becomes ready Jul 10 00:37:22.742520 systemd-networkd[1023]: cali9ad06ea0f05: Gained carrier Jul 10 00:37:22.742000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:22.742000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:22.742000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:22.742000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:22.742000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:22.742000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:22.742000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:22.742000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:22.742000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:22.742000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:22.742000 audit: BPF prog-id=177 op=LOAD Jul 10 00:37:22.744000 audit[3920]: AVC avc: denied { bpf } for pid=3920 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:22.744000 audit[3920]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00019fc48 a2=10 a3=1c items=0 ppid=3908 pid=3920 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:22.744000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6565396436653866343437386566373039663538636264316131643533 Jul 10 00:37:22.744000 audit[3920]: AVC avc: denied { perfmon } for pid=3920 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:22.744000 audit[3920]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00019f6b0 a2=3c a3=c items=0 ppid=3908 pid=3920 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:22.744000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6565396436653866343437386566373039663538636264316131643533 Jul 10 00:37:22.744000 audit[3920]: AVC avc: denied { bpf } for pid=3920 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:22.744000 audit[3920]: AVC avc: denied { bpf } for pid=3920 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:22.744000 audit[3920]: AVC avc: denied { bpf } for pid=3920 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:22.744000 audit[3920]: AVC avc: denied { perfmon } for pid=3920 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:22.744000 audit[3920]: AVC avc: denied { perfmon } for pid=3920 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:22.744000 audit[3920]: AVC avc: denied { perfmon } for pid=3920 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:22.744000 audit[3920]: AVC avc: denied { perfmon } for pid=3920 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:22.744000 audit[3920]: AVC avc: denied { perfmon } for pid=3920 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:22.744000 audit[3920]: AVC avc: denied { bpf } for pid=3920 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:22.744000 audit[3920]: AVC avc: denied { bpf } for pid=3920 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:22.744000 audit: BPF prog-id=178 op=LOAD Jul 10 00:37:22.744000 audit[3920]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00019f9d8 a2=78 a3=c0003dca70 items=0 ppid=3908 pid=3920 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:22.744000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6565396436653866343437386566373039663538636264316131643533 Jul 10 00:37:22.744000 audit[3920]: AVC avc: denied { bpf } for pid=3920 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:22.744000 audit[3920]: AVC avc: denied { bpf } for pid=3920 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:22.744000 audit[3920]: AVC avc: denied { perfmon } for pid=3920 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:22.744000 audit[3920]: AVC avc: denied { perfmon } for pid=3920 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:22.744000 audit[3920]: AVC avc: denied { perfmon } for pid=3920 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:22.744000 audit[3920]: AVC avc: denied { perfmon } for pid=3920 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:22.744000 audit[3920]: AVC avc: denied { perfmon } for pid=3920 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:22.744000 audit[3920]: AVC avc: denied { bpf } for pid=3920 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:22.744000 audit[3920]: AVC avc: denied { bpf } for pid=3920 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:22.744000 audit: BPF prog-id=179 op=LOAD Jul 10 00:37:22.744000 audit[3920]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00019f770 a2=78 a3=c0003dcab8 items=0 ppid=3908 pid=3920 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:22.744000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6565396436653866343437386566373039663538636264316131643533 Jul 10 00:37:22.744000 audit: BPF prog-id=179 op=UNLOAD Jul 10 00:37:22.744000 audit: BPF prog-id=178 op=UNLOAD Jul 10 00:37:22.744000 audit[3920]: AVC avc: denied { bpf } for pid=3920 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:22.744000 audit[3920]: AVC avc: denied { bpf } for pid=3920 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:22.744000 audit[3920]: AVC avc: denied { bpf } for pid=3920 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:22.744000 audit[3920]: AVC avc: denied { perfmon } for pid=3920 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:22.744000 audit[3920]: AVC avc: denied { perfmon } for pid=3920 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:22.744000 audit[3920]: AVC avc: denied { perfmon } for pid=3920 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:22.744000 audit[3920]: AVC avc: denied { perfmon } for pid=3920 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:22.744000 audit[3920]: AVC avc: denied { perfmon } for pid=3920 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:22.744000 audit[3920]: AVC avc: denied { bpf } for pid=3920 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:22.744000 audit[3920]: AVC avc: denied { bpf } for pid=3920 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:22.744000 audit: BPF prog-id=180 op=LOAD Jul 10 00:37:22.744000 audit[3920]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00019fc30 a2=78 a3=c0003dcec8 items=0 ppid=3908 pid=3920 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:22.744000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6565396436653866343437386566373039663538636264316131643533 Jul 10 00:37:22.747377 systemd-resolved[1142]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 10 00:37:22.759773 env[1205]: 2025-07-10 00:37:22.319 [INFO][3764] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-calico--apiserver--79f4d77569--v77g9-eth0 calico-apiserver-79f4d77569- calico-apiserver 7ab2b8e4-3818-4286-9287-142885fbf432 991 0 2025-07-10 00:36:52 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:79f4d77569 projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s localhost calico-apiserver-79f4d77569-v77g9 eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] cali9ad06ea0f05 [] [] }} ContainerID="d8ad584e01ab4331b436942ab8b2cc815b29d0e577fedf021a6374bce83540a8" Namespace="calico-apiserver" Pod="calico-apiserver-79f4d77569-v77g9" WorkloadEndpoint="localhost-k8s-calico--apiserver--79f4d77569--v77g9-" Jul 10 00:37:22.759773 env[1205]: 2025-07-10 00:37:22.319 [INFO][3764] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="d8ad584e01ab4331b436942ab8b2cc815b29d0e577fedf021a6374bce83540a8" Namespace="calico-apiserver" Pod="calico-apiserver-79f4d77569-v77g9" WorkloadEndpoint="localhost-k8s-calico--apiserver--79f4d77569--v77g9-eth0" Jul 10 00:37:22.759773 env[1205]: 2025-07-10 00:37:22.366 [INFO][3811] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="d8ad584e01ab4331b436942ab8b2cc815b29d0e577fedf021a6374bce83540a8" HandleID="k8s-pod-network.d8ad584e01ab4331b436942ab8b2cc815b29d0e577fedf021a6374bce83540a8" Workload="localhost-k8s-calico--apiserver--79f4d77569--v77g9-eth0" Jul 10 00:37:22.759773 env[1205]: 2025-07-10 00:37:22.367 [INFO][3811] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="d8ad584e01ab4331b436942ab8b2cc815b29d0e577fedf021a6374bce83540a8" HandleID="k8s-pod-network.d8ad584e01ab4331b436942ab8b2cc815b29d0e577fedf021a6374bce83540a8" Workload="localhost-k8s-calico--apiserver--79f4d77569--v77g9-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0002c8fe0), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"localhost", "pod":"calico-apiserver-79f4d77569-v77g9", "timestamp":"2025-07-10 00:37:22.366914029 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 10 00:37:22.759773 env[1205]: 2025-07-10 00:37:22.367 [INFO][3811] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:37:22.759773 env[1205]: 2025-07-10 00:37:22.676 [INFO][3811] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:37:22.759773 env[1205]: 2025-07-10 00:37:22.676 [INFO][3811] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 10 00:37:22.759773 env[1205]: 2025-07-10 00:37:22.686 [INFO][3811] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.d8ad584e01ab4331b436942ab8b2cc815b29d0e577fedf021a6374bce83540a8" host="localhost" Jul 10 00:37:22.759773 env[1205]: 2025-07-10 00:37:22.696 [INFO][3811] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 10 00:37:22.759773 env[1205]: 2025-07-10 00:37:22.702 [INFO][3811] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 10 00:37:22.759773 env[1205]: 2025-07-10 00:37:22.704 [INFO][3811] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 10 00:37:22.759773 env[1205]: 2025-07-10 00:37:22.706 [INFO][3811] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 10 00:37:22.759773 env[1205]: 2025-07-10 00:37:22.706 [INFO][3811] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.d8ad584e01ab4331b436942ab8b2cc815b29d0e577fedf021a6374bce83540a8" host="localhost" Jul 10 00:37:22.759773 env[1205]: 2025-07-10 00:37:22.707 [INFO][3811] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.d8ad584e01ab4331b436942ab8b2cc815b29d0e577fedf021a6374bce83540a8 Jul 10 00:37:22.759773 env[1205]: 2025-07-10 00:37:22.712 [INFO][3811] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.d8ad584e01ab4331b436942ab8b2cc815b29d0e577fedf021a6374bce83540a8" host="localhost" Jul 10 00:37:22.759773 env[1205]: 2025-07-10 00:37:22.719 [INFO][3811] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.133/26] block=192.168.88.128/26 handle="k8s-pod-network.d8ad584e01ab4331b436942ab8b2cc815b29d0e577fedf021a6374bce83540a8" host="localhost" Jul 10 00:37:22.759773 env[1205]: 2025-07-10 00:37:22.719 [INFO][3811] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.133/26] handle="k8s-pod-network.d8ad584e01ab4331b436942ab8b2cc815b29d0e577fedf021a6374bce83540a8" host="localhost" Jul 10 00:37:22.759773 env[1205]: 2025-07-10 00:37:22.719 [INFO][3811] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:37:22.759773 env[1205]: 2025-07-10 00:37:22.719 [INFO][3811] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.133/26] IPv6=[] ContainerID="d8ad584e01ab4331b436942ab8b2cc815b29d0e577fedf021a6374bce83540a8" HandleID="k8s-pod-network.d8ad584e01ab4331b436942ab8b2cc815b29d0e577fedf021a6374bce83540a8" Workload="localhost-k8s-calico--apiserver--79f4d77569--v77g9-eth0" Jul 10 00:37:22.760461 env[1205]: 2025-07-10 00:37:22.724 [INFO][3764] cni-plugin/k8s.go 418: Populated endpoint ContainerID="d8ad584e01ab4331b436942ab8b2cc815b29d0e577fedf021a6374bce83540a8" Namespace="calico-apiserver" Pod="calico-apiserver-79f4d77569-v77g9" WorkloadEndpoint="localhost-k8s-calico--apiserver--79f4d77569--v77g9-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--79f4d77569--v77g9-eth0", GenerateName:"calico-apiserver-79f4d77569-", Namespace:"calico-apiserver", SelfLink:"", UID:"7ab2b8e4-3818-4286-9287-142885fbf432", ResourceVersion:"991", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 36, 52, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"79f4d77569", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"calico-apiserver-79f4d77569-v77g9", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali9ad06ea0f05", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:37:22.760461 env[1205]: 2025-07-10 00:37:22.725 [INFO][3764] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.133/32] ContainerID="d8ad584e01ab4331b436942ab8b2cc815b29d0e577fedf021a6374bce83540a8" Namespace="calico-apiserver" Pod="calico-apiserver-79f4d77569-v77g9" WorkloadEndpoint="localhost-k8s-calico--apiserver--79f4d77569--v77g9-eth0" Jul 10 00:37:22.760461 env[1205]: 2025-07-10 00:37:22.725 [INFO][3764] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali9ad06ea0f05 ContainerID="d8ad584e01ab4331b436942ab8b2cc815b29d0e577fedf021a6374bce83540a8" Namespace="calico-apiserver" Pod="calico-apiserver-79f4d77569-v77g9" WorkloadEndpoint="localhost-k8s-calico--apiserver--79f4d77569--v77g9-eth0" Jul 10 00:37:22.760461 env[1205]: 2025-07-10 00:37:22.743 [INFO][3764] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="d8ad584e01ab4331b436942ab8b2cc815b29d0e577fedf021a6374bce83540a8" Namespace="calico-apiserver" Pod="calico-apiserver-79f4d77569-v77g9" WorkloadEndpoint="localhost-k8s-calico--apiserver--79f4d77569--v77g9-eth0" Jul 10 00:37:22.760461 env[1205]: 2025-07-10 00:37:22.743 [INFO][3764] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="d8ad584e01ab4331b436942ab8b2cc815b29d0e577fedf021a6374bce83540a8" Namespace="calico-apiserver" Pod="calico-apiserver-79f4d77569-v77g9" WorkloadEndpoint="localhost-k8s-calico--apiserver--79f4d77569--v77g9-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--79f4d77569--v77g9-eth0", GenerateName:"calico-apiserver-79f4d77569-", Namespace:"calico-apiserver", SelfLink:"", UID:"7ab2b8e4-3818-4286-9287-142885fbf432", ResourceVersion:"991", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 36, 52, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"79f4d77569", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"d8ad584e01ab4331b436942ab8b2cc815b29d0e577fedf021a6374bce83540a8", Pod:"calico-apiserver-79f4d77569-v77g9", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali9ad06ea0f05", MAC:"62:8d:c7:ae:d4:1a", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:37:22.760461 env[1205]: 2025-07-10 00:37:22.751 [INFO][3764] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="d8ad584e01ab4331b436942ab8b2cc815b29d0e577fedf021a6374bce83540a8" Namespace="calico-apiserver" Pod="calico-apiserver-79f4d77569-v77g9" WorkloadEndpoint="localhost-k8s-calico--apiserver--79f4d77569--v77g9-eth0" Jul 10 00:37:22.760000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:22.760000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:22.760000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:22.760000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:22.760000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:22.760000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:22.760000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:22.760000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:22.760000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:22.760000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:22.760000 audit: BPF prog-id=181 op=LOAD Jul 10 00:37:22.762000 audit[3945]: AVC avc: denied { bpf } for pid=3945 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:22.766106 systemd[1]: Started cri-containerd-e85ccdde7862fa4c3cb351013b3e8613e58276bf4b718c855f3f5e86224e6cc8.scope. Jul 10 00:37:22.762000 audit[3945]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=3849 pid=3945 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:22.762000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6261313637376663666237333733656438323930366331323161303232 Jul 10 00:37:22.766000 audit[3945]: AVC avc: denied { perfmon } for pid=3945 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:22.766000 audit[3945]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=3849 pid=3945 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:22.766000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6261313637376663666237333733656438323930366331323161303232 Jul 10 00:37:22.766000 audit[3945]: AVC avc: denied { bpf } for pid=3945 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:22.766000 audit[3945]: AVC avc: denied { bpf } for pid=3945 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:22.766000 audit[3945]: AVC avc: denied { bpf } for pid=3945 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:22.766000 audit[3945]: AVC avc: denied { perfmon } for pid=3945 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:22.766000 audit[3945]: AVC avc: denied { perfmon } for pid=3945 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:22.766000 audit[3945]: AVC avc: denied { perfmon } for pid=3945 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:22.766000 audit[3945]: AVC avc: denied { perfmon } for pid=3945 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:22.766000 audit[3945]: AVC avc: denied { perfmon } for pid=3945 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:22.766000 audit[3945]: AVC avc: denied { bpf } for pid=3945 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:22.766000 audit[3945]: AVC avc: denied { bpf } for pid=3945 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:22.766000 audit: BPF prog-id=182 op=LOAD Jul 10 00:37:22.766000 audit[3945]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c000093970 items=0 ppid=3849 pid=3945 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:22.766000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6261313637376663666237333733656438323930366331323161303232 Jul 10 00:37:22.766000 audit[3945]: AVC avc: denied { bpf } for pid=3945 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:22.766000 audit[3945]: AVC avc: denied { bpf } for pid=3945 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:22.766000 audit[3945]: AVC avc: denied { perfmon } for pid=3945 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:22.766000 audit[3945]: AVC avc: denied { perfmon } for pid=3945 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:22.766000 audit[3945]: AVC avc: denied { perfmon } for pid=3945 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:22.766000 audit[3945]: AVC avc: denied { perfmon } for pid=3945 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:22.766000 audit[3945]: AVC avc: denied { perfmon } for pid=3945 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:22.766000 audit[3945]: AVC avc: denied { bpf } for pid=3945 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:22.766000 audit[3945]: AVC avc: denied { bpf } for pid=3945 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:22.766000 audit: BPF prog-id=183 op=LOAD Jul 10 00:37:22.766000 audit[3945]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0000939b8 items=0 ppid=3849 pid=3945 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:22.766000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6261313637376663666237333733656438323930366331323161303232 Jul 10 00:37:22.766000 audit: BPF prog-id=183 op=UNLOAD Jul 10 00:37:22.766000 audit: BPF prog-id=182 op=UNLOAD Jul 10 00:37:22.767000 audit[3945]: AVC avc: denied { bpf } for pid=3945 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:22.767000 audit[3945]: AVC avc: denied { bpf } for pid=3945 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:22.767000 audit[3945]: AVC avc: denied { bpf } for pid=3945 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:22.767000 audit[3945]: AVC avc: denied { perfmon } for pid=3945 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:22.767000 audit[3945]: AVC avc: denied { perfmon } for pid=3945 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:22.767000 audit[3945]: AVC avc: denied { perfmon } for pid=3945 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:22.767000 audit[3945]: AVC avc: denied { perfmon } for pid=3945 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:22.767000 audit[3945]: AVC avc: denied { perfmon } for pid=3945 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:22.767000 audit[3945]: AVC avc: denied { bpf } for pid=3945 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:22.767000 audit[3945]: AVC avc: denied { bpf } for pid=3945 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:22.767000 audit: BPF prog-id=184 op=LOAD Jul 10 00:37:22.767000 audit[3945]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c000093dc8 items=0 ppid=3849 pid=3945 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:22.767000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6261313637376663666237333733656438323930366331323161303232 Jul 10 00:37:22.783419 env[1205]: time="2025-07-10T00:37:22.783367083Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-89f4c7b56-xqnjf,Uid:e898c44d-80a2-4702-a367-04a77e5bac00,Namespace:calico-system,Attempt:1,} returns sandbox id \"ee9d6e8f4478ef709f58cbd1a1d53b0899154d7e46249e90d13b3be201c646fa\"" Jul 10 00:37:22.782000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:22.782000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:22.782000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:22.782000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:22.782000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:22.782000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:22.782000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:22.782000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:22.782000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:22.782000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:22.782000 audit: BPF prog-id=185 op=LOAD Jul 10 00:37:22.784940 env[1205]: time="2025-07-10T00:37:22.784918375Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.2\"" Jul 10 00:37:22.784000 audit[3975]: AVC avc: denied { bpf } for pid=3975 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:22.784000 audit[3975]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=3941 pid=3975 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:22.784000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6538356363646465373836326661346333636233353130313362336538 Jul 10 00:37:22.784000 audit[3975]: AVC avc: denied { perfmon } for pid=3975 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:22.784000 audit[3975]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=3941 pid=3975 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:22.784000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6538356363646465373836326661346333636233353130313362336538 Jul 10 00:37:22.784000 audit[3975]: AVC avc: denied { bpf } for pid=3975 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:22.784000 audit[3975]: AVC avc: denied { bpf } for pid=3975 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:22.784000 audit[3975]: AVC avc: denied { bpf } for pid=3975 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:22.784000 audit[3975]: AVC avc: denied { perfmon } for pid=3975 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:22.784000 audit[3975]: AVC avc: denied { perfmon } for pid=3975 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:22.784000 audit[3975]: AVC avc: denied { perfmon } for pid=3975 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:22.784000 audit[3975]: AVC avc: denied { perfmon } for pid=3975 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:22.784000 audit[3975]: AVC avc: denied { perfmon } for pid=3975 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:22.784000 audit[3975]: AVC avc: denied { bpf } for pid=3975 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:22.784000 audit[3975]: AVC avc: denied { bpf } for pid=3975 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:22.784000 audit: BPF prog-id=186 op=LOAD Jul 10 00:37:22.784000 audit[3975]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0003caa70 items=0 ppid=3941 pid=3975 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:22.784000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6538356363646465373836326661346333636233353130313362336538 Jul 10 00:37:22.784000 audit[3975]: AVC avc: denied { bpf } for pid=3975 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:22.784000 audit[3975]: AVC avc: denied { bpf } for pid=3975 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:22.784000 audit[3975]: AVC avc: denied { perfmon } for pid=3975 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:22.784000 audit[3975]: AVC avc: denied { perfmon } for pid=3975 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:22.784000 audit[3975]: AVC avc: denied { perfmon } for pid=3975 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:22.784000 audit[3975]: AVC avc: denied { perfmon } for pid=3975 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:22.784000 audit[3975]: AVC avc: denied { perfmon } for pid=3975 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:22.784000 audit[3975]: AVC avc: denied { bpf } for pid=3975 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:22.784000 audit[3975]: AVC avc: denied { bpf } for pid=3975 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:22.784000 audit: BPF prog-id=187 op=LOAD Jul 10 00:37:22.784000 audit[3975]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0003caab8 items=0 ppid=3941 pid=3975 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:22.784000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6538356363646465373836326661346333636233353130313362336538 Jul 10 00:37:22.784000 audit: BPF prog-id=187 op=UNLOAD Jul 10 00:37:22.784000 audit: BPF prog-id=186 op=UNLOAD Jul 10 00:37:22.784000 audit[3975]: AVC avc: denied { bpf } for pid=3975 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:22.784000 audit[3975]: AVC avc: denied { bpf } for pid=3975 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:22.784000 audit[3975]: AVC avc: denied { bpf } for pid=3975 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:22.784000 audit[4009]: NETFILTER_CFG table=filter:108 family=2 entries=62 op=nft_register_chain pid=4009 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 10 00:37:22.784000 audit[3975]: AVC avc: denied { perfmon } for pid=3975 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:22.784000 audit[3975]: AVC avc: denied { perfmon } for pid=3975 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:22.784000 audit[3975]: AVC avc: denied { perfmon } for pid=3975 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:22.784000 audit[3975]: AVC avc: denied { perfmon } for pid=3975 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:22.784000 audit[3975]: AVC avc: denied { perfmon } for pid=3975 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:22.784000 audit[3975]: AVC avc: denied { bpf } for pid=3975 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:22.784000 audit[4009]: SYSCALL arch=c000003e syscall=46 success=yes exit=31772 a0=3 a1=7fff5e871920 a2=0 a3=7fff5e87190c items=0 ppid=3348 pid=4009 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:22.784000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 10 00:37:22.784000 audit[3975]: AVC avc: denied { bpf } for pid=3975 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:22.784000 audit: BPF prog-id=188 op=LOAD Jul 10 00:37:22.784000 audit[3975]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0003caec8 items=0 ppid=3941 pid=3975 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:22.784000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6538356363646465373836326661346333636233353130313362336538 Jul 10 00:37:22.787737 systemd-resolved[1142]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 10 00:37:22.792146 env[1205]: time="2025-07-10T00:37:22.792107278Z" level=info msg="StartContainer for \"ba1677fcfb7373ed82906c121a022ca7d72bf1f19008c9235da892dea5d8d61b\" returns successfully" Jul 10 00:37:22.799624 env[1205]: time="2025-07-10T00:37:22.799547402Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 10 00:37:22.799624 env[1205]: time="2025-07-10T00:37:22.799586947Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 10 00:37:22.799847 env[1205]: time="2025-07-10T00:37:22.799632322Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 10 00:37:22.799914 env[1205]: time="2025-07-10T00:37:22.799868645Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/d8ad584e01ab4331b436942ab8b2cc815b29d0e577fedf021a6374bce83540a8 pid=4029 runtime=io.containerd.runc.v2 Jul 10 00:37:22.801279 env[1205]: time="2025-07-10T00:37:22.801248005Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-xcq57,Uid:11ff2135-d9e8-4055-b855-c59ae8ddcd79,Namespace:calico-system,Attempt:1,} returns sandbox id \"e85ccdde7862fa4c3cb351013b3e8613e58276bf4b718c855f3f5e86224e6cc8\"" Jul 10 00:37:22.813565 systemd[1]: Started cri-containerd-d8ad584e01ab4331b436942ab8b2cc815b29d0e577fedf021a6374bce83540a8.scope. Jul 10 00:37:22.826000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:22.826000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:22.826000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:22.826000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:22.826000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:22.826000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:22.826000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:22.826000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:22.826000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:22.826000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:22.826000 audit: BPF prog-id=189 op=LOAD Jul 10 00:37:22.827000 audit[4047]: AVC avc: denied { bpf } for pid=4047 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:22.827000 audit[4047]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=4029 pid=4047 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:22.827000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6438616435383465303161623433333162343336393432616238623263 Jul 10 00:37:22.827000 audit[4047]: AVC avc: denied { perfmon } for pid=4047 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:22.827000 audit[4047]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001176b0 a2=3c a3=c items=0 ppid=4029 pid=4047 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:22.827000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6438616435383465303161623433333162343336393432616238623263 Jul 10 00:37:22.827000 audit[4047]: AVC avc: denied { bpf } for pid=4047 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:22.827000 audit[4047]: AVC avc: denied { bpf } for pid=4047 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:22.827000 audit[4047]: AVC avc: denied { bpf } for pid=4047 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:22.827000 audit[4047]: AVC avc: denied { perfmon } for pid=4047 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:22.827000 audit[4047]: AVC avc: denied { perfmon } for pid=4047 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:22.827000 audit[4047]: AVC avc: denied { perfmon } for pid=4047 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:22.827000 audit[4047]: AVC avc: denied { perfmon } for pid=4047 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:22.827000 audit[4047]: AVC avc: denied { perfmon } for pid=4047 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:22.827000 audit[4047]: AVC avc: denied { bpf } for pid=4047 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:22.827000 audit[4047]: AVC avc: denied { bpf } for pid=4047 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:22.827000 audit: BPF prog-id=190 op=LOAD Jul 10 00:37:22.827000 audit[4047]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001179d8 a2=78 a3=c00029db00 items=0 ppid=4029 pid=4047 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:22.827000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6438616435383465303161623433333162343336393432616238623263 Jul 10 00:37:22.827000 audit[4047]: AVC avc: denied { bpf } for pid=4047 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:22.827000 audit[4047]: AVC avc: denied { bpf } for pid=4047 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:22.827000 audit[4047]: AVC avc: denied { perfmon } for pid=4047 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:22.827000 audit[4047]: AVC avc: denied { perfmon } for pid=4047 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:22.827000 audit[4047]: AVC avc: denied { perfmon } for pid=4047 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:22.827000 audit[4047]: AVC avc: denied { perfmon } for pid=4047 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:22.827000 audit[4047]: AVC avc: denied { perfmon } for pid=4047 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:22.827000 audit[4047]: AVC avc: denied { bpf } for pid=4047 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:22.827000 audit[4047]: AVC avc: denied { bpf } for pid=4047 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:22.827000 audit: BPF prog-id=191 op=LOAD Jul 10 00:37:22.827000 audit[4047]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000117770 a2=78 a3=c00029db48 items=0 ppid=4029 pid=4047 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:22.827000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6438616435383465303161623433333162343336393432616238623263 Jul 10 00:37:22.827000 audit: BPF prog-id=191 op=UNLOAD Jul 10 00:37:22.827000 audit: BPF prog-id=190 op=UNLOAD Jul 10 00:37:22.827000 audit[4047]: AVC avc: denied { bpf } for pid=4047 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:22.827000 audit[4047]: AVC avc: denied { bpf } for pid=4047 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:22.827000 audit[4047]: AVC avc: denied { bpf } for pid=4047 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:22.827000 audit[4047]: AVC avc: denied { perfmon } for pid=4047 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:22.827000 audit[4047]: AVC avc: denied { perfmon } for pid=4047 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:22.827000 audit[4047]: AVC avc: denied { perfmon } for pid=4047 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:22.827000 audit[4047]: AVC avc: denied { perfmon } for pid=4047 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:22.827000 audit[4047]: AVC avc: denied { perfmon } for pid=4047 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:22.827000 audit[4047]: AVC avc: denied { bpf } for pid=4047 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:22.827000 audit[4047]: AVC avc: denied { bpf } for pid=4047 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:22.827000 audit: BPF prog-id=192 op=LOAD Jul 10 00:37:22.827000 audit[4047]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000117c30 a2=78 a3=c00029df58 items=0 ppid=4029 pid=4047 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:22.827000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6438616435383465303161623433333162343336393432616238623263 Jul 10 00:37:22.828000 audit[3978]: AVC avc: denied { getattr } for pid=3978 comm="coredns" path="cgroup:[4026532319]" dev="nsfs" ino=4026532319 scontext=system_u:system_r:svirt_lxc_net_t:s0:c454,c654 tcontext=system_u:object_r:nsfs_t:s0 tclass=file permissive=0 Jul 10 00:37:22.828000 audit[3978]: SYSCALL arch=c000003e syscall=262 success=no exit=-13 a0=ffffffffffffff9c a1=c00005aa38 a2=c00011ce08 a3=0 items=0 ppid=3849 pid=3978 auid=4294967295 uid=65532 gid=65532 euid=65532 suid=65532 fsuid=65532 egid=65532 sgid=65532 fsgid=65532 tty=(none) ses=4294967295 comm="coredns" exe="/coredns" subj=system_u:system_r:svirt_lxc_net_t:s0:c454,c654 key=(null) Jul 10 00:37:22.828000 audit: PROCTITLE proctitle=2F636F7265646E73002D636F6E66002F6574632F636F7265646E732F436F726566696C65 Jul 10 00:37:22.830512 systemd-resolved[1142]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 10 00:37:22.847579 systemd[1]: run-netns-cni\x2d368722e4\x2d13bc\x2db527\x2db25a\x2d2f81906c94ab.mount: Deactivated successfully. Jul 10 00:37:22.847954 systemd[1]: run-netns-cni\x2de9348bd7\x2d1614\x2d2a21\x2d1b0d\x2d728c8f1822b3.mount: Deactivated successfully. Jul 10 00:37:22.848265 systemd[1]: run-netns-cni\x2d380bc42b\x2d9ab4\x2d4196\x2deecd\x2d531fce001a88.mount: Deactivated successfully. Jul 10 00:37:22.848409 systemd[1]: run-netns-cni\x2d0d969d09\x2dc013\x2d9011\x2d4a73\x2de345b2dda5d1.mount: Deactivated successfully. Jul 10 00:37:22.856832 env[1205]: time="2025-07-10T00:37:22.856791305Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-79f4d77569-v77g9,Uid:7ab2b8e4-3818-4286-9287-142885fbf432,Namespace:calico-apiserver,Attempt:1,} returns sandbox id \"d8ad584e01ab4331b436942ab8b2cc815b29d0e577fedf021a6374bce83540a8\"" Jul 10 00:37:22.889499 env[1205]: time="2025-07-10T00:37:22.889457648Z" level=info msg="StopPodSandbox for \"57474fc9fca6152a4e4b87d3af2e28153a81adbc34eb97e6e1b76d35c1f7cc2e\"" Jul 10 00:37:22.890021 env[1205]: time="2025-07-10T00:37:22.889457678Z" level=info msg="StopPodSandbox for \"5abb90b786ac02b562c618112212ee2dfbee220e28d90eadb110eb3731498daf\"" Jul 10 00:37:22.974590 env[1205]: 2025-07-10 00:37:22.941 [INFO][4102] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="57474fc9fca6152a4e4b87d3af2e28153a81adbc34eb97e6e1b76d35c1f7cc2e" Jul 10 00:37:22.974590 env[1205]: 2025-07-10 00:37:22.941 [INFO][4102] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="57474fc9fca6152a4e4b87d3af2e28153a81adbc34eb97e6e1b76d35c1f7cc2e" iface="eth0" netns="/var/run/netns/cni-3461d854-d213-5a64-634b-dc5d16a0c817" Jul 10 00:37:22.974590 env[1205]: 2025-07-10 00:37:22.942 [INFO][4102] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="57474fc9fca6152a4e4b87d3af2e28153a81adbc34eb97e6e1b76d35c1f7cc2e" iface="eth0" netns="/var/run/netns/cni-3461d854-d213-5a64-634b-dc5d16a0c817" Jul 10 00:37:22.974590 env[1205]: 2025-07-10 00:37:22.942 [INFO][4102] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="57474fc9fca6152a4e4b87d3af2e28153a81adbc34eb97e6e1b76d35c1f7cc2e" iface="eth0" netns="/var/run/netns/cni-3461d854-d213-5a64-634b-dc5d16a0c817" Jul 10 00:37:22.974590 env[1205]: 2025-07-10 00:37:22.942 [INFO][4102] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="57474fc9fca6152a4e4b87d3af2e28153a81adbc34eb97e6e1b76d35c1f7cc2e" Jul 10 00:37:22.974590 env[1205]: 2025-07-10 00:37:22.942 [INFO][4102] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="57474fc9fca6152a4e4b87d3af2e28153a81adbc34eb97e6e1b76d35c1f7cc2e" Jul 10 00:37:22.974590 env[1205]: 2025-07-10 00:37:22.962 [INFO][4123] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="57474fc9fca6152a4e4b87d3af2e28153a81adbc34eb97e6e1b76d35c1f7cc2e" HandleID="k8s-pod-network.57474fc9fca6152a4e4b87d3af2e28153a81adbc34eb97e6e1b76d35c1f7cc2e" Workload="localhost-k8s-goldmane--768f4c5c69--z2lth-eth0" Jul 10 00:37:22.974590 env[1205]: 2025-07-10 00:37:22.962 [INFO][4123] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:37:22.974590 env[1205]: 2025-07-10 00:37:22.962 [INFO][4123] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:37:22.974590 env[1205]: 2025-07-10 00:37:22.969 [WARNING][4123] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="57474fc9fca6152a4e4b87d3af2e28153a81adbc34eb97e6e1b76d35c1f7cc2e" HandleID="k8s-pod-network.57474fc9fca6152a4e4b87d3af2e28153a81adbc34eb97e6e1b76d35c1f7cc2e" Workload="localhost-k8s-goldmane--768f4c5c69--z2lth-eth0" Jul 10 00:37:22.974590 env[1205]: 2025-07-10 00:37:22.969 [INFO][4123] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="57474fc9fca6152a4e4b87d3af2e28153a81adbc34eb97e6e1b76d35c1f7cc2e" HandleID="k8s-pod-network.57474fc9fca6152a4e4b87d3af2e28153a81adbc34eb97e6e1b76d35c1f7cc2e" Workload="localhost-k8s-goldmane--768f4c5c69--z2lth-eth0" Jul 10 00:37:22.974590 env[1205]: 2025-07-10 00:37:22.971 [INFO][4123] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:37:22.974590 env[1205]: 2025-07-10 00:37:22.973 [INFO][4102] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="57474fc9fca6152a4e4b87d3af2e28153a81adbc34eb97e6e1b76d35c1f7cc2e" Jul 10 00:37:22.977530 systemd[1]: run-netns-cni\x2d3461d854\x2dd213\x2d5a64\x2d634b\x2ddc5d16a0c817.mount: Deactivated successfully. Jul 10 00:37:22.978873 env[1205]: time="2025-07-10T00:37:22.978831477Z" level=info msg="TearDown network for sandbox \"57474fc9fca6152a4e4b87d3af2e28153a81adbc34eb97e6e1b76d35c1f7cc2e\" successfully" Jul 10 00:37:22.978873 env[1205]: time="2025-07-10T00:37:22.978871562Z" level=info msg="StopPodSandbox for \"57474fc9fca6152a4e4b87d3af2e28153a81adbc34eb97e6e1b76d35c1f7cc2e\" returns successfully" Jul 10 00:37:22.979761 env[1205]: time="2025-07-10T00:37:22.979734802Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-768f4c5c69-z2lth,Uid:8eadc06b-a096-4667-a191-bf6882f37d75,Namespace:calico-system,Attempt:1,}" Jul 10 00:37:22.980775 env[1205]: 2025-07-10 00:37:22.928 [INFO][4101] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="5abb90b786ac02b562c618112212ee2dfbee220e28d90eadb110eb3731498daf" Jul 10 00:37:22.980775 env[1205]: 2025-07-10 00:37:22.928 [INFO][4101] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="5abb90b786ac02b562c618112212ee2dfbee220e28d90eadb110eb3731498daf" iface="eth0" netns="/var/run/netns/cni-f05930be-f37c-4872-1567-5e5bda561bf3" Jul 10 00:37:22.980775 env[1205]: 2025-07-10 00:37:22.928 [INFO][4101] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="5abb90b786ac02b562c618112212ee2dfbee220e28d90eadb110eb3731498daf" iface="eth0" netns="/var/run/netns/cni-f05930be-f37c-4872-1567-5e5bda561bf3" Jul 10 00:37:22.980775 env[1205]: 2025-07-10 00:37:22.928 [INFO][4101] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="5abb90b786ac02b562c618112212ee2dfbee220e28d90eadb110eb3731498daf" iface="eth0" netns="/var/run/netns/cni-f05930be-f37c-4872-1567-5e5bda561bf3" Jul 10 00:37:22.980775 env[1205]: 2025-07-10 00:37:22.929 [INFO][4101] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="5abb90b786ac02b562c618112212ee2dfbee220e28d90eadb110eb3731498daf" Jul 10 00:37:22.980775 env[1205]: 2025-07-10 00:37:22.929 [INFO][4101] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="5abb90b786ac02b562c618112212ee2dfbee220e28d90eadb110eb3731498daf" Jul 10 00:37:22.980775 env[1205]: 2025-07-10 00:37:22.962 [INFO][4117] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="5abb90b786ac02b562c618112212ee2dfbee220e28d90eadb110eb3731498daf" HandleID="k8s-pod-network.5abb90b786ac02b562c618112212ee2dfbee220e28d90eadb110eb3731498daf" Workload="localhost-k8s-coredns--668d6bf9bc--fc26s-eth0" Jul 10 00:37:22.980775 env[1205]: 2025-07-10 00:37:22.962 [INFO][4117] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:37:22.980775 env[1205]: 2025-07-10 00:37:22.971 [INFO][4117] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:37:22.980775 env[1205]: 2025-07-10 00:37:22.976 [WARNING][4117] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="5abb90b786ac02b562c618112212ee2dfbee220e28d90eadb110eb3731498daf" HandleID="k8s-pod-network.5abb90b786ac02b562c618112212ee2dfbee220e28d90eadb110eb3731498daf" Workload="localhost-k8s-coredns--668d6bf9bc--fc26s-eth0" Jul 10 00:37:22.980775 env[1205]: 2025-07-10 00:37:22.976 [INFO][4117] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="5abb90b786ac02b562c618112212ee2dfbee220e28d90eadb110eb3731498daf" HandleID="k8s-pod-network.5abb90b786ac02b562c618112212ee2dfbee220e28d90eadb110eb3731498daf" Workload="localhost-k8s-coredns--668d6bf9bc--fc26s-eth0" Jul 10 00:37:22.980775 env[1205]: 2025-07-10 00:37:22.977 [INFO][4117] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:37:22.980775 env[1205]: 2025-07-10 00:37:22.979 [INFO][4101] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="5abb90b786ac02b562c618112212ee2dfbee220e28d90eadb110eb3731498daf" Jul 10 00:37:22.981090 env[1205]: time="2025-07-10T00:37:22.980915838Z" level=info msg="TearDown network for sandbox \"5abb90b786ac02b562c618112212ee2dfbee220e28d90eadb110eb3731498daf\" successfully" Jul 10 00:37:22.981090 env[1205]: time="2025-07-10T00:37:22.980946817Z" level=info msg="StopPodSandbox for \"5abb90b786ac02b562c618112212ee2dfbee220e28d90eadb110eb3731498daf\" returns successfully" Jul 10 00:37:22.981525 kubelet[1947]: E0710 00:37:22.981149 1947 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:37:22.983928 env[1205]: time="2025-07-10T00:37:22.983885913Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-fc26s,Uid:16b05d7c-51b7-4fb7-a4cb-692b527960e6,Namespace:kube-system,Attempt:1,}" Jul 10 00:37:22.984199 systemd[1]: run-netns-cni\x2df05930be\x2df37c\x2d4872\x2d1567\x2d5e5bda561bf3.mount: Deactivated successfully. Jul 10 00:37:23.090396 kubelet[1947]: E0710 00:37:23.090360 1947 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:37:23.108256 systemd-networkd[1023]: cali6ce2de465ce: Link UP Jul 10 00:37:23.112077 systemd-networkd[1023]: cali6ce2de465ce: Gained carrier Jul 10 00:37:23.112696 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali6ce2de465ce: link becomes ready Jul 10 00:37:23.124927 kubelet[1947]: I0710 00:37:23.121941 1947 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/coredns-668d6bf9bc-sm7jj" podStartSLOduration=42.121916294 podStartE2EDuration="42.121916294s" podCreationTimestamp="2025-07-10 00:36:41 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-10 00:37:23.110218247 +0000 UTC m=+48.532643285" watchObservedRunningTime="2025-07-10 00:37:23.121916294 +0000 UTC m=+48.544341302" Jul 10 00:37:23.125123 env[1205]: 2025-07-10 00:37:23.046 [INFO][4143] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-coredns--668d6bf9bc--fc26s-eth0 coredns-668d6bf9bc- kube-system 16b05d7c-51b7-4fb7-a4cb-692b527960e6 1020 0 2025-07-10 00:36:41 +0000 UTC map[k8s-app:kube-dns pod-template-hash:668d6bf9bc projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s localhost coredns-668d6bf9bc-fc26s eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] cali6ce2de465ce [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] [] }} ContainerID="63c0a9348846dc3af723609aacd71233ded6647576fb324ef5b5105cdbac78c8" Namespace="kube-system" Pod="coredns-668d6bf9bc-fc26s" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--fc26s-" Jul 10 00:37:23.125123 env[1205]: 2025-07-10 00:37:23.047 [INFO][4143] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="63c0a9348846dc3af723609aacd71233ded6647576fb324ef5b5105cdbac78c8" Namespace="kube-system" Pod="coredns-668d6bf9bc-fc26s" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--fc26s-eth0" Jul 10 00:37:23.125123 env[1205]: 2025-07-10 00:37:23.069 [INFO][4166] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="63c0a9348846dc3af723609aacd71233ded6647576fb324ef5b5105cdbac78c8" HandleID="k8s-pod-network.63c0a9348846dc3af723609aacd71233ded6647576fb324ef5b5105cdbac78c8" Workload="localhost-k8s-coredns--668d6bf9bc--fc26s-eth0" Jul 10 00:37:23.125123 env[1205]: 2025-07-10 00:37:23.069 [INFO][4166] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="63c0a9348846dc3af723609aacd71233ded6647576fb324ef5b5105cdbac78c8" HandleID="k8s-pod-network.63c0a9348846dc3af723609aacd71233ded6647576fb324ef5b5105cdbac78c8" Workload="localhost-k8s-coredns--668d6bf9bc--fc26s-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc000354130), Attrs:map[string]string{"namespace":"kube-system", "node":"localhost", "pod":"coredns-668d6bf9bc-fc26s", "timestamp":"2025-07-10 00:37:23.069676594 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 10 00:37:23.125123 env[1205]: 2025-07-10 00:37:23.069 [INFO][4166] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:37:23.125123 env[1205]: 2025-07-10 00:37:23.069 [INFO][4166] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:37:23.125123 env[1205]: 2025-07-10 00:37:23.069 [INFO][4166] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 10 00:37:23.125123 env[1205]: 2025-07-10 00:37:23.076 [INFO][4166] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.63c0a9348846dc3af723609aacd71233ded6647576fb324ef5b5105cdbac78c8" host="localhost" Jul 10 00:37:23.125123 env[1205]: 2025-07-10 00:37:23.080 [INFO][4166] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 10 00:37:23.125123 env[1205]: 2025-07-10 00:37:23.083 [INFO][4166] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 10 00:37:23.125123 env[1205]: 2025-07-10 00:37:23.085 [INFO][4166] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 10 00:37:23.125123 env[1205]: 2025-07-10 00:37:23.088 [INFO][4166] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 10 00:37:23.125123 env[1205]: 2025-07-10 00:37:23.088 [INFO][4166] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.63c0a9348846dc3af723609aacd71233ded6647576fb324ef5b5105cdbac78c8" host="localhost" Jul 10 00:37:23.125123 env[1205]: 2025-07-10 00:37:23.089 [INFO][4166] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.63c0a9348846dc3af723609aacd71233ded6647576fb324ef5b5105cdbac78c8 Jul 10 00:37:23.125123 env[1205]: 2025-07-10 00:37:23.094 [INFO][4166] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.63c0a9348846dc3af723609aacd71233ded6647576fb324ef5b5105cdbac78c8" host="localhost" Jul 10 00:37:23.125123 env[1205]: 2025-07-10 00:37:23.100 [INFO][4166] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.134/26] block=192.168.88.128/26 handle="k8s-pod-network.63c0a9348846dc3af723609aacd71233ded6647576fb324ef5b5105cdbac78c8" host="localhost" Jul 10 00:37:23.125123 env[1205]: 2025-07-10 00:37:23.100 [INFO][4166] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.134/26] handle="k8s-pod-network.63c0a9348846dc3af723609aacd71233ded6647576fb324ef5b5105cdbac78c8" host="localhost" Jul 10 00:37:23.125123 env[1205]: 2025-07-10 00:37:23.100 [INFO][4166] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:37:23.125123 env[1205]: 2025-07-10 00:37:23.100 [INFO][4166] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.134/26] IPv6=[] ContainerID="63c0a9348846dc3af723609aacd71233ded6647576fb324ef5b5105cdbac78c8" HandleID="k8s-pod-network.63c0a9348846dc3af723609aacd71233ded6647576fb324ef5b5105cdbac78c8" Workload="localhost-k8s-coredns--668d6bf9bc--fc26s-eth0" Jul 10 00:37:23.125568 env[1205]: 2025-07-10 00:37:23.103 [INFO][4143] cni-plugin/k8s.go 418: Populated endpoint ContainerID="63c0a9348846dc3af723609aacd71233ded6647576fb324ef5b5105cdbac78c8" Namespace="kube-system" Pod="coredns-668d6bf9bc-fc26s" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--fc26s-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--668d6bf9bc--fc26s-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"16b05d7c-51b7-4fb7-a4cb-692b527960e6", ResourceVersion:"1020", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 36, 41, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"coredns-668d6bf9bc-fc26s", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali6ce2de465ce", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:37:23.125568 env[1205]: 2025-07-10 00:37:23.103 [INFO][4143] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.134/32] ContainerID="63c0a9348846dc3af723609aacd71233ded6647576fb324ef5b5105cdbac78c8" Namespace="kube-system" Pod="coredns-668d6bf9bc-fc26s" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--fc26s-eth0" Jul 10 00:37:23.125568 env[1205]: 2025-07-10 00:37:23.103 [INFO][4143] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali6ce2de465ce ContainerID="63c0a9348846dc3af723609aacd71233ded6647576fb324ef5b5105cdbac78c8" Namespace="kube-system" Pod="coredns-668d6bf9bc-fc26s" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--fc26s-eth0" Jul 10 00:37:23.125568 env[1205]: 2025-07-10 00:37:23.112 [INFO][4143] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="63c0a9348846dc3af723609aacd71233ded6647576fb324ef5b5105cdbac78c8" Namespace="kube-system" Pod="coredns-668d6bf9bc-fc26s" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--fc26s-eth0" Jul 10 00:37:23.125568 env[1205]: 2025-07-10 00:37:23.113 [INFO][4143] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="63c0a9348846dc3af723609aacd71233ded6647576fb324ef5b5105cdbac78c8" Namespace="kube-system" Pod="coredns-668d6bf9bc-fc26s" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--fc26s-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--668d6bf9bc--fc26s-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"16b05d7c-51b7-4fb7-a4cb-692b527960e6", ResourceVersion:"1020", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 36, 41, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"63c0a9348846dc3af723609aacd71233ded6647576fb324ef5b5105cdbac78c8", Pod:"coredns-668d6bf9bc-fc26s", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali6ce2de465ce", MAC:"96:37:9a:07:ba:dc", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:37:23.125568 env[1205]: 2025-07-10 00:37:23.121 [INFO][4143] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="63c0a9348846dc3af723609aacd71233ded6647576fb324ef5b5105cdbac78c8" Namespace="kube-system" Pod="coredns-668d6bf9bc-fc26s" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--fc26s-eth0" Jul 10 00:37:23.125000 audit[4178]: NETFILTER_CFG table=filter:109 family=2 entries=18 op=nft_register_rule pid=4178 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:37:23.125000 audit[4178]: SYSCALL arch=c000003e syscall=46 success=yes exit=6736 a0=3 a1=7ffeed376750 a2=0 a3=7ffeed37673c items=0 ppid=2093 pid=4178 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:23.125000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:37:23.131000 audit[4178]: NETFILTER_CFG table=nat:110 family=2 entries=16 op=nft_register_rule pid=4178 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:37:23.131000 audit[4178]: SYSCALL arch=c000003e syscall=46 success=yes exit=4236 a0=3 a1=7ffeed376750 a2=0 a3=0 items=0 ppid=2093 pid=4178 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:23.131000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:37:23.138914 env[1205]: time="2025-07-10T00:37:23.138827184Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 10 00:37:23.138914 env[1205]: time="2025-07-10T00:37:23.138871337Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 10 00:37:23.139189 env[1205]: time="2025-07-10T00:37:23.138882818Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 10 00:37:23.139338 env[1205]: time="2025-07-10T00:37:23.139268172Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/63c0a9348846dc3af723609aacd71233ded6647576fb324ef5b5105cdbac78c8 pid=4193 runtime=io.containerd.runc.v2 Jul 10 00:37:23.151186 systemd[1]: Started cri-containerd-63c0a9348846dc3af723609aacd71233ded6647576fb324ef5b5105cdbac78c8.scope. Jul 10 00:37:23.154000 audit[4214]: NETFILTER_CFG table=filter:111 family=2 entries=48 op=nft_register_chain pid=4214 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 10 00:37:23.154000 audit[4214]: SYSCALL arch=c000003e syscall=46 success=yes exit=22720 a0=3 a1=7ffe729d4d60 a2=0 a3=7ffe729d4d4c items=0 ppid=3348 pid=4214 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:23.154000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 10 00:37:23.161000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:23.161000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:23.161000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:23.161000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:23.161000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:23.161000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:23.161000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:23.161000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:23.161000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:23.161000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:23.161000 audit: BPF prog-id=193 op=LOAD Jul 10 00:37:23.162000 audit[4203]: AVC avc: denied { bpf } for pid=4203 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:23.162000 audit[4203]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=4193 pid=4203 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:23.162000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3633633061393334383834366463336166373233363039616163643731 Jul 10 00:37:23.162000 audit[4203]: AVC avc: denied { perfmon } for pid=4203 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:23.162000 audit[4203]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=4193 pid=4203 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:23.162000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3633633061393334383834366463336166373233363039616163643731 Jul 10 00:37:23.162000 audit[4203]: AVC avc: denied { bpf } for pid=4203 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:23.162000 audit[4203]: AVC avc: denied { bpf } for pid=4203 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:23.162000 audit[4203]: AVC avc: denied { bpf } for pid=4203 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:23.162000 audit[4203]: AVC avc: denied { perfmon } for pid=4203 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:23.162000 audit[4203]: AVC avc: denied { perfmon } for pid=4203 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:23.162000 audit[4203]: AVC avc: denied { perfmon } for pid=4203 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:23.162000 audit[4203]: AVC avc: denied { perfmon } for pid=4203 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:23.162000 audit[4203]: AVC avc: denied { perfmon } for pid=4203 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:23.162000 audit[4203]: AVC avc: denied { bpf } for pid=4203 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:23.162000 audit[4203]: AVC avc: denied { bpf } for pid=4203 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:23.162000 audit: BPF prog-id=194 op=LOAD Jul 10 00:37:23.162000 audit[4203]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c00028b4f0 items=0 ppid=4193 pid=4203 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:23.162000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3633633061393334383834366463336166373233363039616163643731 Jul 10 00:37:23.162000 audit[4203]: AVC avc: denied { bpf } for pid=4203 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:23.162000 audit[4203]: AVC avc: denied { bpf } for pid=4203 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:23.162000 audit[4203]: AVC avc: denied { perfmon } for pid=4203 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:23.162000 audit[4203]: AVC avc: denied { perfmon } for pid=4203 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:23.162000 audit[4203]: AVC avc: denied { perfmon } for pid=4203 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:23.162000 audit[4203]: AVC avc: denied { perfmon } for pid=4203 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:23.162000 audit[4203]: AVC avc: denied { perfmon } for pid=4203 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:23.162000 audit[4203]: AVC avc: denied { bpf } for pid=4203 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:23.162000 audit[4203]: AVC avc: denied { bpf } for pid=4203 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:23.162000 audit: BPF prog-id=195 op=LOAD Jul 10 00:37:23.162000 audit[4203]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c00028b538 items=0 ppid=4193 pid=4203 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:23.162000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3633633061393334383834366463336166373233363039616163643731 Jul 10 00:37:23.162000 audit: BPF prog-id=195 op=UNLOAD Jul 10 00:37:23.162000 audit: BPF prog-id=194 op=UNLOAD Jul 10 00:37:23.162000 audit[4203]: AVC avc: denied { bpf } for pid=4203 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:23.162000 audit[4203]: AVC avc: denied { bpf } for pid=4203 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:23.162000 audit[4203]: AVC avc: denied { bpf } for pid=4203 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:23.162000 audit[4203]: AVC avc: denied { perfmon } for pid=4203 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:23.162000 audit[4203]: AVC avc: denied { perfmon } for pid=4203 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:23.162000 audit[4203]: AVC avc: denied { perfmon } for pid=4203 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:23.162000 audit[4203]: AVC avc: denied { perfmon } for pid=4203 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:23.162000 audit[4203]: AVC avc: denied { perfmon } for pid=4203 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:23.162000 audit[4203]: AVC avc: denied { bpf } for pid=4203 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:23.162000 audit[4203]: AVC avc: denied { bpf } for pid=4203 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:23.162000 audit: BPF prog-id=196 op=LOAD Jul 10 00:37:23.162000 audit[4203]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c00028b948 items=0 ppid=4193 pid=4203 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:23.162000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3633633061393334383834366463336166373233363039616163643731 Jul 10 00:37:23.164745 systemd-resolved[1142]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 10 00:37:23.199774 env[1205]: time="2025-07-10T00:37:23.199295117Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-fc26s,Uid:16b05d7c-51b7-4fb7-a4cb-692b527960e6,Namespace:kube-system,Attempt:1,} returns sandbox id \"63c0a9348846dc3af723609aacd71233ded6647576fb324ef5b5105cdbac78c8\"" Jul 10 00:37:23.202368 kubelet[1947]: E0710 00:37:23.202336 1947 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:37:23.205711 env[1205]: time="2025-07-10T00:37:23.205675422Z" level=info msg="CreateContainer within sandbox \"63c0a9348846dc3af723609aacd71233ded6647576fb324ef5b5105cdbac78c8\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Jul 10 00:37:23.213536 systemd-networkd[1023]: calib3acf623e3b: Link UP Jul 10 00:37:23.215710 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calib3acf623e3b: link becomes ready Jul 10 00:37:23.215092 systemd-networkd[1023]: calib3acf623e3b: Gained carrier Jul 10 00:37:23.227602 env[1205]: time="2025-07-10T00:37:23.227463056Z" level=info msg="CreateContainer within sandbox \"63c0a9348846dc3af723609aacd71233ded6647576fb324ef5b5105cdbac78c8\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"29b1d878447f402707cef556db50311fbf8b198b38066d77d9bb1bbd916e369f\"" Jul 10 00:37:23.229234 env[1205]: time="2025-07-10T00:37:23.229172974Z" level=info msg="StartContainer for \"29b1d878447f402707cef556db50311fbf8b198b38066d77d9bb1bbd916e369f\"" Jul 10 00:37:23.231757 env[1205]: 2025-07-10 00:37:23.035 [INFO][4132] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-goldmane--768f4c5c69--z2lth-eth0 goldmane-768f4c5c69- calico-system 8eadc06b-a096-4667-a191-bf6882f37d75 1021 0 2025-07-10 00:36:54 +0000 UTC map[app.kubernetes.io/name:goldmane k8s-app:goldmane pod-template-hash:768f4c5c69 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:goldmane] map[] [] [] []} {k8s localhost goldmane-768f4c5c69-z2lth eth0 goldmane [] [] [kns.calico-system ksa.calico-system.goldmane] calib3acf623e3b [] [] }} ContainerID="2623c6736f64e07ac7c0f19a3008e3504fdf7f22e71aee7e7116a68c2eb17849" Namespace="calico-system" Pod="goldmane-768f4c5c69-z2lth" WorkloadEndpoint="localhost-k8s-goldmane--768f4c5c69--z2lth-" Jul 10 00:37:23.231757 env[1205]: 2025-07-10 00:37:23.036 [INFO][4132] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="2623c6736f64e07ac7c0f19a3008e3504fdf7f22e71aee7e7116a68c2eb17849" Namespace="calico-system" Pod="goldmane-768f4c5c69-z2lth" WorkloadEndpoint="localhost-k8s-goldmane--768f4c5c69--z2lth-eth0" Jul 10 00:37:23.231757 env[1205]: 2025-07-10 00:37:23.072 [INFO][4160] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="2623c6736f64e07ac7c0f19a3008e3504fdf7f22e71aee7e7116a68c2eb17849" HandleID="k8s-pod-network.2623c6736f64e07ac7c0f19a3008e3504fdf7f22e71aee7e7116a68c2eb17849" Workload="localhost-k8s-goldmane--768f4c5c69--z2lth-eth0" Jul 10 00:37:23.231757 env[1205]: 2025-07-10 00:37:23.072 [INFO][4160] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="2623c6736f64e07ac7c0f19a3008e3504fdf7f22e71aee7e7116a68c2eb17849" HandleID="k8s-pod-network.2623c6736f64e07ac7c0f19a3008e3504fdf7f22e71aee7e7116a68c2eb17849" Workload="localhost-k8s-goldmane--768f4c5c69--z2lth-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc00047f9e0), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"goldmane-768f4c5c69-z2lth", "timestamp":"2025-07-10 00:37:23.072329494 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 10 00:37:23.231757 env[1205]: 2025-07-10 00:37:23.072 [INFO][4160] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:37:23.231757 env[1205]: 2025-07-10 00:37:23.100 [INFO][4160] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:37:23.231757 env[1205]: 2025-07-10 00:37:23.100 [INFO][4160] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 10 00:37:23.231757 env[1205]: 2025-07-10 00:37:23.177 [INFO][4160] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.2623c6736f64e07ac7c0f19a3008e3504fdf7f22e71aee7e7116a68c2eb17849" host="localhost" Jul 10 00:37:23.231757 env[1205]: 2025-07-10 00:37:23.181 [INFO][4160] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 10 00:37:23.231757 env[1205]: 2025-07-10 00:37:23.185 [INFO][4160] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 10 00:37:23.231757 env[1205]: 2025-07-10 00:37:23.188 [INFO][4160] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 10 00:37:23.231757 env[1205]: 2025-07-10 00:37:23.190 [INFO][4160] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 10 00:37:23.231757 env[1205]: 2025-07-10 00:37:23.190 [INFO][4160] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.2623c6736f64e07ac7c0f19a3008e3504fdf7f22e71aee7e7116a68c2eb17849" host="localhost" Jul 10 00:37:23.231757 env[1205]: 2025-07-10 00:37:23.191 [INFO][4160] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.2623c6736f64e07ac7c0f19a3008e3504fdf7f22e71aee7e7116a68c2eb17849 Jul 10 00:37:23.231757 env[1205]: 2025-07-10 00:37:23.196 [INFO][4160] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.2623c6736f64e07ac7c0f19a3008e3504fdf7f22e71aee7e7116a68c2eb17849" host="localhost" Jul 10 00:37:23.231757 env[1205]: 2025-07-10 00:37:23.205 [INFO][4160] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.135/26] block=192.168.88.128/26 handle="k8s-pod-network.2623c6736f64e07ac7c0f19a3008e3504fdf7f22e71aee7e7116a68c2eb17849" host="localhost" Jul 10 00:37:23.231757 env[1205]: 2025-07-10 00:37:23.205 [INFO][4160] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.135/26] handle="k8s-pod-network.2623c6736f64e07ac7c0f19a3008e3504fdf7f22e71aee7e7116a68c2eb17849" host="localhost" Jul 10 00:37:23.231757 env[1205]: 2025-07-10 00:37:23.206 [INFO][4160] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:37:23.231757 env[1205]: 2025-07-10 00:37:23.206 [INFO][4160] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.135/26] IPv6=[] ContainerID="2623c6736f64e07ac7c0f19a3008e3504fdf7f22e71aee7e7116a68c2eb17849" HandleID="k8s-pod-network.2623c6736f64e07ac7c0f19a3008e3504fdf7f22e71aee7e7116a68c2eb17849" Workload="localhost-k8s-goldmane--768f4c5c69--z2lth-eth0" Jul 10 00:37:23.232835 env[1205]: 2025-07-10 00:37:23.210 [INFO][4132] cni-plugin/k8s.go 418: Populated endpoint ContainerID="2623c6736f64e07ac7c0f19a3008e3504fdf7f22e71aee7e7116a68c2eb17849" Namespace="calico-system" Pod="goldmane-768f4c5c69-z2lth" WorkloadEndpoint="localhost-k8s-goldmane--768f4c5c69--z2lth-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-goldmane--768f4c5c69--z2lth-eth0", GenerateName:"goldmane-768f4c5c69-", Namespace:"calico-system", SelfLink:"", UID:"8eadc06b-a096-4667-a191-bf6882f37d75", ResourceVersion:"1021", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 36, 54, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"768f4c5c69", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"goldmane-768f4c5c69-z2lth", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.88.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"calib3acf623e3b", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:37:23.232835 env[1205]: 2025-07-10 00:37:23.210 [INFO][4132] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.135/32] ContainerID="2623c6736f64e07ac7c0f19a3008e3504fdf7f22e71aee7e7116a68c2eb17849" Namespace="calico-system" Pod="goldmane-768f4c5c69-z2lth" WorkloadEndpoint="localhost-k8s-goldmane--768f4c5c69--z2lth-eth0" Jul 10 00:37:23.232835 env[1205]: 2025-07-10 00:37:23.210 [INFO][4132] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calib3acf623e3b ContainerID="2623c6736f64e07ac7c0f19a3008e3504fdf7f22e71aee7e7116a68c2eb17849" Namespace="calico-system" Pod="goldmane-768f4c5c69-z2lth" WorkloadEndpoint="localhost-k8s-goldmane--768f4c5c69--z2lth-eth0" Jul 10 00:37:23.232835 env[1205]: 2025-07-10 00:37:23.215 [INFO][4132] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="2623c6736f64e07ac7c0f19a3008e3504fdf7f22e71aee7e7116a68c2eb17849" Namespace="calico-system" Pod="goldmane-768f4c5c69-z2lth" WorkloadEndpoint="localhost-k8s-goldmane--768f4c5c69--z2lth-eth0" Jul 10 00:37:23.232835 env[1205]: 2025-07-10 00:37:23.215 [INFO][4132] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="2623c6736f64e07ac7c0f19a3008e3504fdf7f22e71aee7e7116a68c2eb17849" Namespace="calico-system" Pod="goldmane-768f4c5c69-z2lth" WorkloadEndpoint="localhost-k8s-goldmane--768f4c5c69--z2lth-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-goldmane--768f4c5c69--z2lth-eth0", GenerateName:"goldmane-768f4c5c69-", Namespace:"calico-system", SelfLink:"", UID:"8eadc06b-a096-4667-a191-bf6882f37d75", ResourceVersion:"1021", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 36, 54, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"768f4c5c69", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"2623c6736f64e07ac7c0f19a3008e3504fdf7f22e71aee7e7116a68c2eb17849", Pod:"goldmane-768f4c5c69-z2lth", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.88.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"calib3acf623e3b", MAC:"c2:aa:98:3e:65:d8", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:37:23.232835 env[1205]: 2025-07-10 00:37:23.225 [INFO][4132] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="2623c6736f64e07ac7c0f19a3008e3504fdf7f22e71aee7e7116a68c2eb17849" Namespace="calico-system" Pod="goldmane-768f4c5c69-z2lth" WorkloadEndpoint="localhost-k8s-goldmane--768f4c5c69--z2lth-eth0" Jul 10 00:37:23.247725 systemd[1]: Started cri-containerd-29b1d878447f402707cef556db50311fbf8b198b38066d77d9bb1bbd916e369f.scope. Jul 10 00:37:23.259785 env[1205]: time="2025-07-10T00:37:23.259710782Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 10 00:37:23.259958 env[1205]: time="2025-07-10T00:37:23.259788568Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 10 00:37:23.259958 env[1205]: time="2025-07-10T00:37:23.259811130Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 10 00:37:23.259958 env[1205]: time="2025-07-10T00:37:23.259930604Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/2623c6736f64e07ac7c0f19a3008e3504fdf7f22e71aee7e7116a68c2eb17849 pid=4270 runtime=io.containerd.runc.v2 Jul 10 00:37:23.261000 audit[4272]: NETFILTER_CFG table=filter:112 family=2 entries=70 op=nft_register_chain pid=4272 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 10 00:37:23.261000 audit[4272]: SYSCALL arch=c000003e syscall=46 success=yes exit=33972 a0=3 a1=7fff29d422f0 a2=0 a3=7fff29d422dc items=0 ppid=3348 pid=4272 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:23.261000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 10 00:37:23.265000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:23.265000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:23.265000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:23.265000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:23.265000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:23.265000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:23.265000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:23.265000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:23.265000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:23.265000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:23.265000 audit: BPF prog-id=197 op=LOAD Jul 10 00:37:23.266000 audit[4246]: AVC avc: denied { bpf } for pid=4246 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:23.266000 audit[4246]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00019fc48 a2=10 a3=1c items=0 ppid=4193 pid=4246 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:23.266000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3239623164383738343437663430323730376365663535366462353033 Jul 10 00:37:23.266000 audit[4246]: AVC avc: denied { perfmon } for pid=4246 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:23.266000 audit[4246]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00019f6b0 a2=3c a3=8 items=0 ppid=4193 pid=4246 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:23.266000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3239623164383738343437663430323730376365663535366462353033 Jul 10 00:37:23.266000 audit[4246]: AVC avc: denied { bpf } for pid=4246 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:23.266000 audit[4246]: AVC avc: denied { bpf } for pid=4246 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:23.266000 audit[4246]: AVC avc: denied { bpf } for pid=4246 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:23.266000 audit[4246]: AVC avc: denied { perfmon } for pid=4246 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:23.266000 audit[4246]: AVC avc: denied { perfmon } for pid=4246 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:23.266000 audit[4246]: AVC avc: denied { perfmon } for pid=4246 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:23.266000 audit[4246]: AVC avc: denied { perfmon } for pid=4246 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:23.266000 audit[4246]: AVC avc: denied { perfmon } for pid=4246 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:23.266000 audit[4246]: AVC avc: denied { bpf } for pid=4246 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:23.266000 audit[4246]: AVC avc: denied { bpf } for pid=4246 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:23.266000 audit: BPF prog-id=198 op=LOAD Jul 10 00:37:23.266000 audit[4246]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00019f9d8 a2=78 a3=c0001e98f0 items=0 ppid=4193 pid=4246 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:23.266000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3239623164383738343437663430323730376365663535366462353033 Jul 10 00:37:23.266000 audit[4246]: AVC avc: denied { bpf } for pid=4246 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:23.266000 audit[4246]: AVC avc: denied { bpf } for pid=4246 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:23.266000 audit[4246]: AVC avc: denied { perfmon } for pid=4246 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:23.266000 audit[4246]: AVC avc: denied { perfmon } for pid=4246 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:23.266000 audit[4246]: AVC avc: denied { perfmon } for pid=4246 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:23.266000 audit[4246]: AVC avc: denied { perfmon } for pid=4246 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:23.266000 audit[4246]: AVC avc: denied { perfmon } for pid=4246 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:23.266000 audit[4246]: AVC avc: denied { bpf } for pid=4246 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:23.266000 audit[4246]: AVC avc: denied { bpf } for pid=4246 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:23.266000 audit: BPF prog-id=199 op=LOAD Jul 10 00:37:23.266000 audit[4246]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00019f770 a2=78 a3=c0001e9938 items=0 ppid=4193 pid=4246 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:23.266000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3239623164383738343437663430323730376365663535366462353033 Jul 10 00:37:23.266000 audit: BPF prog-id=199 op=UNLOAD Jul 10 00:37:23.266000 audit: BPF prog-id=198 op=UNLOAD Jul 10 00:37:23.266000 audit[4246]: AVC avc: denied { bpf } for pid=4246 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:23.266000 audit[4246]: AVC avc: denied { bpf } for pid=4246 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:23.266000 audit[4246]: AVC avc: denied { bpf } for pid=4246 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:23.266000 audit[4246]: AVC avc: denied { perfmon } for pid=4246 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:23.266000 audit[4246]: AVC avc: denied { perfmon } for pid=4246 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:23.266000 audit[4246]: AVC avc: denied { perfmon } for pid=4246 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:23.266000 audit[4246]: AVC avc: denied { perfmon } for pid=4246 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:23.266000 audit[4246]: AVC avc: denied { perfmon } for pid=4246 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:23.266000 audit[4246]: AVC avc: denied { bpf } for pid=4246 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:23.266000 audit[4246]: AVC avc: denied { bpf } for pid=4246 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:23.266000 audit: BPF prog-id=200 op=LOAD Jul 10 00:37:23.266000 audit[4246]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00019fc30 a2=78 a3=c0001e9d48 items=0 ppid=4193 pid=4246 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:23.266000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3239623164383738343437663430323730376365663535366462353033 Jul 10 00:37:23.272540 systemd[1]: Started cri-containerd-2623c6736f64e07ac7c0f19a3008e3504fdf7f22e71aee7e7116a68c2eb17849.scope. Jul 10 00:37:23.285141 env[1205]: time="2025-07-10T00:37:23.285086990Z" level=info msg="StartContainer for \"29b1d878447f402707cef556db50311fbf8b198b38066d77d9bb1bbd916e369f\" returns successfully" Jul 10 00:37:23.296000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:23.296000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:23.296000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:23.296000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:23.296000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:23.296000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:23.296000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:23.296000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:23.296000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:23.297000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:23.297000 audit: BPF prog-id=201 op=LOAD Jul 10 00:37:23.297000 audit[4282]: AVC avc: denied { bpf } for pid=4282 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:23.297000 audit[4282]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=4270 pid=4282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:23.297000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3236323363363733366636346530376163376330663139613330303865 Jul 10 00:37:23.298000 audit[4282]: AVC avc: denied { perfmon } for pid=4282 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:23.298000 audit[4282]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=4270 pid=4282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:23.298000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3236323363363733366636346530376163376330663139613330303865 Jul 10 00:37:23.298000 audit[4282]: AVC avc: denied { bpf } for pid=4282 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:23.298000 audit[4282]: AVC avc: denied { bpf } for pid=4282 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:23.298000 audit[4261]: AVC avc: denied { getattr } for pid=4261 comm="coredns" path="cgroup:[4026532419]" dev="nsfs" ino=4026532419 scontext=system_u:system_r:svirt_lxc_net_t:s0:c204,c688 tcontext=system_u:object_r:nsfs_t:s0 tclass=file permissive=0 Jul 10 00:37:23.298000 audit[4282]: AVC avc: denied { bpf } for pid=4282 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:23.298000 audit[4261]: SYSCALL arch=c000003e syscall=262 success=no exit=-13 a0=ffffffffffffff9c a1=c00005a840 a2=c00011ce08 a3=0 items=0 ppid=4193 pid=4261 auid=4294967295 uid=65532 gid=65532 euid=65532 suid=65532 fsuid=65532 egid=65532 sgid=65532 fsgid=65532 tty=(none) ses=4294967295 comm="coredns" exe="/coredns" subj=system_u:system_r:svirt_lxc_net_t:s0:c204,c688 key=(null) Jul 10 00:37:23.298000 audit: PROCTITLE proctitle=2F636F7265646E73002D636F6E66002F6574632F636F7265646E732F436F726566696C65 Jul 10 00:37:23.298000 audit[4282]: AVC avc: denied { perfmon } for pid=4282 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:23.298000 audit[4282]: AVC avc: denied { perfmon } for pid=4282 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:23.298000 audit[4282]: AVC avc: denied { perfmon } for pid=4282 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:23.298000 audit[4282]: AVC avc: denied { perfmon } for pid=4282 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:23.298000 audit[4282]: AVC avc: denied { perfmon } for pid=4282 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:23.298000 audit[4282]: AVC avc: denied { bpf } for pid=4282 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:23.298000 audit[4282]: AVC avc: denied { bpf } for pid=4282 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:23.298000 audit: BPF prog-id=202 op=LOAD Jul 10 00:37:23.298000 audit[4282]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0003132b0 items=0 ppid=4270 pid=4282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:23.298000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3236323363363733366636346530376163376330663139613330303865 Jul 10 00:37:23.300000 audit[4282]: AVC avc: denied { bpf } for pid=4282 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:23.300000 audit[4282]: AVC avc: denied { bpf } for pid=4282 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:23.300000 audit[4282]: AVC avc: denied { perfmon } for pid=4282 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:23.300000 audit[4282]: AVC avc: denied { perfmon } for pid=4282 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:23.300000 audit[4282]: AVC avc: denied { perfmon } for pid=4282 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:23.300000 audit[4282]: AVC avc: denied { perfmon } for pid=4282 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:23.300000 audit[4282]: AVC avc: denied { perfmon } for pid=4282 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:23.300000 audit[4282]: AVC avc: denied { bpf } for pid=4282 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:23.300000 audit[4282]: AVC avc: denied { bpf } for pid=4282 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:23.300000 audit: BPF prog-id=203 op=LOAD Jul 10 00:37:23.300000 audit[4282]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0003132f8 items=0 ppid=4270 pid=4282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:23.300000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3236323363363733366636346530376163376330663139613330303865 Jul 10 00:37:23.302000 audit: BPF prog-id=203 op=UNLOAD Jul 10 00:37:23.303000 audit: BPF prog-id=202 op=UNLOAD Jul 10 00:37:23.303000 audit[4282]: AVC avc: denied { bpf } for pid=4282 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:23.303000 audit[4282]: AVC avc: denied { bpf } for pid=4282 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:23.303000 audit[4282]: AVC avc: denied { bpf } for pid=4282 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:23.303000 audit[4282]: AVC avc: denied { perfmon } for pid=4282 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:23.303000 audit[4282]: AVC avc: denied { perfmon } for pid=4282 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:23.303000 audit[4282]: AVC avc: denied { perfmon } for pid=4282 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:23.303000 audit[4282]: AVC avc: denied { perfmon } for pid=4282 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:23.303000 audit[4282]: AVC avc: denied { perfmon } for pid=4282 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:23.303000 audit[4282]: AVC avc: denied { bpf } for pid=4282 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:23.303000 audit[4282]: AVC avc: denied { bpf } for pid=4282 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:23.303000 audit: BPF prog-id=204 op=LOAD Jul 10 00:37:23.303000 audit[4282]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c000313708 items=0 ppid=4270 pid=4282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:23.303000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3236323363363733366636346530376163376330663139613330303865 Jul 10 00:37:23.306492 systemd-resolved[1142]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 10 00:37:23.346295 env[1205]: time="2025-07-10T00:37:23.346239147Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-768f4c5c69-z2lth,Uid:8eadc06b-a096-4667-a191-bf6882f37d75,Namespace:calico-system,Attempt:1,} returns sandbox id \"2623c6736f64e07ac7c0f19a3008e3504fdf7f22e71aee7e7116a68c2eb17849\"" Jul 10 00:37:23.888336 env[1205]: time="2025-07-10T00:37:23.888297811Z" level=info msg="StopPodSandbox for \"f9b12d61848dadeff42022b62731bf12497a5b269cb7844851312ec0c464409d\"" Jul 10 00:37:23.967040 env[1205]: 2025-07-10 00:37:23.937 [INFO][4339] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="f9b12d61848dadeff42022b62731bf12497a5b269cb7844851312ec0c464409d" Jul 10 00:37:23.967040 env[1205]: 2025-07-10 00:37:23.937 [INFO][4339] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="f9b12d61848dadeff42022b62731bf12497a5b269cb7844851312ec0c464409d" iface="eth0" netns="/var/run/netns/cni-4595f1fa-89e2-d435-eeea-097dcf6616fb" Jul 10 00:37:23.967040 env[1205]: 2025-07-10 00:37:23.937 [INFO][4339] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="f9b12d61848dadeff42022b62731bf12497a5b269cb7844851312ec0c464409d" iface="eth0" netns="/var/run/netns/cni-4595f1fa-89e2-d435-eeea-097dcf6616fb" Jul 10 00:37:23.967040 env[1205]: 2025-07-10 00:37:23.937 [INFO][4339] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="f9b12d61848dadeff42022b62731bf12497a5b269cb7844851312ec0c464409d" iface="eth0" netns="/var/run/netns/cni-4595f1fa-89e2-d435-eeea-097dcf6616fb" Jul 10 00:37:23.967040 env[1205]: 2025-07-10 00:37:23.937 [INFO][4339] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="f9b12d61848dadeff42022b62731bf12497a5b269cb7844851312ec0c464409d" Jul 10 00:37:23.967040 env[1205]: 2025-07-10 00:37:23.937 [INFO][4339] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="f9b12d61848dadeff42022b62731bf12497a5b269cb7844851312ec0c464409d" Jul 10 00:37:23.967040 env[1205]: 2025-07-10 00:37:23.957 [INFO][4348] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="f9b12d61848dadeff42022b62731bf12497a5b269cb7844851312ec0c464409d" HandleID="k8s-pod-network.f9b12d61848dadeff42022b62731bf12497a5b269cb7844851312ec0c464409d" Workload="localhost-k8s-calico--apiserver--79f4d77569--qj846-eth0" Jul 10 00:37:23.967040 env[1205]: 2025-07-10 00:37:23.957 [INFO][4348] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:37:23.967040 env[1205]: 2025-07-10 00:37:23.957 [INFO][4348] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:37:23.967040 env[1205]: 2025-07-10 00:37:23.961 [WARNING][4348] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="f9b12d61848dadeff42022b62731bf12497a5b269cb7844851312ec0c464409d" HandleID="k8s-pod-network.f9b12d61848dadeff42022b62731bf12497a5b269cb7844851312ec0c464409d" Workload="localhost-k8s-calico--apiserver--79f4d77569--qj846-eth0" Jul 10 00:37:23.967040 env[1205]: 2025-07-10 00:37:23.962 [INFO][4348] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="f9b12d61848dadeff42022b62731bf12497a5b269cb7844851312ec0c464409d" HandleID="k8s-pod-network.f9b12d61848dadeff42022b62731bf12497a5b269cb7844851312ec0c464409d" Workload="localhost-k8s-calico--apiserver--79f4d77569--qj846-eth0" Jul 10 00:37:23.967040 env[1205]: 2025-07-10 00:37:23.963 [INFO][4348] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:37:23.967040 env[1205]: 2025-07-10 00:37:23.965 [INFO][4339] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="f9b12d61848dadeff42022b62731bf12497a5b269cb7844851312ec0c464409d" Jul 10 00:37:23.969504 systemd[1]: run-netns-cni\x2d4595f1fa\x2d89e2\x2dd435\x2deeea\x2d097dcf6616fb.mount: Deactivated successfully. Jul 10 00:37:23.970339 systemd-networkd[1023]: cali7ba118bbdd0: Gained IPv6LL Jul 10 00:37:23.970560 systemd-networkd[1023]: calibdc4ef6058b: Gained IPv6LL Jul 10 00:37:23.982163 env[1205]: time="2025-07-10T00:37:23.982099098Z" level=info msg="TearDown network for sandbox \"f9b12d61848dadeff42022b62731bf12497a5b269cb7844851312ec0c464409d\" successfully" Jul 10 00:37:23.982163 env[1205]: time="2025-07-10T00:37:23.982147999Z" level=info msg="StopPodSandbox for \"f9b12d61848dadeff42022b62731bf12497a5b269cb7844851312ec0c464409d\" returns successfully" Jul 10 00:37:23.982934 env[1205]: time="2025-07-10T00:37:23.982887458Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-79f4d77569-qj846,Uid:359ec5e8-588d-464e-9261-faefb7bc02b1,Namespace:calico-apiserver,Attempt:1,}" Jul 10 00:37:24.082472 systemd-networkd[1023]: calidf845a029c1: Link UP Jul 10 00:37:24.085165 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Jul 10 00:37:24.085279 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calidf845a029c1: link becomes ready Jul 10 00:37:24.085327 systemd-networkd[1023]: calidf845a029c1: Gained carrier Jul 10 00:37:24.099350 kubelet[1947]: E0710 00:37:24.099144 1947 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:37:24.099350 kubelet[1947]: E0710 00:37:24.099222 1947 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:37:24.116255 env[1205]: 2025-07-10 00:37:24.024 [INFO][4358] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-calico--apiserver--79f4d77569--qj846-eth0 calico-apiserver-79f4d77569- calico-apiserver 359ec5e8-588d-464e-9261-faefb7bc02b1 1049 0 2025-07-10 00:36:52 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:79f4d77569 projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s localhost calico-apiserver-79f4d77569-qj846 eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] calidf845a029c1 [] [] }} ContainerID="9d3e234b5c7c189b888f0f60c9e1913242edc3511a6cb1d4f3312bc81baa20db" Namespace="calico-apiserver" Pod="calico-apiserver-79f4d77569-qj846" WorkloadEndpoint="localhost-k8s-calico--apiserver--79f4d77569--qj846-" Jul 10 00:37:24.116255 env[1205]: 2025-07-10 00:37:24.025 [INFO][4358] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="9d3e234b5c7c189b888f0f60c9e1913242edc3511a6cb1d4f3312bc81baa20db" Namespace="calico-apiserver" Pod="calico-apiserver-79f4d77569-qj846" WorkloadEndpoint="localhost-k8s-calico--apiserver--79f4d77569--qj846-eth0" Jul 10 00:37:24.116255 env[1205]: 2025-07-10 00:37:24.048 [INFO][4372] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="9d3e234b5c7c189b888f0f60c9e1913242edc3511a6cb1d4f3312bc81baa20db" HandleID="k8s-pod-network.9d3e234b5c7c189b888f0f60c9e1913242edc3511a6cb1d4f3312bc81baa20db" Workload="localhost-k8s-calico--apiserver--79f4d77569--qj846-eth0" Jul 10 00:37:24.116255 env[1205]: 2025-07-10 00:37:24.048 [INFO][4372] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="9d3e234b5c7c189b888f0f60c9e1913242edc3511a6cb1d4f3312bc81baa20db" HandleID="k8s-pod-network.9d3e234b5c7c189b888f0f60c9e1913242edc3511a6cb1d4f3312bc81baa20db" Workload="localhost-k8s-calico--apiserver--79f4d77569--qj846-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc00058e4e0), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"localhost", "pod":"calico-apiserver-79f4d77569-qj846", "timestamp":"2025-07-10 00:37:24.048130913 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 10 00:37:24.116255 env[1205]: 2025-07-10 00:37:24.048 [INFO][4372] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:37:24.116255 env[1205]: 2025-07-10 00:37:24.048 [INFO][4372] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:37:24.116255 env[1205]: 2025-07-10 00:37:24.048 [INFO][4372] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 10 00:37:24.116255 env[1205]: 2025-07-10 00:37:24.054 [INFO][4372] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.9d3e234b5c7c189b888f0f60c9e1913242edc3511a6cb1d4f3312bc81baa20db" host="localhost" Jul 10 00:37:24.116255 env[1205]: 2025-07-10 00:37:24.059 [INFO][4372] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 10 00:37:24.116255 env[1205]: 2025-07-10 00:37:24.064 [INFO][4372] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 10 00:37:24.116255 env[1205]: 2025-07-10 00:37:24.065 [INFO][4372] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 10 00:37:24.116255 env[1205]: 2025-07-10 00:37:24.067 [INFO][4372] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 10 00:37:24.116255 env[1205]: 2025-07-10 00:37:24.068 [INFO][4372] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.9d3e234b5c7c189b888f0f60c9e1913242edc3511a6cb1d4f3312bc81baa20db" host="localhost" Jul 10 00:37:24.116255 env[1205]: 2025-07-10 00:37:24.069 [INFO][4372] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.9d3e234b5c7c189b888f0f60c9e1913242edc3511a6cb1d4f3312bc81baa20db Jul 10 00:37:24.116255 env[1205]: 2025-07-10 00:37:24.072 [INFO][4372] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.9d3e234b5c7c189b888f0f60c9e1913242edc3511a6cb1d4f3312bc81baa20db" host="localhost" Jul 10 00:37:24.116255 env[1205]: 2025-07-10 00:37:24.078 [INFO][4372] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.136/26] block=192.168.88.128/26 handle="k8s-pod-network.9d3e234b5c7c189b888f0f60c9e1913242edc3511a6cb1d4f3312bc81baa20db" host="localhost" Jul 10 00:37:24.116255 env[1205]: 2025-07-10 00:37:24.078 [INFO][4372] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.136/26] handle="k8s-pod-network.9d3e234b5c7c189b888f0f60c9e1913242edc3511a6cb1d4f3312bc81baa20db" host="localhost" Jul 10 00:37:24.116255 env[1205]: 2025-07-10 00:37:24.078 [INFO][4372] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:37:24.116255 env[1205]: 2025-07-10 00:37:24.078 [INFO][4372] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.136/26] IPv6=[] ContainerID="9d3e234b5c7c189b888f0f60c9e1913242edc3511a6cb1d4f3312bc81baa20db" HandleID="k8s-pod-network.9d3e234b5c7c189b888f0f60c9e1913242edc3511a6cb1d4f3312bc81baa20db" Workload="localhost-k8s-calico--apiserver--79f4d77569--qj846-eth0" Jul 10 00:37:24.116971 env[1205]: 2025-07-10 00:37:24.080 [INFO][4358] cni-plugin/k8s.go 418: Populated endpoint ContainerID="9d3e234b5c7c189b888f0f60c9e1913242edc3511a6cb1d4f3312bc81baa20db" Namespace="calico-apiserver" Pod="calico-apiserver-79f4d77569-qj846" WorkloadEndpoint="localhost-k8s-calico--apiserver--79f4d77569--qj846-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--79f4d77569--qj846-eth0", GenerateName:"calico-apiserver-79f4d77569-", Namespace:"calico-apiserver", SelfLink:"", UID:"359ec5e8-588d-464e-9261-faefb7bc02b1", ResourceVersion:"1049", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 36, 52, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"79f4d77569", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"calico-apiserver-79f4d77569-qj846", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calidf845a029c1", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:37:24.116971 env[1205]: 2025-07-10 00:37:24.080 [INFO][4358] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.136/32] ContainerID="9d3e234b5c7c189b888f0f60c9e1913242edc3511a6cb1d4f3312bc81baa20db" Namespace="calico-apiserver" Pod="calico-apiserver-79f4d77569-qj846" WorkloadEndpoint="localhost-k8s-calico--apiserver--79f4d77569--qj846-eth0" Jul 10 00:37:24.116971 env[1205]: 2025-07-10 00:37:24.080 [INFO][4358] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calidf845a029c1 ContainerID="9d3e234b5c7c189b888f0f60c9e1913242edc3511a6cb1d4f3312bc81baa20db" Namespace="calico-apiserver" Pod="calico-apiserver-79f4d77569-qj846" WorkloadEndpoint="localhost-k8s-calico--apiserver--79f4d77569--qj846-eth0" Jul 10 00:37:24.116971 env[1205]: 2025-07-10 00:37:24.085 [INFO][4358] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="9d3e234b5c7c189b888f0f60c9e1913242edc3511a6cb1d4f3312bc81baa20db" Namespace="calico-apiserver" Pod="calico-apiserver-79f4d77569-qj846" WorkloadEndpoint="localhost-k8s-calico--apiserver--79f4d77569--qj846-eth0" Jul 10 00:37:24.116971 env[1205]: 2025-07-10 00:37:24.085 [INFO][4358] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="9d3e234b5c7c189b888f0f60c9e1913242edc3511a6cb1d4f3312bc81baa20db" Namespace="calico-apiserver" Pod="calico-apiserver-79f4d77569-qj846" WorkloadEndpoint="localhost-k8s-calico--apiserver--79f4d77569--qj846-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--79f4d77569--qj846-eth0", GenerateName:"calico-apiserver-79f4d77569-", Namespace:"calico-apiserver", SelfLink:"", UID:"359ec5e8-588d-464e-9261-faefb7bc02b1", ResourceVersion:"1049", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 36, 52, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"79f4d77569", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"9d3e234b5c7c189b888f0f60c9e1913242edc3511a6cb1d4f3312bc81baa20db", Pod:"calico-apiserver-79f4d77569-qj846", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calidf845a029c1", MAC:"e2:fb:2d:8b:53:64", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:37:24.116971 env[1205]: 2025-07-10 00:37:24.113 [INFO][4358] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="9d3e234b5c7c189b888f0f60c9e1913242edc3511a6cb1d4f3312bc81baa20db" Namespace="calico-apiserver" Pod="calico-apiserver-79f4d77569-qj846" WorkloadEndpoint="localhost-k8s-calico--apiserver--79f4d77569--qj846-eth0" Jul 10 00:37:24.122000 audit[4388]: NETFILTER_CFG table=filter:113 family=2 entries=57 op=nft_register_chain pid=4388 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 10 00:37:24.122000 audit[4388]: SYSCALL arch=c000003e syscall=46 success=yes exit=27812 a0=3 a1=7ffee0e46c70 a2=0 a3=7ffee0e46c5c items=0 ppid=3348 pid=4388 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:24.122000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 10 00:37:24.147000 audit[4390]: NETFILTER_CFG table=filter:114 family=2 entries=15 op=nft_register_rule pid=4390 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:37:24.147000 audit[4390]: SYSCALL arch=c000003e syscall=46 success=yes exit=4504 a0=3 a1=7ffefae60940 a2=0 a3=7ffefae6092c items=0 ppid=2093 pid=4390 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:24.147000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:37:24.153000 audit[4390]: NETFILTER_CFG table=nat:115 family=2 entries=37 op=nft_register_chain pid=4390 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:37:24.153000 audit[4390]: SYSCALL arch=c000003e syscall=46 success=yes exit=14964 a0=3 a1=7ffefae60940 a2=0 a3=7ffefae6092c items=0 ppid=2093 pid=4390 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:24.153000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:37:24.204743 env[1205]: time="2025-07-10T00:37:24.204669748Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 10 00:37:24.204743 env[1205]: time="2025-07-10T00:37:24.204719622Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 10 00:37:24.204743 env[1205]: time="2025-07-10T00:37:24.204733217Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 10 00:37:24.225000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:24.225000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:24.225000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:24.225000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:24.225000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:24.225000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:24.225000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:24.225000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:24.225000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:24.226000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:24.226000 audit: BPF prog-id=205 op=LOAD Jul 10 00:37:24.226000 audit[4407]: AVC avc: denied { bpf } for pid=4407 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:24.226000 audit[4407]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=4398 pid=4407 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:24.226000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3964336532333462356337633138396238383866306636306339653139 Jul 10 00:37:24.226000 audit[4407]: AVC avc: denied { perfmon } for pid=4407 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:24.226000 audit[4407]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=c items=0 ppid=4398 pid=4407 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:24.226000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3964336532333462356337633138396238383866306636306339653139 Jul 10 00:37:24.226000 audit[4407]: AVC avc: denied { bpf } for pid=4407 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:24.226000 audit[4407]: AVC avc: denied { bpf } for pid=4407 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:24.226000 audit[4407]: AVC avc: denied { bpf } for pid=4407 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:24.226000 audit[4407]: AVC avc: denied { perfmon } for pid=4407 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:24.226000 audit[4407]: AVC avc: denied { perfmon } for pid=4407 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:24.226000 audit[4407]: AVC avc: denied { perfmon } for pid=4407 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:24.226000 audit[4407]: AVC avc: denied { perfmon } for pid=4407 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:24.226000 audit[4407]: AVC avc: denied { perfmon } for pid=4407 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:24.226000 audit[4407]: AVC avc: denied { bpf } for pid=4407 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:24.226000 audit[4407]: AVC avc: denied { bpf } for pid=4407 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:24.226000 audit: BPF prog-id=206 op=LOAD Jul 10 00:37:24.226000 audit[4407]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c000214e40 items=0 ppid=4398 pid=4407 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:24.226000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3964336532333462356337633138396238383866306636306339653139 Jul 10 00:37:24.226000 audit[4407]: AVC avc: denied { bpf } for pid=4407 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:24.226000 audit[4407]: AVC avc: denied { bpf } for pid=4407 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:24.226000 audit[4407]: AVC avc: denied { perfmon } for pid=4407 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:24.226000 audit[4407]: AVC avc: denied { perfmon } for pid=4407 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:24.226000 audit[4407]: AVC avc: denied { perfmon } for pid=4407 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:24.226000 audit[4407]: AVC avc: denied { perfmon } for pid=4407 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:24.226000 audit[4407]: AVC avc: denied { perfmon } for pid=4407 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:24.226000 audit[4407]: AVC avc: denied { bpf } for pid=4407 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:24.226000 audit[4407]: AVC avc: denied { bpf } for pid=4407 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:24.226000 audit: BPF prog-id=207 op=LOAD Jul 10 00:37:24.226000 audit[4407]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c000214e88 items=0 ppid=4398 pid=4407 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:24.226000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3964336532333462356337633138396238383866306636306339653139 Jul 10 00:37:24.226000 audit: BPF prog-id=207 op=UNLOAD Jul 10 00:37:24.226000 audit: BPF prog-id=206 op=UNLOAD Jul 10 00:37:24.226000 audit[4407]: AVC avc: denied { bpf } for pid=4407 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:24.226000 audit[4407]: AVC avc: denied { bpf } for pid=4407 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:24.226000 audit[4407]: AVC avc: denied { bpf } for pid=4407 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:24.226000 audit[4407]: AVC avc: denied { perfmon } for pid=4407 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:24.226000 audit[4407]: AVC avc: denied { perfmon } for pid=4407 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:24.226000 audit[4407]: AVC avc: denied { perfmon } for pid=4407 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:24.226000 audit[4407]: AVC avc: denied { perfmon } for pid=4407 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:24.226000 audit[4407]: AVC avc: denied { perfmon } for pid=4407 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:24.226000 audit[4407]: AVC avc: denied { bpf } for pid=4407 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:24.226000 audit[4407]: AVC avc: denied { bpf } for pid=4407 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:24.226000 audit: BPF prog-id=208 op=LOAD Jul 10 00:37:24.226000 audit[4407]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c000215298 items=0 ppid=4398 pid=4407 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:24.226000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3964336532333462356337633138396238383866306636306339653139 Jul 10 00:37:24.331591 env[1205]: time="2025-07-10T00:37:24.204861468Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/9d3e234b5c7c189b888f0f60c9e1913242edc3511a6cb1d4f3312bc81baa20db pid=4398 runtime=io.containerd.runc.v2 Jul 10 00:37:24.331591 env[1205]: time="2025-07-10T00:37:24.251790929Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-79f4d77569-qj846,Uid:359ec5e8-588d-464e-9261-faefb7bc02b1,Namespace:calico-apiserver,Attempt:1,} returns sandbox id \"9d3e234b5c7c189b888f0f60c9e1913242edc3511a6cb1d4f3312bc81baa20db\"" Jul 10 00:37:24.215405 systemd[1]: Started cri-containerd-9d3e234b5c7c189b888f0f60c9e1913242edc3511a6cb1d4f3312bc81baa20db.scope. Jul 10 00:37:24.229551 systemd-resolved[1142]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 10 00:37:24.416835 systemd-networkd[1023]: cali9ad06ea0f05: Gained IPv6LL Jul 10 00:37:24.530779 kubelet[1947]: I0710 00:37:24.530634 1947 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/coredns-668d6bf9bc-fc26s" podStartSLOduration=43.530608768 podStartE2EDuration="43.530608768s" podCreationTimestamp="2025-07-10 00:36:41 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-10 00:37:24.529311253 +0000 UTC m=+49.951736261" watchObservedRunningTime="2025-07-10 00:37:24.530608768 +0000 UTC m=+49.953033796" Jul 10 00:37:24.544931 systemd-networkd[1023]: calib3acf623e3b: Gained IPv6LL Jul 10 00:37:24.626030 systemd[1]: Started sshd@9-10.0.0.36:22-10.0.0.1:54238.service. Jul 10 00:37:24.624000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.0.0.36:22-10.0.0.1:54238 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:37:24.627037 kernel: kauditd_printk_skb: 676 callbacks suppressed Jul 10 00:37:24.627090 kernel: audit: type=1130 audit(1752107844.624:1359): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.0.0.36:22-10.0.0.1:54238 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:37:24.645000 audit[4435]: NETFILTER_CFG table=filter:116 family=2 entries=12 op=nft_register_rule pid=4435 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:37:24.645000 audit[4435]: SYSCALL arch=c000003e syscall=46 success=yes exit=4504 a0=3 a1=7ffd3d9e3ef0 a2=0 a3=7ffd3d9e3edc items=0 ppid=2093 pid=4435 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:24.650681 kernel: audit: type=1325 audit(1752107844.645:1360): table=filter:116 family=2 entries=12 op=nft_register_rule pid=4435 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:37:24.650724 kernel: audit: type=1300 audit(1752107844.645:1360): arch=c000003e syscall=46 success=yes exit=4504 a0=3 a1=7ffd3d9e3ef0 a2=0 a3=7ffd3d9e3edc items=0 ppid=2093 pid=4435 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:24.645000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:37:24.657441 kernel: audit: type=1327 audit(1752107844.645:1360): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:37:24.660000 audit[4435]: NETFILTER_CFG table=nat:117 family=2 entries=46 op=nft_register_rule pid=4435 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:37:24.660000 audit[4435]: SYSCALL arch=c000003e syscall=46 success=yes exit=14964 a0=3 a1=7ffd3d9e3ef0 a2=0 a3=7ffd3d9e3edc items=0 ppid=2093 pid=4435 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:24.669270 kernel: audit: type=1325 audit(1752107844.660:1361): table=nat:117 family=2 entries=46 op=nft_register_rule pid=4435 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:37:24.669310 kernel: audit: type=1300 audit(1752107844.660:1361): arch=c000003e syscall=46 success=yes exit=14964 a0=3 a1=7ffd3d9e3ef0 a2=0 a3=7ffd3d9e3edc items=0 ppid=2093 pid=4435 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:24.669338 kernel: audit: type=1327 audit(1752107844.660:1361): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:37:24.660000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:37:24.672863 systemd-networkd[1023]: calie994b9b45eb: Gained IPv6LL Jul 10 00:37:24.677000 audit[4432]: USER_ACCT pid=4432 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:37:24.679258 sshd[4432]: Accepted publickey for core from 10.0.0.1 port 54238 ssh2: RSA SHA256:suUhWV759MqU0C+Dl6JG8TPW8PqnqlsB4qushdi9Ejw Jul 10 00:37:24.681000 audit[4432]: CRED_ACQ pid=4432 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:37:24.684169 sshd[4432]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 00:37:24.687243 kernel: audit: type=1101 audit(1752107844.677:1362): pid=4432 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:37:24.687302 kernel: audit: type=1103 audit(1752107844.681:1363): pid=4432 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:37:24.689571 kernel: audit: type=1006 audit(1752107844.681:1364): pid=4432 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=10 res=1 Jul 10 00:37:24.681000 audit[4432]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffdbed846d0 a2=3 a3=0 items=0 ppid=1 pid=4432 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:24.681000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 10 00:37:24.690630 systemd[1]: Started session-10.scope. Jul 10 00:37:24.690980 systemd-logind[1194]: New session 10 of user core. Jul 10 00:37:24.694000 audit[4432]: USER_START pid=4432 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:37:24.696000 audit[4436]: CRED_ACQ pid=4436 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:37:24.801816 systemd-networkd[1023]: cali6ce2de465ce: Gained IPv6LL Jul 10 00:37:24.960027 sshd[4432]: pam_unix(sshd:session): session closed for user core Jul 10 00:37:24.959000 audit[4432]: USER_END pid=4432 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:37:24.959000 audit[4432]: CRED_DISP pid=4432 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:37:24.962671 systemd[1]: sshd@9-10.0.0.36:22-10.0.0.1:54238.service: Deactivated successfully. Jul 10 00:37:24.963525 systemd[1]: session-10.scope: Deactivated successfully. Jul 10 00:37:24.961000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.0.0.36:22-10.0.0.1:54238 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:37:24.964409 systemd-logind[1194]: Session 10 logged out. Waiting for processes to exit. Jul 10 00:37:24.965143 systemd-logind[1194]: Removed session 10. Jul 10 00:37:25.102369 kubelet[1947]: E0710 00:37:25.102324 1947 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:37:25.102369 kubelet[1947]: E0710 00:37:25.102369 1947 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:37:25.261000 audit[4449]: NETFILTER_CFG table=filter:118 family=2 entries=12 op=nft_register_rule pid=4449 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:37:25.261000 audit[4449]: SYSCALL arch=c000003e syscall=46 success=yes exit=4504 a0=3 a1=7ffccd638a70 a2=0 a3=7ffccd638a5c items=0 ppid=2093 pid=4449 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:25.261000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:37:25.278000 audit[4449]: NETFILTER_CFG table=nat:119 family=2 entries=58 op=nft_register_chain pid=4449 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:37:25.278000 audit[4449]: SYSCALL arch=c000003e syscall=46 success=yes exit=20628 a0=3 a1=7ffccd638a70 a2=0 a3=7ffccd638a5c items=0 ppid=2093 pid=4449 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:25.278000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:37:25.719455 kubelet[1947]: I0710 00:37:25.719419 1947 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Jul 10 00:37:25.755275 systemd[1]: run-containerd-runc-k8s.io-ea2c8e0f16e40cff08cb91d4b77a42f0c4d2f4352511ed453d2af75bac840afc-runc.eRpSQr.mount: Deactivated successfully. Jul 10 00:37:25.841695 systemd[1]: run-containerd-runc-k8s.io-ea2c8e0f16e40cff08cb91d4b77a42f0c4d2f4352511ed453d2af75bac840afc-runc.fPKnry.mount: Deactivated successfully. Jul 10 00:37:26.091160 systemd-networkd[1023]: calidf845a029c1: Gained IPv6LL Jul 10 00:37:26.104919 kubelet[1947]: E0710 00:37:26.104871 1947 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:37:26.637806 env[1205]: time="2025-07-10T00:37:26.637755746Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/kube-controllers:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:37:26.658917 env[1205]: time="2025-07-10T00:37:26.658851199Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:761b294e26556b58aabc85094a3d465389e6b141b7400aee732bd13400a6124a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:37:26.687449 env[1205]: time="2025-07-10T00:37:26.687392426Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/kube-controllers:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:37:26.689596 env[1205]: time="2025-07-10T00:37:26.689516994Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/kube-controllers@sha256:5d3ecdec3cbbe8f7009077102e35e8a2141161b59c548cf3f97829177677cbce,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:37:26.689990 env[1205]: time="2025-07-10T00:37:26.689951870Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.2\" returns image reference \"sha256:761b294e26556b58aabc85094a3d465389e6b141b7400aee732bd13400a6124a\"" Jul 10 00:37:26.691334 env[1205]: time="2025-07-10T00:37:26.691307314Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.2\"" Jul 10 00:37:26.702955 env[1205]: time="2025-07-10T00:37:26.702907105Z" level=info msg="CreateContainer within sandbox \"ee9d6e8f4478ef709f58cbd1a1d53b0899154d7e46249e90d13b3be201c646fa\" for container &ContainerMetadata{Name:calico-kube-controllers,Attempt:0,}" Jul 10 00:37:26.736386 env[1205]: time="2025-07-10T00:37:26.736329514Z" level=info msg="CreateContainer within sandbox \"ee9d6e8f4478ef709f58cbd1a1d53b0899154d7e46249e90d13b3be201c646fa\" for &ContainerMetadata{Name:calico-kube-controllers,Attempt:0,} returns container id \"bc69ea809a3bb2f58fa6c872bd73465d0a4878fc43c70f5c396d241469bac481\"" Jul 10 00:37:26.736969 env[1205]: time="2025-07-10T00:37:26.736931634Z" level=info msg="StartContainer for \"bc69ea809a3bb2f58fa6c872bd73465d0a4878fc43c70f5c396d241469bac481\"" Jul 10 00:37:26.753499 systemd[1]: Started cri-containerd-bc69ea809a3bb2f58fa6c872bd73465d0a4878fc43c70f5c396d241469bac481.scope. Jul 10 00:37:26.763000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:26.763000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:26.763000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:26.763000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:26.763000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:26.763000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:26.763000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:26.763000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:26.763000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:26.763000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:26.763000 audit: BPF prog-id=209 op=LOAD Jul 10 00:37:26.764000 audit[4503]: AVC avc: denied { bpf } for pid=4503 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:26.764000 audit[4503]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=3908 pid=4503 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:26.764000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6263363965613830396133626232663538666136633837326264373334 Jul 10 00:37:26.764000 audit[4503]: AVC avc: denied { perfmon } for pid=4503 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:26.764000 audit[4503]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=3908 pid=4503 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:26.764000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6263363965613830396133626232663538666136633837326264373334 Jul 10 00:37:26.764000 audit[4503]: AVC avc: denied { bpf } for pid=4503 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:26.764000 audit[4503]: AVC avc: denied { bpf } for pid=4503 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:26.764000 audit[4503]: AVC avc: denied { bpf } for pid=4503 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:26.764000 audit[4503]: AVC avc: denied { perfmon } for pid=4503 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:26.764000 audit[4503]: AVC avc: denied { perfmon } for pid=4503 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:26.764000 audit[4503]: AVC avc: denied { perfmon } for pid=4503 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:26.764000 audit[4503]: AVC avc: denied { perfmon } for pid=4503 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:26.764000 audit[4503]: AVC avc: denied { perfmon } for pid=4503 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:26.764000 audit[4503]: AVC avc: denied { bpf } for pid=4503 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:26.764000 audit[4503]: AVC avc: denied { bpf } for pid=4503 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:26.764000 audit: BPF prog-id=210 op=LOAD Jul 10 00:37:26.764000 audit[4503]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0001c2670 items=0 ppid=3908 pid=4503 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:26.764000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6263363965613830396133626232663538666136633837326264373334 Jul 10 00:37:26.764000 audit[4503]: AVC avc: denied { bpf } for pid=4503 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:26.764000 audit[4503]: AVC avc: denied { bpf } for pid=4503 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:26.764000 audit[4503]: AVC avc: denied { perfmon } for pid=4503 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:26.764000 audit[4503]: AVC avc: denied { perfmon } for pid=4503 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:26.764000 audit[4503]: AVC avc: denied { perfmon } for pid=4503 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:26.764000 audit[4503]: AVC avc: denied { perfmon } for pid=4503 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:26.764000 audit[4503]: AVC avc: denied { perfmon } for pid=4503 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:26.764000 audit[4503]: AVC avc: denied { bpf } for pid=4503 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:26.764000 audit[4503]: AVC avc: denied { bpf } for pid=4503 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:26.764000 audit: BPF prog-id=211 op=LOAD Jul 10 00:37:26.764000 audit[4503]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0001c26b8 items=0 ppid=3908 pid=4503 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:26.764000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6263363965613830396133626232663538666136633837326264373334 Jul 10 00:37:26.764000 audit: BPF prog-id=211 op=UNLOAD Jul 10 00:37:26.764000 audit: BPF prog-id=210 op=UNLOAD Jul 10 00:37:26.764000 audit[4503]: AVC avc: denied { bpf } for pid=4503 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:26.764000 audit[4503]: AVC avc: denied { bpf } for pid=4503 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:26.764000 audit[4503]: AVC avc: denied { bpf } for pid=4503 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:26.764000 audit[4503]: AVC avc: denied { perfmon } for pid=4503 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:26.764000 audit[4503]: AVC avc: denied { perfmon } for pid=4503 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:26.764000 audit[4503]: AVC avc: denied { perfmon } for pid=4503 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:26.764000 audit[4503]: AVC avc: denied { perfmon } for pid=4503 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:26.764000 audit[4503]: AVC avc: denied { perfmon } for pid=4503 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:26.764000 audit[4503]: AVC avc: denied { bpf } for pid=4503 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:26.764000 audit[4503]: AVC avc: denied { bpf } for pid=4503 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:26.764000 audit: BPF prog-id=212 op=LOAD Jul 10 00:37:26.764000 audit[4503]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0001c2ac8 items=0 ppid=3908 pid=4503 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:26.764000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6263363965613830396133626232663538666136633837326264373334 Jul 10 00:37:26.791513 env[1205]: time="2025-07-10T00:37:26.791466527Z" level=info msg="StartContainer for \"bc69ea809a3bb2f58fa6c872bd73465d0a4878fc43c70f5c396d241469bac481\" returns successfully" Jul 10 00:37:27.110993 kubelet[1947]: E0710 00:37:27.110264 1947 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:37:27.159185 kubelet[1947]: I0710 00:37:27.159116 1947 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-kube-controllers-89f4c7b56-xqnjf" podStartSLOduration=28.252496013 podStartE2EDuration="32.159080279s" podCreationTimestamp="2025-07-10 00:36:55 +0000 UTC" firstStartedPulling="2025-07-10 00:37:22.784498486 +0000 UTC m=+48.206923494" lastFinishedPulling="2025-07-10 00:37:26.691082752 +0000 UTC m=+52.113507760" observedRunningTime="2025-07-10 00:37:27.122093992 +0000 UTC m=+52.544519000" watchObservedRunningTime="2025-07-10 00:37:27.159080279 +0000 UTC m=+52.581505277" Jul 10 00:37:28.115180 env[1205]: time="2025-07-10T00:37:28.115073180Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/csi:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:37:28.117442 env[1205]: time="2025-07-10T00:37:28.117386100Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:c7fd1cc652979d89a51bbcc125e28e90c9815c0bd8f922a5bd36eed4e1927c6d,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:37:28.118918 env[1205]: time="2025-07-10T00:37:28.118889992Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/csi:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:37:28.120475 env[1205]: time="2025-07-10T00:37:28.120443197Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/csi@sha256:e570128aa8067a2f06b96d3cc98afa2e0a4b9790b435ee36ca051c8e72aeb8d0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:37:28.120968 env[1205]: time="2025-07-10T00:37:28.120928879Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.2\" returns image reference \"sha256:c7fd1cc652979d89a51bbcc125e28e90c9815c0bd8f922a5bd36eed4e1927c6d\"" Jul 10 00:37:28.121982 env[1205]: time="2025-07-10T00:37:28.121961718Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.2\"" Jul 10 00:37:28.124017 env[1205]: time="2025-07-10T00:37:28.123464839Z" level=info msg="CreateContainer within sandbox \"e85ccdde7862fa4c3cb351013b3e8613e58276bf4b718c855f3f5e86224e6cc8\" for container &ContainerMetadata{Name:calico-csi,Attempt:0,}" Jul 10 00:37:28.138884 env[1205]: time="2025-07-10T00:37:28.138814256Z" level=info msg="CreateContainer within sandbox \"e85ccdde7862fa4c3cb351013b3e8613e58276bf4b718c855f3f5e86224e6cc8\" for &ContainerMetadata{Name:calico-csi,Attempt:0,} returns container id \"9b598cc05f8cc5eb5e75ce1109e583d9685349f342021a52a1bfaba8c901b8e9\"" Jul 10 00:37:28.139539 env[1205]: time="2025-07-10T00:37:28.139501496Z" level=info msg="StartContainer for \"9b598cc05f8cc5eb5e75ce1109e583d9685349f342021a52a1bfaba8c901b8e9\"" Jul 10 00:37:28.161898 systemd[1]: Started cri-containerd-9b598cc05f8cc5eb5e75ce1109e583d9685349f342021a52a1bfaba8c901b8e9.scope. Jul 10 00:37:28.180000 audit[4571]: AVC avc: denied { perfmon } for pid=4571 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:28.180000 audit[4571]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001456b0 a2=3c a3=7fd9518aecb8 items=0 ppid=3941 pid=4571 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:28.180000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3962353938636330356638636335656235653735636531313039653538 Jul 10 00:37:28.180000 audit[4571]: AVC avc: denied { bpf } for pid=4571 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:28.180000 audit[4571]: AVC avc: denied { bpf } for pid=4571 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:28.180000 audit[4571]: AVC avc: denied { bpf } for pid=4571 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:28.180000 audit[4571]: AVC avc: denied { perfmon } for pid=4571 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:28.180000 audit[4571]: AVC avc: denied { perfmon } for pid=4571 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:28.180000 audit[4571]: AVC avc: denied { perfmon } for pid=4571 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:28.180000 audit[4571]: AVC avc: denied { perfmon } for pid=4571 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:28.180000 audit[4571]: AVC avc: denied { perfmon } for pid=4571 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:28.180000 audit[4571]: AVC avc: denied { bpf } for pid=4571 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:28.180000 audit[4571]: AVC avc: denied { bpf } for pid=4571 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:28.180000 audit: BPF prog-id=213 op=LOAD Jul 10 00:37:28.180000 audit[4571]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001459d8 a2=78 a3=c0001b6ca8 items=0 ppid=3941 pid=4571 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:28.180000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3962353938636330356638636335656235653735636531313039653538 Jul 10 00:37:28.181000 audit[4571]: AVC avc: denied { bpf } for pid=4571 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:28.181000 audit[4571]: AVC avc: denied { bpf } for pid=4571 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:28.181000 audit[4571]: AVC avc: denied { perfmon } for pid=4571 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:28.181000 audit[4571]: AVC avc: denied { perfmon } for pid=4571 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:28.181000 audit[4571]: AVC avc: denied { perfmon } for pid=4571 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:28.181000 audit[4571]: AVC avc: denied { perfmon } for pid=4571 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:28.181000 audit[4571]: AVC avc: denied { perfmon } for pid=4571 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:28.181000 audit[4571]: AVC avc: denied { bpf } for pid=4571 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:28.181000 audit[4571]: AVC avc: denied { bpf } for pid=4571 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:28.181000 audit: BPF prog-id=214 op=LOAD Jul 10 00:37:28.181000 audit[4571]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000145770 a2=78 a3=c0001b6cf8 items=0 ppid=3941 pid=4571 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:28.181000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3962353938636330356638636335656235653735636531313039653538 Jul 10 00:37:28.181000 audit: BPF prog-id=214 op=UNLOAD Jul 10 00:37:28.181000 audit: BPF prog-id=213 op=UNLOAD Jul 10 00:37:28.181000 audit[4571]: AVC avc: denied { bpf } for pid=4571 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:28.181000 audit[4571]: AVC avc: denied { bpf } for pid=4571 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:28.181000 audit[4571]: AVC avc: denied { bpf } for pid=4571 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:28.181000 audit[4571]: AVC avc: denied { perfmon } for pid=4571 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:28.181000 audit[4571]: AVC avc: denied { perfmon } for pid=4571 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:28.181000 audit[4571]: AVC avc: denied { perfmon } for pid=4571 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:28.181000 audit[4571]: AVC avc: denied { perfmon } for pid=4571 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:28.181000 audit[4571]: AVC avc: denied { perfmon } for pid=4571 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:28.181000 audit[4571]: AVC avc: denied { bpf } for pid=4571 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:28.181000 audit[4571]: AVC avc: denied { bpf } for pid=4571 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:28.181000 audit: BPF prog-id=215 op=LOAD Jul 10 00:37:28.181000 audit[4571]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000145c30 a2=78 a3=c0001b6d88 items=0 ppid=3941 pid=4571 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:28.181000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3962353938636330356638636335656235653735636531313039653538 Jul 10 00:37:28.518339 env[1205]: time="2025-07-10T00:37:28.518272067Z" level=info msg="StartContainer for \"9b598cc05f8cc5eb5e75ce1109e583d9685349f342021a52a1bfaba8c901b8e9\" returns successfully" Jul 10 00:37:29.964073 systemd[1]: Started sshd@10-10.0.0.36:22-10.0.0.1:41450.service. Jul 10 00:37:29.962000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.0.0.36:22-10.0.0.1:41450 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:37:29.965193 kernel: kauditd_printk_skb: 113 callbacks suppressed Jul 10 00:37:29.965328 kernel: audit: type=1130 audit(1752107849.962:1396): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.0.0.36:22-10.0.0.1:41450 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:37:30.007000 audit[4607]: USER_ACCT pid=4607 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:37:30.009338 sshd[4607]: Accepted publickey for core from 10.0.0.1 port 41450 ssh2: RSA SHA256:suUhWV759MqU0C+Dl6JG8TPW8PqnqlsB4qushdi9Ejw Jul 10 00:37:30.012000 audit[4607]: CRED_ACQ pid=4607 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:37:30.013713 sshd[4607]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 00:37:30.016948 kernel: audit: type=1101 audit(1752107850.007:1397): pid=4607 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:37:30.017028 kernel: audit: type=1103 audit(1752107850.012:1398): pid=4607 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:37:30.017056 kernel: audit: type=1006 audit(1752107850.012:1399): pid=4607 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=11 res=1 Jul 10 00:37:30.017512 systemd-logind[1194]: New session 11 of user core. Jul 10 00:37:30.020549 kernel: audit: type=1300 audit(1752107850.012:1399): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe942690d0 a2=3 a3=0 items=0 ppid=1 pid=4607 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:30.012000 audit[4607]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe942690d0 a2=3 a3=0 items=0 ppid=1 pid=4607 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:30.020965 systemd[1]: Started session-11.scope. Jul 10 00:37:30.023158 kernel: audit: type=1327 audit(1752107850.012:1399): proctitle=737368643A20636F7265205B707269765D Jul 10 00:37:30.012000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 10 00:37:30.024000 audit[4607]: USER_START pid=4607 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:37:30.024000 audit[4609]: CRED_ACQ pid=4609 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:37:30.033846 kernel: audit: type=1105 audit(1752107850.024:1400): pid=4607 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:37:30.033896 kernel: audit: type=1103 audit(1752107850.024:1401): pid=4609 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:37:30.183190 sshd[4607]: pam_unix(sshd:session): session closed for user core Jul 10 00:37:30.182000 audit[4607]: USER_END pid=4607 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:37:30.186681 systemd[1]: Started sshd@11-10.0.0.36:22-10.0.0.1:41466.service. Jul 10 00:37:30.187386 systemd[1]: sshd@10-10.0.0.36:22-10.0.0.1:41450.service: Deactivated successfully. Jul 10 00:37:30.188086 systemd[1]: session-11.scope: Deactivated successfully. Jul 10 00:37:30.188769 systemd-logind[1194]: Session 11 logged out. Waiting for processes to exit. Jul 10 00:37:30.182000 audit[4607]: CRED_DISP pid=4607 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:37:30.189802 systemd-logind[1194]: Removed session 11. Jul 10 00:37:30.192545 kernel: audit: type=1106 audit(1752107850.182:1402): pid=4607 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:37:30.192603 kernel: audit: type=1104 audit(1752107850.182:1403): pid=4607 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:37:30.182000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.0.0.36:22-10.0.0.1:41466 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:37:30.182000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.0.0.36:22-10.0.0.1:41450 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:37:30.225000 audit[4620]: USER_ACCT pid=4620 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:37:30.227102 sshd[4620]: Accepted publickey for core from 10.0.0.1 port 41466 ssh2: RSA SHA256:suUhWV759MqU0C+Dl6JG8TPW8PqnqlsB4qushdi9Ejw Jul 10 00:37:30.226000 audit[4620]: CRED_ACQ pid=4620 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:37:30.228143 sshd[4620]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 00:37:30.226000 audit[4620]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc88f511e0 a2=3 a3=0 items=0 ppid=1 pid=4620 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:30.226000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 10 00:37:30.231345 systemd-logind[1194]: New session 12 of user core. Jul 10 00:37:30.232345 systemd[1]: Started session-12.scope. Jul 10 00:37:30.235000 audit[4620]: USER_START pid=4620 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:37:30.236000 audit[4624]: CRED_ACQ pid=4624 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:37:30.369089 sshd[4620]: pam_unix(sshd:session): session closed for user core Jul 10 00:37:30.369000 audit[4620]: USER_END pid=4620 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:37:30.369000 audit[4620]: CRED_DISP pid=4620 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:37:30.372661 systemd[1]: Started sshd@12-10.0.0.36:22-10.0.0.1:41470.service. Jul 10 00:37:30.371000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.0.0.36:22-10.0.0.1:41470 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:37:30.375681 systemd[1]: sshd@11-10.0.0.36:22-10.0.0.1:41466.service: Deactivated successfully. Jul 10 00:37:30.376315 systemd[1]: session-12.scope: Deactivated successfully. Jul 10 00:37:30.374000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.0.0.36:22-10.0.0.1:41466 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:37:30.377907 systemd-logind[1194]: Session 12 logged out. Waiting for processes to exit. Jul 10 00:37:30.380251 systemd-logind[1194]: Removed session 12. Jul 10 00:37:30.420000 audit[4633]: USER_ACCT pid=4633 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:37:30.422330 sshd[4633]: Accepted publickey for core from 10.0.0.1 port 41470 ssh2: RSA SHA256:suUhWV759MqU0C+Dl6JG8TPW8PqnqlsB4qushdi9Ejw Jul 10 00:37:30.421000 audit[4633]: CRED_ACQ pid=4633 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:37:30.421000 audit[4633]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffca26313d0 a2=3 a3=0 items=0 ppid=1 pid=4633 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:30.421000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 10 00:37:30.423447 sshd[4633]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 00:37:30.426710 systemd-logind[1194]: New session 13 of user core. Jul 10 00:37:30.427451 systemd[1]: Started session-13.scope. Jul 10 00:37:30.430000 audit[4633]: USER_START pid=4633 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:37:30.431000 audit[4636]: CRED_ACQ pid=4636 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:37:30.530393 sshd[4633]: pam_unix(sshd:session): session closed for user core Jul 10 00:37:30.529000 audit[4633]: USER_END pid=4633 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:37:30.529000 audit[4633]: CRED_DISP pid=4633 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:37:30.532903 systemd[1]: sshd@12-10.0.0.36:22-10.0.0.1:41470.service: Deactivated successfully. Jul 10 00:37:30.531000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.0.0.36:22-10.0.0.1:41470 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:37:30.533590 systemd[1]: session-13.scope: Deactivated successfully. Jul 10 00:37:30.534052 systemd-logind[1194]: Session 13 logged out. Waiting for processes to exit. Jul 10 00:37:30.534720 systemd-logind[1194]: Removed session 13. Jul 10 00:37:31.580000 audit[1803]: AVC avc: denied { watch } for pid=1803 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7304 scontext=system_u:system_r:svirt_lxc_net_t:s0:c544,c954 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:37:31.580000 audit[1803]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c002171200 a2=fc6 a3=0 items=0 ppid=1671 pid=1803 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c544,c954 key=(null) Jul 10 00:37:31.580000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 00:37:31.580000 audit[1803]: AVC avc: denied { watch } for pid=1803 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7310 scontext=system_u:system_r:svirt_lxc_net_t:s0:c544,c954 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:37:31.580000 audit[1803]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c0012695c0 a2=fc6 a3=0 items=0 ppid=1671 pid=1803 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c544,c954 key=(null) Jul 10 00:37:31.580000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 00:37:31.920000 audit[1833]: AVC avc: denied { watch } for pid=1833 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7304 scontext=system_u:system_r:svirt_lxc_net_t:s0:c86,c421 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:37:31.920000 audit[1833]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=73 a1=c00f6784c0 a2=fc6 a3=0 items=0 ppid=1649 pid=1833 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c86,c421 key=(null) Jul 10 00:37:31.920000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3336002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Jul 10 00:37:31.926000 audit[1833]: AVC avc: denied { watch } for pid=1833 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7310 scontext=system_u:system_r:svirt_lxc_net_t:s0:c86,c421 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:37:31.926000 audit[1833]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=73 a1=c012ebc2d0 a2=fc6 a3=0 items=0 ppid=1649 pid=1833 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c86,c421 key=(null) Jul 10 00:37:31.926000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3336002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Jul 10 00:37:31.926000 audit[1833]: AVC avc: denied { watch } for pid=1833 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=7306 scontext=system_u:system_r:svirt_lxc_net_t:s0:c86,c421 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:37:31.926000 audit[1833]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=73 a1=c012e9e810 a2=fc6 a3=0 items=0 ppid=1649 pid=1833 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c86,c421 key=(null) Jul 10 00:37:31.926000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3336002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Jul 10 00:37:31.926000 audit[1833]: AVC avc: denied { watch } for pid=1833 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=7317 scontext=system_u:system_r:svirt_lxc_net_t:s0:c86,c421 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:37:31.926000 audit[1833]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=75 a1=c01289f4a0 a2=fc6 a3=0 items=0 ppid=1649 pid=1833 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c86,c421 key=(null) Jul 10 00:37:31.926000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3336002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Jul 10 00:37:31.953000 audit[1833]: AVC avc: denied { watch } for pid=1833 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7304 scontext=system_u:system_r:svirt_lxc_net_t:s0:c86,c421 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:37:31.953000 audit[1833]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=73 a1=c00f678660 a2=fc6 a3=0 items=0 ppid=1649 pid=1833 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c86,c421 key=(null) Jul 10 00:37:31.953000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3336002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Jul 10 00:37:31.953000 audit[1833]: AVC avc: denied { watch } for pid=1833 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7310 scontext=system_u:system_r:svirt_lxc_net_t:s0:c86,c421 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:37:31.953000 audit[1833]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=73 a1=c01289f4d0 a2=fc6 a3=0 items=0 ppid=1649 pid=1833 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c86,c421 key=(null) Jul 10 00:37:31.953000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3336002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Jul 10 00:37:32.734733 env[1205]: time="2025-07-10T00:37:32.734676551Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:37:32.736280 env[1205]: time="2025-07-10T00:37:32.736246808Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:5509118eed617ef04ca00f5a095bfd0a4cd1cf69edcfcf9bedf0edb641be51dd,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:37:32.737905 env[1205]: time="2025-07-10T00:37:32.737866468Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:37:32.739398 env[1205]: time="2025-07-10T00:37:32.739377554Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/apiserver@sha256:ec6b10660962e7caad70c47755049fad68f9fc2f7064e8bc7cb862583e02cc2b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:37:32.739924 env[1205]: time="2025-07-10T00:37:32.739891649Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.2\" returns image reference \"sha256:5509118eed617ef04ca00f5a095bfd0a4cd1cf69edcfcf9bedf0edb641be51dd\"" Jul 10 00:37:32.741004 env[1205]: time="2025-07-10T00:37:32.740968158Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.2\"" Jul 10 00:37:32.741771 env[1205]: time="2025-07-10T00:37:32.741734927Z" level=info msg="CreateContainer within sandbox \"d8ad584e01ab4331b436942ab8b2cc815b29d0e577fedf021a6374bce83540a8\" for container &ContainerMetadata{Name:calico-apiserver,Attempt:0,}" Jul 10 00:37:32.755473 env[1205]: time="2025-07-10T00:37:32.755424901Z" level=info msg="CreateContainer within sandbox \"d8ad584e01ab4331b436942ab8b2cc815b29d0e577fedf021a6374bce83540a8\" for &ContainerMetadata{Name:calico-apiserver,Attempt:0,} returns container id \"75a4abb8fa825f84ffc1e6de2b503548d1e736d6d7f62700e46097f2222aef04\"" Jul 10 00:37:32.756641 env[1205]: time="2025-07-10T00:37:32.756611487Z" level=info msg="StartContainer for \"75a4abb8fa825f84ffc1e6de2b503548d1e736d6d7f62700e46097f2222aef04\"" Jul 10 00:37:32.776921 systemd[1]: Started cri-containerd-75a4abb8fa825f84ffc1e6de2b503548d1e736d6d7f62700e46097f2222aef04.scope. Jul 10 00:37:32.785000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:32.785000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:32.785000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:32.785000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:32.785000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:32.785000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:32.785000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:32.785000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:32.785000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:32.785000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:32.785000 audit: BPF prog-id=216 op=LOAD Jul 10 00:37:32.785000 audit[4654]: AVC avc: denied { bpf } for pid=4654 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:32.785000 audit[4654]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00014dc48 a2=10 a3=1c items=0 ppid=4029 pid=4654 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:32.785000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3735613461626238666138323566383466666331653664653262353033 Jul 10 00:37:32.785000 audit[4654]: AVC avc: denied { perfmon } for pid=4654 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:32.785000 audit[4654]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00014d6b0 a2=3c a3=8 items=0 ppid=4029 pid=4654 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:32.785000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3735613461626238666138323566383466666331653664653262353033 Jul 10 00:37:32.785000 audit[4654]: AVC avc: denied { bpf } for pid=4654 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:32.785000 audit[4654]: AVC avc: denied { bpf } for pid=4654 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:32.785000 audit[4654]: AVC avc: denied { bpf } for pid=4654 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:32.785000 audit[4654]: AVC avc: denied { perfmon } for pid=4654 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:32.785000 audit[4654]: AVC avc: denied { perfmon } for pid=4654 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:32.785000 audit[4654]: AVC avc: denied { perfmon } for pid=4654 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:32.785000 audit[4654]: AVC avc: denied { perfmon } for pid=4654 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:32.785000 audit[4654]: AVC avc: denied { perfmon } for pid=4654 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:32.785000 audit[4654]: AVC avc: denied { bpf } for pid=4654 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:32.785000 audit[4654]: AVC avc: denied { bpf } for pid=4654 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:32.785000 audit: BPF prog-id=217 op=LOAD Jul 10 00:37:32.785000 audit[4654]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014d9d8 a2=78 a3=c000025590 items=0 ppid=4029 pid=4654 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:32.785000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3735613461626238666138323566383466666331653664653262353033 Jul 10 00:37:32.785000 audit[4654]: AVC avc: denied { bpf } for pid=4654 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:32.785000 audit[4654]: AVC avc: denied { bpf } for pid=4654 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:32.785000 audit[4654]: AVC avc: denied { perfmon } for pid=4654 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:32.785000 audit[4654]: AVC avc: denied { perfmon } for pid=4654 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:32.785000 audit[4654]: AVC avc: denied { perfmon } for pid=4654 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:32.785000 audit[4654]: AVC avc: denied { perfmon } for pid=4654 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:32.785000 audit[4654]: AVC avc: denied { perfmon } for pid=4654 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:32.785000 audit[4654]: AVC avc: denied { bpf } for pid=4654 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:32.785000 audit[4654]: AVC avc: denied { bpf } for pid=4654 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:32.785000 audit: BPF prog-id=218 op=LOAD Jul 10 00:37:32.785000 audit[4654]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00014d770 a2=78 a3=c0000255d8 items=0 ppid=4029 pid=4654 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:32.785000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3735613461626238666138323566383466666331653664653262353033 Jul 10 00:37:32.785000 audit: BPF prog-id=218 op=UNLOAD Jul 10 00:37:32.785000 audit: BPF prog-id=217 op=UNLOAD Jul 10 00:37:32.786000 audit[4654]: AVC avc: denied { bpf } for pid=4654 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:32.786000 audit[4654]: AVC avc: denied { bpf } for pid=4654 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:32.786000 audit[4654]: AVC avc: denied { bpf } for pid=4654 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:32.786000 audit[4654]: AVC avc: denied { perfmon } for pid=4654 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:32.786000 audit[4654]: AVC avc: denied { perfmon } for pid=4654 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:32.786000 audit[4654]: AVC avc: denied { perfmon } for pid=4654 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:32.786000 audit[4654]: AVC avc: denied { perfmon } for pid=4654 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:32.786000 audit[4654]: AVC avc: denied { perfmon } for pid=4654 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:32.786000 audit[4654]: AVC avc: denied { bpf } for pid=4654 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:32.786000 audit[4654]: AVC avc: denied { bpf } for pid=4654 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:32.786000 audit: BPF prog-id=219 op=LOAD Jul 10 00:37:32.786000 audit[4654]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014dc30 a2=78 a3=c0000259e8 items=0 ppid=4029 pid=4654 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:32.786000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3735613461626238666138323566383466666331653664653262353033 Jul 10 00:37:32.817361 env[1205]: time="2025-07-10T00:37:32.817310965Z" level=info msg="StartContainer for \"75a4abb8fa825f84ffc1e6de2b503548d1e736d6d7f62700e46097f2222aef04\" returns successfully" Jul 10 00:37:33.314603 kubelet[1947]: I0710 00:37:33.314545 1947 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-apiserver/calico-apiserver-79f4d77569-v77g9" podStartSLOduration=31.432041093 podStartE2EDuration="41.314530389s" podCreationTimestamp="2025-07-10 00:36:52 +0000 UTC" firstStartedPulling="2025-07-10 00:37:22.858182847 +0000 UTC m=+48.280607855" lastFinishedPulling="2025-07-10 00:37:32.740672113 +0000 UTC m=+58.163097151" observedRunningTime="2025-07-10 00:37:33.313832489 +0000 UTC m=+58.736257497" watchObservedRunningTime="2025-07-10 00:37:33.314530389 +0000 UTC m=+58.736955397" Jul 10 00:37:33.324000 audit[4686]: NETFILTER_CFG table=filter:120 family=2 entries=12 op=nft_register_rule pid=4686 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:37:33.324000 audit[4686]: SYSCALL arch=c000003e syscall=46 success=yes exit=4504 a0=3 a1=7fffaa26c400 a2=0 a3=7fffaa26c3ec items=0 ppid=2093 pid=4686 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:33.324000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:37:33.330000 audit[4686]: NETFILTER_CFG table=nat:121 family=2 entries=22 op=nft_register_rule pid=4686 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:37:33.330000 audit[4686]: SYSCALL arch=c000003e syscall=46 success=yes exit=6540 a0=3 a1=7fffaa26c400 a2=0 a3=7fffaa26c3ec items=0 ppid=2093 pid=4686 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:33.330000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:37:33.764000 audit[4664]: AVC avc: denied { watch } for pid=4664 comm="apiserver" path="/calico-apiserver-certs/..2025_07_10_00_37_08.785831614/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c158,c227 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c158,c227 tclass=file permissive=0 Jul 10 00:37:33.764000 audit[4664]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c000e74140 a2=fc6 a3=0 items=0 ppid=4029 pid=4664 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c158,c227 key=(null) Jul 10 00:37:33.764000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 10 00:37:33.796000 audit[4692]: NETFILTER_CFG table=filter:122 family=2 entries=11 op=nft_register_rule pid=4692 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:37:33.796000 audit[4692]: SYSCALL arch=c000003e syscall=46 success=yes exit=3760 a0=3 a1=7ffe7bce4430 a2=0 a3=7ffe7bce441c items=0 ppid=2093 pid=4692 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:33.796000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:37:33.801000 audit[4692]: NETFILTER_CFG table=nat:123 family=2 entries=29 op=nft_register_chain pid=4692 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:37:33.801000 audit[4692]: SYSCALL arch=c000003e syscall=46 success=yes exit=10116 a0=3 a1=7ffe7bce4430 a2=0 a3=7ffe7bce441c items=0 ppid=2093 pid=4692 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:33.801000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:37:34.879748 env[1205]: time="2025-07-10T00:37:34.879678302Z" level=info msg="StopPodSandbox for \"29dbdbc36f7112620340299d9724c9353cc804cb5e64eb7f4c38cb3cb82c8b78\"" Jul 10 00:37:34.977009 env[1205]: 2025-07-10 00:37:34.941 [WARNING][4706] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="29dbdbc36f7112620340299d9724c9353cc804cb5e64eb7f4c38cb3cb82c8b78" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--668d6bf9bc--sm7jj-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"c8b0db9c-1785-4ce7-ba5a-244a4bfc9464", ResourceVersion:"1030", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 36, 41, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"a9b16baf9167f063546de397fe293afe4d7f1fa587956023a3386b038e2fc145", Pod:"coredns-668d6bf9bc-sm7jj", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calibdc4ef6058b", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:37:34.977009 env[1205]: 2025-07-10 00:37:34.941 [INFO][4706] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="29dbdbc36f7112620340299d9724c9353cc804cb5e64eb7f4c38cb3cb82c8b78" Jul 10 00:37:34.977009 env[1205]: 2025-07-10 00:37:34.941 [INFO][4706] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="29dbdbc36f7112620340299d9724c9353cc804cb5e64eb7f4c38cb3cb82c8b78" iface="eth0" netns="" Jul 10 00:37:34.977009 env[1205]: 2025-07-10 00:37:34.941 [INFO][4706] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="29dbdbc36f7112620340299d9724c9353cc804cb5e64eb7f4c38cb3cb82c8b78" Jul 10 00:37:34.977009 env[1205]: 2025-07-10 00:37:34.941 [INFO][4706] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="29dbdbc36f7112620340299d9724c9353cc804cb5e64eb7f4c38cb3cb82c8b78" Jul 10 00:37:34.977009 env[1205]: 2025-07-10 00:37:34.965 [INFO][4718] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="29dbdbc36f7112620340299d9724c9353cc804cb5e64eb7f4c38cb3cb82c8b78" HandleID="k8s-pod-network.29dbdbc36f7112620340299d9724c9353cc804cb5e64eb7f4c38cb3cb82c8b78" Workload="localhost-k8s-coredns--668d6bf9bc--sm7jj-eth0" Jul 10 00:37:34.977009 env[1205]: 2025-07-10 00:37:34.966 [INFO][4718] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:37:34.977009 env[1205]: 2025-07-10 00:37:34.966 [INFO][4718] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:37:34.977009 env[1205]: 2025-07-10 00:37:34.972 [WARNING][4718] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="29dbdbc36f7112620340299d9724c9353cc804cb5e64eb7f4c38cb3cb82c8b78" HandleID="k8s-pod-network.29dbdbc36f7112620340299d9724c9353cc804cb5e64eb7f4c38cb3cb82c8b78" Workload="localhost-k8s-coredns--668d6bf9bc--sm7jj-eth0" Jul 10 00:37:34.977009 env[1205]: 2025-07-10 00:37:34.972 [INFO][4718] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="29dbdbc36f7112620340299d9724c9353cc804cb5e64eb7f4c38cb3cb82c8b78" HandleID="k8s-pod-network.29dbdbc36f7112620340299d9724c9353cc804cb5e64eb7f4c38cb3cb82c8b78" Workload="localhost-k8s-coredns--668d6bf9bc--sm7jj-eth0" Jul 10 00:37:34.977009 env[1205]: 2025-07-10 00:37:34.973 [INFO][4718] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:37:34.977009 env[1205]: 2025-07-10 00:37:34.975 [INFO][4706] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="29dbdbc36f7112620340299d9724c9353cc804cb5e64eb7f4c38cb3cb82c8b78" Jul 10 00:37:34.977823 env[1205]: time="2025-07-10T00:37:34.977051404Z" level=info msg="TearDown network for sandbox \"29dbdbc36f7112620340299d9724c9353cc804cb5e64eb7f4c38cb3cb82c8b78\" successfully" Jul 10 00:37:34.977823 env[1205]: time="2025-07-10T00:37:34.977096358Z" level=info msg="StopPodSandbox for \"29dbdbc36f7112620340299d9724c9353cc804cb5e64eb7f4c38cb3cb82c8b78\" returns successfully" Jul 10 00:37:34.981487 env[1205]: time="2025-07-10T00:37:34.981448887Z" level=info msg="RemovePodSandbox for \"29dbdbc36f7112620340299d9724c9353cc804cb5e64eb7f4c38cb3cb82c8b78\"" Jul 10 00:37:34.981548 env[1205]: time="2025-07-10T00:37:34.981492068Z" level=info msg="Forcibly stopping sandbox \"29dbdbc36f7112620340299d9724c9353cc804cb5e64eb7f4c38cb3cb82c8b78\"" Jul 10 00:37:35.044463 env[1205]: 2025-07-10 00:37:35.012 [WARNING][4735] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="29dbdbc36f7112620340299d9724c9353cc804cb5e64eb7f4c38cb3cb82c8b78" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--668d6bf9bc--sm7jj-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"c8b0db9c-1785-4ce7-ba5a-244a4bfc9464", ResourceVersion:"1030", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 36, 41, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"a9b16baf9167f063546de397fe293afe4d7f1fa587956023a3386b038e2fc145", Pod:"coredns-668d6bf9bc-sm7jj", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calibdc4ef6058b", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:37:35.044463 env[1205]: 2025-07-10 00:37:35.012 [INFO][4735] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="29dbdbc36f7112620340299d9724c9353cc804cb5e64eb7f4c38cb3cb82c8b78" Jul 10 00:37:35.044463 env[1205]: 2025-07-10 00:37:35.012 [INFO][4735] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="29dbdbc36f7112620340299d9724c9353cc804cb5e64eb7f4c38cb3cb82c8b78" iface="eth0" netns="" Jul 10 00:37:35.044463 env[1205]: 2025-07-10 00:37:35.012 [INFO][4735] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="29dbdbc36f7112620340299d9724c9353cc804cb5e64eb7f4c38cb3cb82c8b78" Jul 10 00:37:35.044463 env[1205]: 2025-07-10 00:37:35.012 [INFO][4735] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="29dbdbc36f7112620340299d9724c9353cc804cb5e64eb7f4c38cb3cb82c8b78" Jul 10 00:37:35.044463 env[1205]: 2025-07-10 00:37:35.033 [INFO][4743] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="29dbdbc36f7112620340299d9724c9353cc804cb5e64eb7f4c38cb3cb82c8b78" HandleID="k8s-pod-network.29dbdbc36f7112620340299d9724c9353cc804cb5e64eb7f4c38cb3cb82c8b78" Workload="localhost-k8s-coredns--668d6bf9bc--sm7jj-eth0" Jul 10 00:37:35.044463 env[1205]: 2025-07-10 00:37:35.034 [INFO][4743] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:37:35.044463 env[1205]: 2025-07-10 00:37:35.034 [INFO][4743] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:37:35.044463 env[1205]: 2025-07-10 00:37:35.039 [WARNING][4743] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="29dbdbc36f7112620340299d9724c9353cc804cb5e64eb7f4c38cb3cb82c8b78" HandleID="k8s-pod-network.29dbdbc36f7112620340299d9724c9353cc804cb5e64eb7f4c38cb3cb82c8b78" Workload="localhost-k8s-coredns--668d6bf9bc--sm7jj-eth0" Jul 10 00:37:35.044463 env[1205]: 2025-07-10 00:37:35.040 [INFO][4743] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="29dbdbc36f7112620340299d9724c9353cc804cb5e64eb7f4c38cb3cb82c8b78" HandleID="k8s-pod-network.29dbdbc36f7112620340299d9724c9353cc804cb5e64eb7f4c38cb3cb82c8b78" Workload="localhost-k8s-coredns--668d6bf9bc--sm7jj-eth0" Jul 10 00:37:35.044463 env[1205]: 2025-07-10 00:37:35.041 [INFO][4743] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:37:35.044463 env[1205]: 2025-07-10 00:37:35.043 [INFO][4735] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="29dbdbc36f7112620340299d9724c9353cc804cb5e64eb7f4c38cb3cb82c8b78" Jul 10 00:37:35.045126 env[1205]: time="2025-07-10T00:37:35.045072481Z" level=info msg="TearDown network for sandbox \"29dbdbc36f7112620340299d9724c9353cc804cb5e64eb7f4c38cb3cb82c8b78\" successfully" Jul 10 00:37:35.050983 env[1205]: time="2025-07-10T00:37:35.050959459Z" level=info msg="RemovePodSandbox \"29dbdbc36f7112620340299d9724c9353cc804cb5e64eb7f4c38cb3cb82c8b78\" returns successfully" Jul 10 00:37:35.051473 env[1205]: time="2025-07-10T00:37:35.051451002Z" level=info msg="StopPodSandbox for \"1a137de9d036b4eecbaadec3635f738c0153ae639090811abef60bdc1c0bcbde\"" Jul 10 00:37:35.110285 env[1205]: 2025-07-10 00:37:35.081 [WARNING][4761] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="1a137de9d036b4eecbaadec3635f738c0153ae639090811abef60bdc1c0bcbde" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--xcq57-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"11ff2135-d9e8-4055-b855-c59ae8ddcd79", ResourceVersion:"1009", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 36, 55, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"8967bcb6f", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"e85ccdde7862fa4c3cb351013b3e8613e58276bf4b718c855f3f5e86224e6cc8", Pod:"csi-node-driver-xcq57", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"calie994b9b45eb", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:37:35.110285 env[1205]: 2025-07-10 00:37:35.081 [INFO][4761] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="1a137de9d036b4eecbaadec3635f738c0153ae639090811abef60bdc1c0bcbde" Jul 10 00:37:35.110285 env[1205]: 2025-07-10 00:37:35.081 [INFO][4761] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="1a137de9d036b4eecbaadec3635f738c0153ae639090811abef60bdc1c0bcbde" iface="eth0" netns="" Jul 10 00:37:35.110285 env[1205]: 2025-07-10 00:37:35.081 [INFO][4761] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="1a137de9d036b4eecbaadec3635f738c0153ae639090811abef60bdc1c0bcbde" Jul 10 00:37:35.110285 env[1205]: 2025-07-10 00:37:35.081 [INFO][4761] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="1a137de9d036b4eecbaadec3635f738c0153ae639090811abef60bdc1c0bcbde" Jul 10 00:37:35.110285 env[1205]: 2025-07-10 00:37:35.098 [INFO][4771] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="1a137de9d036b4eecbaadec3635f738c0153ae639090811abef60bdc1c0bcbde" HandleID="k8s-pod-network.1a137de9d036b4eecbaadec3635f738c0153ae639090811abef60bdc1c0bcbde" Workload="localhost-k8s-csi--node--driver--xcq57-eth0" Jul 10 00:37:35.110285 env[1205]: 2025-07-10 00:37:35.099 [INFO][4771] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:37:35.110285 env[1205]: 2025-07-10 00:37:35.099 [INFO][4771] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:37:35.110285 env[1205]: 2025-07-10 00:37:35.105 [WARNING][4771] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="1a137de9d036b4eecbaadec3635f738c0153ae639090811abef60bdc1c0bcbde" HandleID="k8s-pod-network.1a137de9d036b4eecbaadec3635f738c0153ae639090811abef60bdc1c0bcbde" Workload="localhost-k8s-csi--node--driver--xcq57-eth0" Jul 10 00:37:35.110285 env[1205]: 2025-07-10 00:37:35.105 [INFO][4771] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="1a137de9d036b4eecbaadec3635f738c0153ae639090811abef60bdc1c0bcbde" HandleID="k8s-pod-network.1a137de9d036b4eecbaadec3635f738c0153ae639090811abef60bdc1c0bcbde" Workload="localhost-k8s-csi--node--driver--xcq57-eth0" Jul 10 00:37:35.110285 env[1205]: 2025-07-10 00:37:35.107 [INFO][4771] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:37:35.110285 env[1205]: 2025-07-10 00:37:35.108 [INFO][4761] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="1a137de9d036b4eecbaadec3635f738c0153ae639090811abef60bdc1c0bcbde" Jul 10 00:37:35.111041 env[1205]: time="2025-07-10T00:37:35.110328478Z" level=info msg="TearDown network for sandbox \"1a137de9d036b4eecbaadec3635f738c0153ae639090811abef60bdc1c0bcbde\" successfully" Jul 10 00:37:35.111041 env[1205]: time="2025-07-10T00:37:35.110362572Z" level=info msg="StopPodSandbox for \"1a137de9d036b4eecbaadec3635f738c0153ae639090811abef60bdc1c0bcbde\" returns successfully" Jul 10 00:37:35.111041 env[1205]: time="2025-07-10T00:37:35.110878981Z" level=info msg="RemovePodSandbox for \"1a137de9d036b4eecbaadec3635f738c0153ae639090811abef60bdc1c0bcbde\"" Jul 10 00:37:35.111041 env[1205]: time="2025-07-10T00:37:35.110907525Z" level=info msg="Forcibly stopping sandbox \"1a137de9d036b4eecbaadec3635f738c0153ae639090811abef60bdc1c0bcbde\"" Jul 10 00:37:35.182714 env[1205]: 2025-07-10 00:37:35.141 [WARNING][4789] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="1a137de9d036b4eecbaadec3635f738c0153ae639090811abef60bdc1c0bcbde" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--xcq57-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"11ff2135-d9e8-4055-b855-c59ae8ddcd79", ResourceVersion:"1009", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 36, 55, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"8967bcb6f", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"e85ccdde7862fa4c3cb351013b3e8613e58276bf4b718c855f3f5e86224e6cc8", Pod:"csi-node-driver-xcq57", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"calie994b9b45eb", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:37:35.182714 env[1205]: 2025-07-10 00:37:35.141 [INFO][4789] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="1a137de9d036b4eecbaadec3635f738c0153ae639090811abef60bdc1c0bcbde" Jul 10 00:37:35.182714 env[1205]: 2025-07-10 00:37:35.141 [INFO][4789] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="1a137de9d036b4eecbaadec3635f738c0153ae639090811abef60bdc1c0bcbde" iface="eth0" netns="" Jul 10 00:37:35.182714 env[1205]: 2025-07-10 00:37:35.141 [INFO][4789] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="1a137de9d036b4eecbaadec3635f738c0153ae639090811abef60bdc1c0bcbde" Jul 10 00:37:35.182714 env[1205]: 2025-07-10 00:37:35.141 [INFO][4789] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="1a137de9d036b4eecbaadec3635f738c0153ae639090811abef60bdc1c0bcbde" Jul 10 00:37:35.182714 env[1205]: 2025-07-10 00:37:35.168 [INFO][4797] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="1a137de9d036b4eecbaadec3635f738c0153ae639090811abef60bdc1c0bcbde" HandleID="k8s-pod-network.1a137de9d036b4eecbaadec3635f738c0153ae639090811abef60bdc1c0bcbde" Workload="localhost-k8s-csi--node--driver--xcq57-eth0" Jul 10 00:37:35.182714 env[1205]: 2025-07-10 00:37:35.168 [INFO][4797] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:37:35.182714 env[1205]: 2025-07-10 00:37:35.168 [INFO][4797] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:37:35.182714 env[1205]: 2025-07-10 00:37:35.177 [WARNING][4797] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="1a137de9d036b4eecbaadec3635f738c0153ae639090811abef60bdc1c0bcbde" HandleID="k8s-pod-network.1a137de9d036b4eecbaadec3635f738c0153ae639090811abef60bdc1c0bcbde" Workload="localhost-k8s-csi--node--driver--xcq57-eth0" Jul 10 00:37:35.182714 env[1205]: 2025-07-10 00:37:35.177 [INFO][4797] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="1a137de9d036b4eecbaadec3635f738c0153ae639090811abef60bdc1c0bcbde" HandleID="k8s-pod-network.1a137de9d036b4eecbaadec3635f738c0153ae639090811abef60bdc1c0bcbde" Workload="localhost-k8s-csi--node--driver--xcq57-eth0" Jul 10 00:37:35.182714 env[1205]: 2025-07-10 00:37:35.179 [INFO][4797] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:37:35.182714 env[1205]: 2025-07-10 00:37:35.180 [INFO][4789] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="1a137de9d036b4eecbaadec3635f738c0153ae639090811abef60bdc1c0bcbde" Jul 10 00:37:35.182714 env[1205]: time="2025-07-10T00:37:35.182404273Z" level=info msg="TearDown network for sandbox \"1a137de9d036b4eecbaadec3635f738c0153ae639090811abef60bdc1c0bcbde\" successfully" Jul 10 00:37:35.187004 env[1205]: time="2025-07-10T00:37:35.186963741Z" level=info msg="RemovePodSandbox \"1a137de9d036b4eecbaadec3635f738c0153ae639090811abef60bdc1c0bcbde\" returns successfully" Jul 10 00:37:35.187517 env[1205]: time="2025-07-10T00:37:35.187492773Z" level=info msg="StopPodSandbox for \"57474fc9fca6152a4e4b87d3af2e28153a81adbc34eb97e6e1b76d35c1f7cc2e\"" Jul 10 00:37:35.244426 env[1205]: 2025-07-10 00:37:35.215 [WARNING][4815] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="57474fc9fca6152a4e4b87d3af2e28153a81adbc34eb97e6e1b76d35c1f7cc2e" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-goldmane--768f4c5c69--z2lth-eth0", GenerateName:"goldmane-768f4c5c69-", Namespace:"calico-system", SelfLink:"", UID:"8eadc06b-a096-4667-a191-bf6882f37d75", ResourceVersion:"1039", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 36, 54, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"768f4c5c69", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"2623c6736f64e07ac7c0f19a3008e3504fdf7f22e71aee7e7116a68c2eb17849", Pod:"goldmane-768f4c5c69-z2lth", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.88.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"calib3acf623e3b", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:37:35.244426 env[1205]: 2025-07-10 00:37:35.216 [INFO][4815] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="57474fc9fca6152a4e4b87d3af2e28153a81adbc34eb97e6e1b76d35c1f7cc2e" Jul 10 00:37:35.244426 env[1205]: 2025-07-10 00:37:35.216 [INFO][4815] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="57474fc9fca6152a4e4b87d3af2e28153a81adbc34eb97e6e1b76d35c1f7cc2e" iface="eth0" netns="" Jul 10 00:37:35.244426 env[1205]: 2025-07-10 00:37:35.216 [INFO][4815] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="57474fc9fca6152a4e4b87d3af2e28153a81adbc34eb97e6e1b76d35c1f7cc2e" Jul 10 00:37:35.244426 env[1205]: 2025-07-10 00:37:35.216 [INFO][4815] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="57474fc9fca6152a4e4b87d3af2e28153a81adbc34eb97e6e1b76d35c1f7cc2e" Jul 10 00:37:35.244426 env[1205]: 2025-07-10 00:37:35.234 [INFO][4824] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="57474fc9fca6152a4e4b87d3af2e28153a81adbc34eb97e6e1b76d35c1f7cc2e" HandleID="k8s-pod-network.57474fc9fca6152a4e4b87d3af2e28153a81adbc34eb97e6e1b76d35c1f7cc2e" Workload="localhost-k8s-goldmane--768f4c5c69--z2lth-eth0" Jul 10 00:37:35.244426 env[1205]: 2025-07-10 00:37:35.234 [INFO][4824] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:37:35.244426 env[1205]: 2025-07-10 00:37:35.234 [INFO][4824] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:37:35.244426 env[1205]: 2025-07-10 00:37:35.240 [WARNING][4824] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="57474fc9fca6152a4e4b87d3af2e28153a81adbc34eb97e6e1b76d35c1f7cc2e" HandleID="k8s-pod-network.57474fc9fca6152a4e4b87d3af2e28153a81adbc34eb97e6e1b76d35c1f7cc2e" Workload="localhost-k8s-goldmane--768f4c5c69--z2lth-eth0" Jul 10 00:37:35.244426 env[1205]: 2025-07-10 00:37:35.240 [INFO][4824] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="57474fc9fca6152a4e4b87d3af2e28153a81adbc34eb97e6e1b76d35c1f7cc2e" HandleID="k8s-pod-network.57474fc9fca6152a4e4b87d3af2e28153a81adbc34eb97e6e1b76d35c1f7cc2e" Workload="localhost-k8s-goldmane--768f4c5c69--z2lth-eth0" Jul 10 00:37:35.244426 env[1205]: 2025-07-10 00:37:35.241 [INFO][4824] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:37:35.244426 env[1205]: 2025-07-10 00:37:35.243 [INFO][4815] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="57474fc9fca6152a4e4b87d3af2e28153a81adbc34eb97e6e1b76d35c1f7cc2e" Jul 10 00:37:35.244932 env[1205]: time="2025-07-10T00:37:35.244468030Z" level=info msg="TearDown network for sandbox \"57474fc9fca6152a4e4b87d3af2e28153a81adbc34eb97e6e1b76d35c1f7cc2e\" successfully" Jul 10 00:37:35.244932 env[1205]: time="2025-07-10T00:37:35.244509498Z" level=info msg="StopPodSandbox for \"57474fc9fca6152a4e4b87d3af2e28153a81adbc34eb97e6e1b76d35c1f7cc2e\" returns successfully" Jul 10 00:37:35.245115 env[1205]: time="2025-07-10T00:37:35.245086471Z" level=info msg="RemovePodSandbox for \"57474fc9fca6152a4e4b87d3af2e28153a81adbc34eb97e6e1b76d35c1f7cc2e\"" Jul 10 00:37:35.245149 env[1205]: time="2025-07-10T00:37:35.245118841Z" level=info msg="Forcibly stopping sandbox \"57474fc9fca6152a4e4b87d3af2e28153a81adbc34eb97e6e1b76d35c1f7cc2e\"" Jul 10 00:37:35.315197 env[1205]: 2025-07-10 00:37:35.277 [WARNING][4841] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="57474fc9fca6152a4e4b87d3af2e28153a81adbc34eb97e6e1b76d35c1f7cc2e" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-goldmane--768f4c5c69--z2lth-eth0", GenerateName:"goldmane-768f4c5c69-", Namespace:"calico-system", SelfLink:"", UID:"8eadc06b-a096-4667-a191-bf6882f37d75", ResourceVersion:"1039", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 36, 54, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"768f4c5c69", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"2623c6736f64e07ac7c0f19a3008e3504fdf7f22e71aee7e7116a68c2eb17849", Pod:"goldmane-768f4c5c69-z2lth", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.88.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"calib3acf623e3b", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:37:35.315197 env[1205]: 2025-07-10 00:37:35.278 [INFO][4841] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="57474fc9fca6152a4e4b87d3af2e28153a81adbc34eb97e6e1b76d35c1f7cc2e" Jul 10 00:37:35.315197 env[1205]: 2025-07-10 00:37:35.278 [INFO][4841] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="57474fc9fca6152a4e4b87d3af2e28153a81adbc34eb97e6e1b76d35c1f7cc2e" iface="eth0" netns="" Jul 10 00:37:35.315197 env[1205]: 2025-07-10 00:37:35.278 [INFO][4841] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="57474fc9fca6152a4e4b87d3af2e28153a81adbc34eb97e6e1b76d35c1f7cc2e" Jul 10 00:37:35.315197 env[1205]: 2025-07-10 00:37:35.278 [INFO][4841] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="57474fc9fca6152a4e4b87d3af2e28153a81adbc34eb97e6e1b76d35c1f7cc2e" Jul 10 00:37:35.315197 env[1205]: 2025-07-10 00:37:35.299 [INFO][4850] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="57474fc9fca6152a4e4b87d3af2e28153a81adbc34eb97e6e1b76d35c1f7cc2e" HandleID="k8s-pod-network.57474fc9fca6152a4e4b87d3af2e28153a81adbc34eb97e6e1b76d35c1f7cc2e" Workload="localhost-k8s-goldmane--768f4c5c69--z2lth-eth0" Jul 10 00:37:35.315197 env[1205]: 2025-07-10 00:37:35.299 [INFO][4850] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:37:35.315197 env[1205]: 2025-07-10 00:37:35.300 [INFO][4850] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:37:35.315197 env[1205]: 2025-07-10 00:37:35.309 [WARNING][4850] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="57474fc9fca6152a4e4b87d3af2e28153a81adbc34eb97e6e1b76d35c1f7cc2e" HandleID="k8s-pod-network.57474fc9fca6152a4e4b87d3af2e28153a81adbc34eb97e6e1b76d35c1f7cc2e" Workload="localhost-k8s-goldmane--768f4c5c69--z2lth-eth0" Jul 10 00:37:35.315197 env[1205]: 2025-07-10 00:37:35.309 [INFO][4850] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="57474fc9fca6152a4e4b87d3af2e28153a81adbc34eb97e6e1b76d35c1f7cc2e" HandleID="k8s-pod-network.57474fc9fca6152a4e4b87d3af2e28153a81adbc34eb97e6e1b76d35c1f7cc2e" Workload="localhost-k8s-goldmane--768f4c5c69--z2lth-eth0" Jul 10 00:37:35.315197 env[1205]: 2025-07-10 00:37:35.310 [INFO][4850] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:37:35.315197 env[1205]: 2025-07-10 00:37:35.313 [INFO][4841] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="57474fc9fca6152a4e4b87d3af2e28153a81adbc34eb97e6e1b76d35c1f7cc2e" Jul 10 00:37:35.315710 env[1205]: time="2025-07-10T00:37:35.315273040Z" level=info msg="TearDown network for sandbox \"57474fc9fca6152a4e4b87d3af2e28153a81adbc34eb97e6e1b76d35c1f7cc2e\" successfully" Jul 10 00:37:35.320193 env[1205]: time="2025-07-10T00:37:35.320149543Z" level=info msg="RemovePodSandbox \"57474fc9fca6152a4e4b87d3af2e28153a81adbc34eb97e6e1b76d35c1f7cc2e\" returns successfully" Jul 10 00:37:35.321283 env[1205]: time="2025-07-10T00:37:35.321247022Z" level=info msg="StopPodSandbox for \"5abb90b786ac02b562c618112212ee2dfbee220e28d90eadb110eb3731498daf\"" Jul 10 00:37:35.415184 env[1205]: 2025-07-10 00:37:35.374 [WARNING][4866] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="5abb90b786ac02b562c618112212ee2dfbee220e28d90eadb110eb3731498daf" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--668d6bf9bc--fc26s-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"16b05d7c-51b7-4fb7-a4cb-692b527960e6", ResourceVersion:"1066", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 36, 41, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"63c0a9348846dc3af723609aacd71233ded6647576fb324ef5b5105cdbac78c8", Pod:"coredns-668d6bf9bc-fc26s", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali6ce2de465ce", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:37:35.415184 env[1205]: 2025-07-10 00:37:35.375 [INFO][4866] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="5abb90b786ac02b562c618112212ee2dfbee220e28d90eadb110eb3731498daf" Jul 10 00:37:35.415184 env[1205]: 2025-07-10 00:37:35.375 [INFO][4866] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="5abb90b786ac02b562c618112212ee2dfbee220e28d90eadb110eb3731498daf" iface="eth0" netns="" Jul 10 00:37:35.415184 env[1205]: 2025-07-10 00:37:35.375 [INFO][4866] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="5abb90b786ac02b562c618112212ee2dfbee220e28d90eadb110eb3731498daf" Jul 10 00:37:35.415184 env[1205]: 2025-07-10 00:37:35.375 [INFO][4866] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="5abb90b786ac02b562c618112212ee2dfbee220e28d90eadb110eb3731498daf" Jul 10 00:37:35.415184 env[1205]: 2025-07-10 00:37:35.404 [INFO][4875] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="5abb90b786ac02b562c618112212ee2dfbee220e28d90eadb110eb3731498daf" HandleID="k8s-pod-network.5abb90b786ac02b562c618112212ee2dfbee220e28d90eadb110eb3731498daf" Workload="localhost-k8s-coredns--668d6bf9bc--fc26s-eth0" Jul 10 00:37:35.415184 env[1205]: 2025-07-10 00:37:35.404 [INFO][4875] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:37:35.415184 env[1205]: 2025-07-10 00:37:35.404 [INFO][4875] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:37:35.415184 env[1205]: 2025-07-10 00:37:35.409 [WARNING][4875] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="5abb90b786ac02b562c618112212ee2dfbee220e28d90eadb110eb3731498daf" HandleID="k8s-pod-network.5abb90b786ac02b562c618112212ee2dfbee220e28d90eadb110eb3731498daf" Workload="localhost-k8s-coredns--668d6bf9bc--fc26s-eth0" Jul 10 00:37:35.415184 env[1205]: 2025-07-10 00:37:35.409 [INFO][4875] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="5abb90b786ac02b562c618112212ee2dfbee220e28d90eadb110eb3731498daf" HandleID="k8s-pod-network.5abb90b786ac02b562c618112212ee2dfbee220e28d90eadb110eb3731498daf" Workload="localhost-k8s-coredns--668d6bf9bc--fc26s-eth0" Jul 10 00:37:35.415184 env[1205]: 2025-07-10 00:37:35.411 [INFO][4875] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:37:35.415184 env[1205]: 2025-07-10 00:37:35.412 [INFO][4866] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="5abb90b786ac02b562c618112212ee2dfbee220e28d90eadb110eb3731498daf" Jul 10 00:37:35.415899 env[1205]: time="2025-07-10T00:37:35.415848101Z" level=info msg="TearDown network for sandbox \"5abb90b786ac02b562c618112212ee2dfbee220e28d90eadb110eb3731498daf\" successfully" Jul 10 00:37:35.415899 env[1205]: time="2025-07-10T00:37:35.415887144Z" level=info msg="StopPodSandbox for \"5abb90b786ac02b562c618112212ee2dfbee220e28d90eadb110eb3731498daf\" returns successfully" Jul 10 00:37:35.416444 env[1205]: time="2025-07-10T00:37:35.416418722Z" level=info msg="RemovePodSandbox for \"5abb90b786ac02b562c618112212ee2dfbee220e28d90eadb110eb3731498daf\"" Jul 10 00:37:35.416510 env[1205]: time="2025-07-10T00:37:35.416451714Z" level=info msg="Forcibly stopping sandbox \"5abb90b786ac02b562c618112212ee2dfbee220e28d90eadb110eb3731498daf\"" Jul 10 00:37:35.499212 env[1205]: 2025-07-10 00:37:35.460 [WARNING][4892] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="5abb90b786ac02b562c618112212ee2dfbee220e28d90eadb110eb3731498daf" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--668d6bf9bc--fc26s-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"16b05d7c-51b7-4fb7-a4cb-692b527960e6", ResourceVersion:"1066", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 36, 41, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"63c0a9348846dc3af723609aacd71233ded6647576fb324ef5b5105cdbac78c8", Pod:"coredns-668d6bf9bc-fc26s", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali6ce2de465ce", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:37:35.499212 env[1205]: 2025-07-10 00:37:35.460 [INFO][4892] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="5abb90b786ac02b562c618112212ee2dfbee220e28d90eadb110eb3731498daf" Jul 10 00:37:35.499212 env[1205]: 2025-07-10 00:37:35.460 [INFO][4892] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="5abb90b786ac02b562c618112212ee2dfbee220e28d90eadb110eb3731498daf" iface="eth0" netns="" Jul 10 00:37:35.499212 env[1205]: 2025-07-10 00:37:35.460 [INFO][4892] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="5abb90b786ac02b562c618112212ee2dfbee220e28d90eadb110eb3731498daf" Jul 10 00:37:35.499212 env[1205]: 2025-07-10 00:37:35.460 [INFO][4892] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="5abb90b786ac02b562c618112212ee2dfbee220e28d90eadb110eb3731498daf" Jul 10 00:37:35.499212 env[1205]: 2025-07-10 00:37:35.489 [INFO][4901] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="5abb90b786ac02b562c618112212ee2dfbee220e28d90eadb110eb3731498daf" HandleID="k8s-pod-network.5abb90b786ac02b562c618112212ee2dfbee220e28d90eadb110eb3731498daf" Workload="localhost-k8s-coredns--668d6bf9bc--fc26s-eth0" Jul 10 00:37:35.499212 env[1205]: 2025-07-10 00:37:35.489 [INFO][4901] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:37:35.499212 env[1205]: 2025-07-10 00:37:35.489 [INFO][4901] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:37:35.499212 env[1205]: 2025-07-10 00:37:35.494 [WARNING][4901] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="5abb90b786ac02b562c618112212ee2dfbee220e28d90eadb110eb3731498daf" HandleID="k8s-pod-network.5abb90b786ac02b562c618112212ee2dfbee220e28d90eadb110eb3731498daf" Workload="localhost-k8s-coredns--668d6bf9bc--fc26s-eth0" Jul 10 00:37:35.499212 env[1205]: 2025-07-10 00:37:35.494 [INFO][4901] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="5abb90b786ac02b562c618112212ee2dfbee220e28d90eadb110eb3731498daf" HandleID="k8s-pod-network.5abb90b786ac02b562c618112212ee2dfbee220e28d90eadb110eb3731498daf" Workload="localhost-k8s-coredns--668d6bf9bc--fc26s-eth0" Jul 10 00:37:35.499212 env[1205]: 2025-07-10 00:37:35.495 [INFO][4901] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:37:35.499212 env[1205]: 2025-07-10 00:37:35.497 [INFO][4892] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="5abb90b786ac02b562c618112212ee2dfbee220e28d90eadb110eb3731498daf" Jul 10 00:37:35.499749 env[1205]: time="2025-07-10T00:37:35.499246677Z" level=info msg="TearDown network for sandbox \"5abb90b786ac02b562c618112212ee2dfbee220e28d90eadb110eb3731498daf\" successfully" Jul 10 00:37:35.534347 systemd[1]: Started sshd@13-10.0.0.36:22-10.0.0.1:41474.service. Jul 10 00:37:35.541581 kernel: kauditd_printk_skb: 119 callbacks suppressed Jul 10 00:37:35.541625 kernel: audit: type=1130 audit(1752107855.532:1454): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.0.0.36:22-10.0.0.1:41474 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:37:35.532000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.0.0.36:22-10.0.0.1:41474 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:37:35.581000 audit[4909]: USER_ACCT pid=4909 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:37:35.584953 sshd[4909]: Accepted publickey for core from 10.0.0.1 port 41474 ssh2: RSA SHA256:suUhWV759MqU0C+Dl6JG8TPW8PqnqlsB4qushdi9Ejw Jul 10 00:37:35.587690 kernel: audit: type=1101 audit(1752107855.581:1455): pid=4909 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:37:35.602193 kernel: audit: type=1103 audit(1752107855.586:1456): pid=4909 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:37:35.602256 kernel: audit: type=1006 audit(1752107855.586:1457): pid=4909 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=14 res=1 Jul 10 00:37:35.602284 kernel: audit: type=1300 audit(1752107855.586:1457): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff4258d0d0 a2=3 a3=0 items=0 ppid=1 pid=4909 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:35.586000 audit[4909]: CRED_ACQ pid=4909 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:37:35.586000 audit[4909]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff4258d0d0 a2=3 a3=0 items=0 ppid=1 pid=4909 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:35.588448 sshd[4909]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 00:37:35.586000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 10 00:37:35.604980 env[1205]: time="2025-07-10T00:37:35.604322114Z" level=info msg="RemovePodSandbox \"5abb90b786ac02b562c618112212ee2dfbee220e28d90eadb110eb3731498daf\" returns successfully" Jul 10 00:37:35.605137 env[1205]: time="2025-07-10T00:37:35.605101356Z" level=info msg="StopPodSandbox for \"423e3d3c7782d0d5416d42fc8235d5c6141a7b366a18ec11e8f12a0e7ba8082c\"" Jul 10 00:37:35.605802 kernel: audit: type=1327 audit(1752107855.586:1457): proctitle=737368643A20636F7265205B707269765D Jul 10 00:37:35.607765 systemd[1]: Started session-14.scope. Jul 10 00:37:35.608186 systemd-logind[1194]: New session 14 of user core. Jul 10 00:37:35.611000 audit[4909]: USER_START pid=4909 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:37:35.621786 kernel: audit: type=1105 audit(1752107855.611:1458): pid=4909 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:37:35.621875 kernel: audit: type=1103 audit(1752107855.616:1459): pid=4922 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:37:35.616000 audit[4922]: CRED_ACQ pid=4922 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:37:35.648755 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount517389198.mount: Deactivated successfully. Jul 10 00:37:35.703463 env[1205]: 2025-07-10 00:37:35.644 [WARNING][4923] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="423e3d3c7782d0d5416d42fc8235d5c6141a7b366a18ec11e8f12a0e7ba8082c" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--79f4d77569--v77g9-eth0", GenerateName:"calico-apiserver-79f4d77569-", Namespace:"calico-apiserver", SelfLink:"", UID:"7ab2b8e4-3818-4286-9287-142885fbf432", ResourceVersion:"1152", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 36, 52, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"79f4d77569", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"d8ad584e01ab4331b436942ab8b2cc815b29d0e577fedf021a6374bce83540a8", Pod:"calico-apiserver-79f4d77569-v77g9", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali9ad06ea0f05", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:37:35.703463 env[1205]: 2025-07-10 00:37:35.644 [INFO][4923] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="423e3d3c7782d0d5416d42fc8235d5c6141a7b366a18ec11e8f12a0e7ba8082c" Jul 10 00:37:35.703463 env[1205]: 2025-07-10 00:37:35.644 [INFO][4923] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="423e3d3c7782d0d5416d42fc8235d5c6141a7b366a18ec11e8f12a0e7ba8082c" iface="eth0" netns="" Jul 10 00:37:35.703463 env[1205]: 2025-07-10 00:37:35.644 [INFO][4923] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="423e3d3c7782d0d5416d42fc8235d5c6141a7b366a18ec11e8f12a0e7ba8082c" Jul 10 00:37:35.703463 env[1205]: 2025-07-10 00:37:35.644 [INFO][4923] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="423e3d3c7782d0d5416d42fc8235d5c6141a7b366a18ec11e8f12a0e7ba8082c" Jul 10 00:37:35.703463 env[1205]: 2025-07-10 00:37:35.689 [INFO][4932] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="423e3d3c7782d0d5416d42fc8235d5c6141a7b366a18ec11e8f12a0e7ba8082c" HandleID="k8s-pod-network.423e3d3c7782d0d5416d42fc8235d5c6141a7b366a18ec11e8f12a0e7ba8082c" Workload="localhost-k8s-calico--apiserver--79f4d77569--v77g9-eth0" Jul 10 00:37:35.703463 env[1205]: 2025-07-10 00:37:35.689 [INFO][4932] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:37:35.703463 env[1205]: 2025-07-10 00:37:35.689 [INFO][4932] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:37:35.703463 env[1205]: 2025-07-10 00:37:35.695 [WARNING][4932] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="423e3d3c7782d0d5416d42fc8235d5c6141a7b366a18ec11e8f12a0e7ba8082c" HandleID="k8s-pod-network.423e3d3c7782d0d5416d42fc8235d5c6141a7b366a18ec11e8f12a0e7ba8082c" Workload="localhost-k8s-calico--apiserver--79f4d77569--v77g9-eth0" Jul 10 00:37:35.703463 env[1205]: 2025-07-10 00:37:35.695 [INFO][4932] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="423e3d3c7782d0d5416d42fc8235d5c6141a7b366a18ec11e8f12a0e7ba8082c" HandleID="k8s-pod-network.423e3d3c7782d0d5416d42fc8235d5c6141a7b366a18ec11e8f12a0e7ba8082c" Workload="localhost-k8s-calico--apiserver--79f4d77569--v77g9-eth0" Jul 10 00:37:35.703463 env[1205]: 2025-07-10 00:37:35.697 [INFO][4932] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:37:35.703463 env[1205]: 2025-07-10 00:37:35.701 [INFO][4923] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="423e3d3c7782d0d5416d42fc8235d5c6141a7b366a18ec11e8f12a0e7ba8082c" Jul 10 00:37:35.703977 env[1205]: time="2025-07-10T00:37:35.703483502Z" level=info msg="TearDown network for sandbox \"423e3d3c7782d0d5416d42fc8235d5c6141a7b366a18ec11e8f12a0e7ba8082c\" successfully" Jul 10 00:37:35.703977 env[1205]: time="2025-07-10T00:37:35.703517024Z" level=info msg="StopPodSandbox for \"423e3d3c7782d0d5416d42fc8235d5c6141a7b366a18ec11e8f12a0e7ba8082c\" returns successfully" Jul 10 00:37:35.704050 env[1205]: time="2025-07-10T00:37:35.704026611Z" level=info msg="RemovePodSandbox for \"423e3d3c7782d0d5416d42fc8235d5c6141a7b366a18ec11e8f12a0e7ba8082c\"" Jul 10 00:37:35.704115 env[1205]: time="2025-07-10T00:37:35.704057930Z" level=info msg="Forcibly stopping sandbox \"423e3d3c7782d0d5416d42fc8235d5c6141a7b366a18ec11e8f12a0e7ba8082c\"" Jul 10 00:37:35.787291 env[1205]: 2025-07-10 00:37:35.745 [WARNING][4957] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="423e3d3c7782d0d5416d42fc8235d5c6141a7b366a18ec11e8f12a0e7ba8082c" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--79f4d77569--v77g9-eth0", GenerateName:"calico-apiserver-79f4d77569-", Namespace:"calico-apiserver", SelfLink:"", UID:"7ab2b8e4-3818-4286-9287-142885fbf432", ResourceVersion:"1152", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 36, 52, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"79f4d77569", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"d8ad584e01ab4331b436942ab8b2cc815b29d0e577fedf021a6374bce83540a8", Pod:"calico-apiserver-79f4d77569-v77g9", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali9ad06ea0f05", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:37:35.787291 env[1205]: 2025-07-10 00:37:35.745 [INFO][4957] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="423e3d3c7782d0d5416d42fc8235d5c6141a7b366a18ec11e8f12a0e7ba8082c" Jul 10 00:37:35.787291 env[1205]: 2025-07-10 00:37:35.745 [INFO][4957] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="423e3d3c7782d0d5416d42fc8235d5c6141a7b366a18ec11e8f12a0e7ba8082c" iface="eth0" netns="" Jul 10 00:37:35.787291 env[1205]: 2025-07-10 00:37:35.745 [INFO][4957] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="423e3d3c7782d0d5416d42fc8235d5c6141a7b366a18ec11e8f12a0e7ba8082c" Jul 10 00:37:35.787291 env[1205]: 2025-07-10 00:37:35.745 [INFO][4957] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="423e3d3c7782d0d5416d42fc8235d5c6141a7b366a18ec11e8f12a0e7ba8082c" Jul 10 00:37:35.787291 env[1205]: 2025-07-10 00:37:35.771 [INFO][4966] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="423e3d3c7782d0d5416d42fc8235d5c6141a7b366a18ec11e8f12a0e7ba8082c" HandleID="k8s-pod-network.423e3d3c7782d0d5416d42fc8235d5c6141a7b366a18ec11e8f12a0e7ba8082c" Workload="localhost-k8s-calico--apiserver--79f4d77569--v77g9-eth0" Jul 10 00:37:35.787291 env[1205]: 2025-07-10 00:37:35.772 [INFO][4966] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:37:35.787291 env[1205]: 2025-07-10 00:37:35.772 [INFO][4966] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:37:35.787291 env[1205]: 2025-07-10 00:37:35.778 [WARNING][4966] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="423e3d3c7782d0d5416d42fc8235d5c6141a7b366a18ec11e8f12a0e7ba8082c" HandleID="k8s-pod-network.423e3d3c7782d0d5416d42fc8235d5c6141a7b366a18ec11e8f12a0e7ba8082c" Workload="localhost-k8s-calico--apiserver--79f4d77569--v77g9-eth0" Jul 10 00:37:35.787291 env[1205]: 2025-07-10 00:37:35.778 [INFO][4966] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="423e3d3c7782d0d5416d42fc8235d5c6141a7b366a18ec11e8f12a0e7ba8082c" HandleID="k8s-pod-network.423e3d3c7782d0d5416d42fc8235d5c6141a7b366a18ec11e8f12a0e7ba8082c" Workload="localhost-k8s-calico--apiserver--79f4d77569--v77g9-eth0" Jul 10 00:37:35.787291 env[1205]: 2025-07-10 00:37:35.779 [INFO][4966] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:37:35.787291 env[1205]: 2025-07-10 00:37:35.784 [INFO][4957] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="423e3d3c7782d0d5416d42fc8235d5c6141a7b366a18ec11e8f12a0e7ba8082c" Jul 10 00:37:35.787917 env[1205]: time="2025-07-10T00:37:35.787864112Z" level=info msg="TearDown network for sandbox \"423e3d3c7782d0d5416d42fc8235d5c6141a7b366a18ec11e8f12a0e7ba8082c\" successfully" Jul 10 00:37:35.793874 env[1205]: time="2025-07-10T00:37:35.793124659Z" level=info msg="RemovePodSandbox \"423e3d3c7782d0d5416d42fc8235d5c6141a7b366a18ec11e8f12a0e7ba8082c\" returns successfully" Jul 10 00:37:35.796790 env[1205]: time="2025-07-10T00:37:35.796746059Z" level=info msg="StopPodSandbox for \"7de3064a535962f3719ed9b06c3286809c692aa164314996492f8bad1009aff5\"" Jul 10 00:37:35.885427 env[1205]: 2025-07-10 00:37:35.842 [WARNING][4985] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="7de3064a535962f3719ed9b06c3286809c692aa164314996492f8bad1009aff5" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--89f4c7b56--xqnjf-eth0", GenerateName:"calico-kube-controllers-89f4c7b56-", Namespace:"calico-system", SelfLink:"", UID:"e898c44d-80a2-4702-a367-04a77e5bac00", ResourceVersion:"1095", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 36, 55, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"89f4c7b56", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"ee9d6e8f4478ef709f58cbd1a1d53b0899154d7e46249e90d13b3be201c646fa", Pod:"calico-kube-controllers-89f4c7b56-xqnjf", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali7ba118bbdd0", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:37:35.885427 env[1205]: 2025-07-10 00:37:35.845 [INFO][4985] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="7de3064a535962f3719ed9b06c3286809c692aa164314996492f8bad1009aff5" Jul 10 00:37:35.885427 env[1205]: 2025-07-10 00:37:35.846 [INFO][4985] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="7de3064a535962f3719ed9b06c3286809c692aa164314996492f8bad1009aff5" iface="eth0" netns="" Jul 10 00:37:35.885427 env[1205]: 2025-07-10 00:37:35.846 [INFO][4985] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="7de3064a535962f3719ed9b06c3286809c692aa164314996492f8bad1009aff5" Jul 10 00:37:35.885427 env[1205]: 2025-07-10 00:37:35.846 [INFO][4985] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="7de3064a535962f3719ed9b06c3286809c692aa164314996492f8bad1009aff5" Jul 10 00:37:35.885427 env[1205]: 2025-07-10 00:37:35.870 [INFO][4994] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="7de3064a535962f3719ed9b06c3286809c692aa164314996492f8bad1009aff5" HandleID="k8s-pod-network.7de3064a535962f3719ed9b06c3286809c692aa164314996492f8bad1009aff5" Workload="localhost-k8s-calico--kube--controllers--89f4c7b56--xqnjf-eth0" Jul 10 00:37:35.885427 env[1205]: 2025-07-10 00:37:35.870 [INFO][4994] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:37:35.885427 env[1205]: 2025-07-10 00:37:35.870 [INFO][4994] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:37:35.885427 env[1205]: 2025-07-10 00:37:35.876 [WARNING][4994] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="7de3064a535962f3719ed9b06c3286809c692aa164314996492f8bad1009aff5" HandleID="k8s-pod-network.7de3064a535962f3719ed9b06c3286809c692aa164314996492f8bad1009aff5" Workload="localhost-k8s-calico--kube--controllers--89f4c7b56--xqnjf-eth0" Jul 10 00:37:35.885427 env[1205]: 2025-07-10 00:37:35.877 [INFO][4994] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="7de3064a535962f3719ed9b06c3286809c692aa164314996492f8bad1009aff5" HandleID="k8s-pod-network.7de3064a535962f3719ed9b06c3286809c692aa164314996492f8bad1009aff5" Workload="localhost-k8s-calico--kube--controllers--89f4c7b56--xqnjf-eth0" Jul 10 00:37:35.885427 env[1205]: 2025-07-10 00:37:35.880 [INFO][4994] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:37:35.885427 env[1205]: 2025-07-10 00:37:35.883 [INFO][4985] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="7de3064a535962f3719ed9b06c3286809c692aa164314996492f8bad1009aff5" Jul 10 00:37:35.886158 env[1205]: time="2025-07-10T00:37:35.885467553Z" level=info msg="TearDown network for sandbox \"7de3064a535962f3719ed9b06c3286809c692aa164314996492f8bad1009aff5\" successfully" Jul 10 00:37:35.886158 env[1205]: time="2025-07-10T00:37:35.885508341Z" level=info msg="StopPodSandbox for \"7de3064a535962f3719ed9b06c3286809c692aa164314996492f8bad1009aff5\" returns successfully" Jul 10 00:37:35.886495 env[1205]: time="2025-07-10T00:37:35.886461806Z" level=info msg="RemovePodSandbox for \"7de3064a535962f3719ed9b06c3286809c692aa164314996492f8bad1009aff5\"" Jul 10 00:37:35.886849 env[1205]: time="2025-07-10T00:37:35.886784564Z" level=info msg="Forcibly stopping sandbox \"7de3064a535962f3719ed9b06c3286809c692aa164314996492f8bad1009aff5\"" Jul 10 00:37:35.957936 sshd[4909]: pam_unix(sshd:session): session closed for user core Jul 10 00:37:35.957000 audit[4909]: USER_END pid=4909 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:37:35.960647 systemd[1]: sshd@13-10.0.0.36:22-10.0.0.1:41474.service: Deactivated successfully. Jul 10 00:37:35.961417 systemd[1]: session-14.scope: Deactivated successfully. Jul 10 00:37:35.962267 systemd-logind[1194]: Session 14 logged out. Waiting for processes to exit. Jul 10 00:37:35.963307 systemd-logind[1194]: Removed session 14. Jul 10 00:37:35.957000 audit[4909]: CRED_DISP pid=4909 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:37:35.966753 kernel: audit: type=1106 audit(1752107855.957:1460): pid=4909 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:37:35.966882 kernel: audit: type=1104 audit(1752107855.957:1461): pid=4909 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:37:35.959000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.0.0.36:22-10.0.0.1:41474 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:37:35.980758 env[1205]: 2025-07-10 00:37:35.939 [WARNING][5011] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="7de3064a535962f3719ed9b06c3286809c692aa164314996492f8bad1009aff5" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--89f4c7b56--xqnjf-eth0", GenerateName:"calico-kube-controllers-89f4c7b56-", Namespace:"calico-system", SelfLink:"", UID:"e898c44d-80a2-4702-a367-04a77e5bac00", ResourceVersion:"1095", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 36, 55, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"89f4c7b56", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"ee9d6e8f4478ef709f58cbd1a1d53b0899154d7e46249e90d13b3be201c646fa", Pod:"calico-kube-controllers-89f4c7b56-xqnjf", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali7ba118bbdd0", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:37:35.980758 env[1205]: 2025-07-10 00:37:35.939 [INFO][5011] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="7de3064a535962f3719ed9b06c3286809c692aa164314996492f8bad1009aff5" Jul 10 00:37:35.980758 env[1205]: 2025-07-10 00:37:35.939 [INFO][5011] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="7de3064a535962f3719ed9b06c3286809c692aa164314996492f8bad1009aff5" iface="eth0" netns="" Jul 10 00:37:35.980758 env[1205]: 2025-07-10 00:37:35.939 [INFO][5011] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="7de3064a535962f3719ed9b06c3286809c692aa164314996492f8bad1009aff5" Jul 10 00:37:35.980758 env[1205]: 2025-07-10 00:37:35.939 [INFO][5011] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="7de3064a535962f3719ed9b06c3286809c692aa164314996492f8bad1009aff5" Jul 10 00:37:35.980758 env[1205]: 2025-07-10 00:37:35.971 [INFO][5021] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="7de3064a535962f3719ed9b06c3286809c692aa164314996492f8bad1009aff5" HandleID="k8s-pod-network.7de3064a535962f3719ed9b06c3286809c692aa164314996492f8bad1009aff5" Workload="localhost-k8s-calico--kube--controllers--89f4c7b56--xqnjf-eth0" Jul 10 00:37:35.980758 env[1205]: 2025-07-10 00:37:35.971 [INFO][5021] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:37:35.980758 env[1205]: 2025-07-10 00:37:35.971 [INFO][5021] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:37:35.980758 env[1205]: 2025-07-10 00:37:35.976 [WARNING][5021] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="7de3064a535962f3719ed9b06c3286809c692aa164314996492f8bad1009aff5" HandleID="k8s-pod-network.7de3064a535962f3719ed9b06c3286809c692aa164314996492f8bad1009aff5" Workload="localhost-k8s-calico--kube--controllers--89f4c7b56--xqnjf-eth0" Jul 10 00:37:35.980758 env[1205]: 2025-07-10 00:37:35.976 [INFO][5021] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="7de3064a535962f3719ed9b06c3286809c692aa164314996492f8bad1009aff5" HandleID="k8s-pod-network.7de3064a535962f3719ed9b06c3286809c692aa164314996492f8bad1009aff5" Workload="localhost-k8s-calico--kube--controllers--89f4c7b56--xqnjf-eth0" Jul 10 00:37:35.980758 env[1205]: 2025-07-10 00:37:35.977 [INFO][5021] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:37:35.980758 env[1205]: 2025-07-10 00:37:35.978 [INFO][5011] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="7de3064a535962f3719ed9b06c3286809c692aa164314996492f8bad1009aff5" Jul 10 00:37:35.981244 env[1205]: time="2025-07-10T00:37:35.981206022Z" level=info msg="TearDown network for sandbox \"7de3064a535962f3719ed9b06c3286809c692aa164314996492f8bad1009aff5\" successfully" Jul 10 00:37:36.266386 env[1205]: time="2025-07-10T00:37:36.266331785Z" level=info msg="RemovePodSandbox \"7de3064a535962f3719ed9b06c3286809c692aa164314996492f8bad1009aff5\" returns successfully" Jul 10 00:37:36.266956 env[1205]: time="2025-07-10T00:37:36.266938899Z" level=info msg="StopPodSandbox for \"e63fa483445dc68ce19243877e768c35439587a9b368ec33b0df45e0661f9d20\"" Jul 10 00:37:36.344716 env[1205]: 2025-07-10 00:37:36.311 [WARNING][5040] cni-plugin/k8s.go 598: WorkloadEndpoint does not exist in the datastore, moving forward with the clean up ContainerID="e63fa483445dc68ce19243877e768c35439587a9b368ec33b0df45e0661f9d20" WorkloadEndpoint="localhost-k8s-whisker--cd9dd8658--l5rm2-eth0" Jul 10 00:37:36.344716 env[1205]: 2025-07-10 00:37:36.311 [INFO][5040] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="e63fa483445dc68ce19243877e768c35439587a9b368ec33b0df45e0661f9d20" Jul 10 00:37:36.344716 env[1205]: 2025-07-10 00:37:36.312 [INFO][5040] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="e63fa483445dc68ce19243877e768c35439587a9b368ec33b0df45e0661f9d20" iface="eth0" netns="" Jul 10 00:37:36.344716 env[1205]: 2025-07-10 00:37:36.312 [INFO][5040] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="e63fa483445dc68ce19243877e768c35439587a9b368ec33b0df45e0661f9d20" Jul 10 00:37:36.344716 env[1205]: 2025-07-10 00:37:36.312 [INFO][5040] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="e63fa483445dc68ce19243877e768c35439587a9b368ec33b0df45e0661f9d20" Jul 10 00:37:36.344716 env[1205]: 2025-07-10 00:37:36.334 [INFO][5048] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="e63fa483445dc68ce19243877e768c35439587a9b368ec33b0df45e0661f9d20" HandleID="k8s-pod-network.e63fa483445dc68ce19243877e768c35439587a9b368ec33b0df45e0661f9d20" Workload="localhost-k8s-whisker--cd9dd8658--l5rm2-eth0" Jul 10 00:37:36.344716 env[1205]: 2025-07-10 00:37:36.334 [INFO][5048] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:37:36.344716 env[1205]: 2025-07-10 00:37:36.334 [INFO][5048] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:37:36.344716 env[1205]: 2025-07-10 00:37:36.340 [WARNING][5048] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="e63fa483445dc68ce19243877e768c35439587a9b368ec33b0df45e0661f9d20" HandleID="k8s-pod-network.e63fa483445dc68ce19243877e768c35439587a9b368ec33b0df45e0661f9d20" Workload="localhost-k8s-whisker--cd9dd8658--l5rm2-eth0" Jul 10 00:37:36.344716 env[1205]: 2025-07-10 00:37:36.340 [INFO][5048] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="e63fa483445dc68ce19243877e768c35439587a9b368ec33b0df45e0661f9d20" HandleID="k8s-pod-network.e63fa483445dc68ce19243877e768c35439587a9b368ec33b0df45e0661f9d20" Workload="localhost-k8s-whisker--cd9dd8658--l5rm2-eth0" Jul 10 00:37:36.344716 env[1205]: 2025-07-10 00:37:36.341 [INFO][5048] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:37:36.344716 env[1205]: 2025-07-10 00:37:36.343 [INFO][5040] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="e63fa483445dc68ce19243877e768c35439587a9b368ec33b0df45e0661f9d20" Jul 10 00:37:36.345144 env[1205]: time="2025-07-10T00:37:36.344768427Z" level=info msg="TearDown network for sandbox \"e63fa483445dc68ce19243877e768c35439587a9b368ec33b0df45e0661f9d20\" successfully" Jul 10 00:37:36.345144 env[1205]: time="2025-07-10T00:37:36.344815799Z" level=info msg="StopPodSandbox for \"e63fa483445dc68ce19243877e768c35439587a9b368ec33b0df45e0661f9d20\" returns successfully" Jul 10 00:37:36.345551 env[1205]: time="2025-07-10T00:37:36.345508579Z" level=info msg="RemovePodSandbox for \"e63fa483445dc68ce19243877e768c35439587a9b368ec33b0df45e0661f9d20\"" Jul 10 00:37:36.345604 env[1205]: time="2025-07-10T00:37:36.345564658Z" level=info msg="Forcibly stopping sandbox \"e63fa483445dc68ce19243877e768c35439587a9b368ec33b0df45e0661f9d20\"" Jul 10 00:37:36.529233 env[1205]: 2025-07-10 00:37:36.382 [WARNING][5066] cni-plugin/k8s.go 598: WorkloadEndpoint does not exist in the datastore, moving forward with the clean up ContainerID="e63fa483445dc68ce19243877e768c35439587a9b368ec33b0df45e0661f9d20" WorkloadEndpoint="localhost-k8s-whisker--cd9dd8658--l5rm2-eth0" Jul 10 00:37:36.529233 env[1205]: 2025-07-10 00:37:36.382 [INFO][5066] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="e63fa483445dc68ce19243877e768c35439587a9b368ec33b0df45e0661f9d20" Jul 10 00:37:36.529233 env[1205]: 2025-07-10 00:37:36.382 [INFO][5066] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="e63fa483445dc68ce19243877e768c35439587a9b368ec33b0df45e0661f9d20" iface="eth0" netns="" Jul 10 00:37:36.529233 env[1205]: 2025-07-10 00:37:36.382 [INFO][5066] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="e63fa483445dc68ce19243877e768c35439587a9b368ec33b0df45e0661f9d20" Jul 10 00:37:36.529233 env[1205]: 2025-07-10 00:37:36.382 [INFO][5066] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="e63fa483445dc68ce19243877e768c35439587a9b368ec33b0df45e0661f9d20" Jul 10 00:37:36.529233 env[1205]: 2025-07-10 00:37:36.400 [INFO][5074] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="e63fa483445dc68ce19243877e768c35439587a9b368ec33b0df45e0661f9d20" HandleID="k8s-pod-network.e63fa483445dc68ce19243877e768c35439587a9b368ec33b0df45e0661f9d20" Workload="localhost-k8s-whisker--cd9dd8658--l5rm2-eth0" Jul 10 00:37:36.529233 env[1205]: 2025-07-10 00:37:36.400 [INFO][5074] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:37:36.529233 env[1205]: 2025-07-10 00:37:36.400 [INFO][5074] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:37:36.529233 env[1205]: 2025-07-10 00:37:36.406 [WARNING][5074] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="e63fa483445dc68ce19243877e768c35439587a9b368ec33b0df45e0661f9d20" HandleID="k8s-pod-network.e63fa483445dc68ce19243877e768c35439587a9b368ec33b0df45e0661f9d20" Workload="localhost-k8s-whisker--cd9dd8658--l5rm2-eth0" Jul 10 00:37:36.529233 env[1205]: 2025-07-10 00:37:36.406 [INFO][5074] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="e63fa483445dc68ce19243877e768c35439587a9b368ec33b0df45e0661f9d20" HandleID="k8s-pod-network.e63fa483445dc68ce19243877e768c35439587a9b368ec33b0df45e0661f9d20" Workload="localhost-k8s-whisker--cd9dd8658--l5rm2-eth0" Jul 10 00:37:36.529233 env[1205]: 2025-07-10 00:37:36.524 [INFO][5074] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:37:36.529233 env[1205]: 2025-07-10 00:37:36.527 [INFO][5066] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="e63fa483445dc68ce19243877e768c35439587a9b368ec33b0df45e0661f9d20" Jul 10 00:37:36.530252 env[1205]: time="2025-07-10T00:37:36.530191274Z" level=info msg="TearDown network for sandbox \"e63fa483445dc68ce19243877e768c35439587a9b368ec33b0df45e0661f9d20\" successfully" Jul 10 00:37:36.584287 env[1205]: time="2025-07-10T00:37:36.584205550Z" level=info msg="RemovePodSandbox \"e63fa483445dc68ce19243877e768c35439587a9b368ec33b0df45e0661f9d20\" returns successfully" Jul 10 00:37:36.584976 env[1205]: time="2025-07-10T00:37:36.584906868Z" level=info msg="StopPodSandbox for \"f9b12d61848dadeff42022b62731bf12497a5b269cb7844851312ec0c464409d\"" Jul 10 00:37:36.596066 env[1205]: time="2025-07-10T00:37:36.596041888Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/goldmane:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:37:36.598207 env[1205]: time="2025-07-10T00:37:36.598184054Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:dc4ea8b409b85d2f118bb4677ad3d34b57e7b01d488c9f019f7073bb58b2162b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:37:36.599850 env[1205]: time="2025-07-10T00:37:36.599830951Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/goldmane:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:37:36.601526 env[1205]: time="2025-07-10T00:37:36.601489751Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/goldmane@sha256:a2b761fd93d824431ad93e59e8e670cdf00b478f4b532145297e1e67f2768305,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:37:36.602150 env[1205]: time="2025-07-10T00:37:36.602117496Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.2\" returns image reference \"sha256:dc4ea8b409b85d2f118bb4677ad3d34b57e7b01d488c9f019f7073bb58b2162b\"" Jul 10 00:37:36.603371 env[1205]: time="2025-07-10T00:37:36.603242223Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.2\"" Jul 10 00:37:36.604131 env[1205]: time="2025-07-10T00:37:36.604108199Z" level=info msg="CreateContainer within sandbox \"2623c6736f64e07ac7c0f19a3008e3504fdf7f22e71aee7e7116a68c2eb17849\" for container &ContainerMetadata{Name:goldmane,Attempt:0,}" Jul 10 00:37:36.618934 env[1205]: time="2025-07-10T00:37:36.618879766Z" level=info msg="CreateContainer within sandbox \"2623c6736f64e07ac7c0f19a3008e3504fdf7f22e71aee7e7116a68c2eb17849\" for &ContainerMetadata{Name:goldmane,Attempt:0,} returns container id \"03924d34807a8c23f7f1b716afaf8bf1a7c04c6bb35a67e2d606d3b88ac35bb4\"" Jul 10 00:37:36.620075 env[1205]: time="2025-07-10T00:37:36.620054460Z" level=info msg="StartContainer for \"03924d34807a8c23f7f1b716afaf8bf1a7c04c6bb35a67e2d606d3b88ac35bb4\"" Jul 10 00:37:36.647985 systemd[1]: run-containerd-runc-k8s.io-03924d34807a8c23f7f1b716afaf8bf1a7c04c6bb35a67e2d606d3b88ac35bb4-runc.0AHSxy.mount: Deactivated successfully. Jul 10 00:37:36.652051 systemd[1]: Started cri-containerd-03924d34807a8c23f7f1b716afaf8bf1a7c04c6bb35a67e2d606d3b88ac35bb4.scope. Jul 10 00:37:36.659297 env[1205]: 2025-07-10 00:37:36.623 [WARNING][5093] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="f9b12d61848dadeff42022b62731bf12497a5b269cb7844851312ec0c464409d" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--79f4d77569--qj846-eth0", GenerateName:"calico-apiserver-79f4d77569-", Namespace:"calico-apiserver", SelfLink:"", UID:"359ec5e8-588d-464e-9261-faefb7bc02b1", ResourceVersion:"1055", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 36, 52, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"79f4d77569", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"9d3e234b5c7c189b888f0f60c9e1913242edc3511a6cb1d4f3312bc81baa20db", Pod:"calico-apiserver-79f4d77569-qj846", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calidf845a029c1", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:37:36.659297 env[1205]: 2025-07-10 00:37:36.624 [INFO][5093] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="f9b12d61848dadeff42022b62731bf12497a5b269cb7844851312ec0c464409d" Jul 10 00:37:36.659297 env[1205]: 2025-07-10 00:37:36.624 [INFO][5093] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="f9b12d61848dadeff42022b62731bf12497a5b269cb7844851312ec0c464409d" iface="eth0" netns="" Jul 10 00:37:36.659297 env[1205]: 2025-07-10 00:37:36.625 [INFO][5093] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="f9b12d61848dadeff42022b62731bf12497a5b269cb7844851312ec0c464409d" Jul 10 00:37:36.659297 env[1205]: 2025-07-10 00:37:36.625 [INFO][5093] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="f9b12d61848dadeff42022b62731bf12497a5b269cb7844851312ec0c464409d" Jul 10 00:37:36.659297 env[1205]: 2025-07-10 00:37:36.645 [INFO][5111] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="f9b12d61848dadeff42022b62731bf12497a5b269cb7844851312ec0c464409d" HandleID="k8s-pod-network.f9b12d61848dadeff42022b62731bf12497a5b269cb7844851312ec0c464409d" Workload="localhost-k8s-calico--apiserver--79f4d77569--qj846-eth0" Jul 10 00:37:36.659297 env[1205]: 2025-07-10 00:37:36.646 [INFO][5111] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:37:36.659297 env[1205]: 2025-07-10 00:37:36.646 [INFO][5111] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:37:36.659297 env[1205]: 2025-07-10 00:37:36.653 [WARNING][5111] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="f9b12d61848dadeff42022b62731bf12497a5b269cb7844851312ec0c464409d" HandleID="k8s-pod-network.f9b12d61848dadeff42022b62731bf12497a5b269cb7844851312ec0c464409d" Workload="localhost-k8s-calico--apiserver--79f4d77569--qj846-eth0" Jul 10 00:37:36.659297 env[1205]: 2025-07-10 00:37:36.653 [INFO][5111] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="f9b12d61848dadeff42022b62731bf12497a5b269cb7844851312ec0c464409d" HandleID="k8s-pod-network.f9b12d61848dadeff42022b62731bf12497a5b269cb7844851312ec0c464409d" Workload="localhost-k8s-calico--apiserver--79f4d77569--qj846-eth0" Jul 10 00:37:36.659297 env[1205]: 2025-07-10 00:37:36.655 [INFO][5111] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:37:36.659297 env[1205]: 2025-07-10 00:37:36.656 [INFO][5093] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="f9b12d61848dadeff42022b62731bf12497a5b269cb7844851312ec0c464409d" Jul 10 00:37:36.659796 env[1205]: time="2025-07-10T00:37:36.659326866Z" level=info msg="TearDown network for sandbox \"f9b12d61848dadeff42022b62731bf12497a5b269cb7844851312ec0c464409d\" successfully" Jul 10 00:37:36.659796 env[1205]: time="2025-07-10T00:37:36.659351724Z" level=info msg="StopPodSandbox for \"f9b12d61848dadeff42022b62731bf12497a5b269cb7844851312ec0c464409d\" returns successfully" Jul 10 00:37:36.659796 env[1205]: time="2025-07-10T00:37:36.659611928Z" level=info msg="RemovePodSandbox for \"f9b12d61848dadeff42022b62731bf12497a5b269cb7844851312ec0c464409d\"" Jul 10 00:37:36.659796 env[1205]: time="2025-07-10T00:37:36.659636225Z" level=info msg="Forcibly stopping sandbox \"f9b12d61848dadeff42022b62731bf12497a5b269cb7844851312ec0c464409d\"" Jul 10 00:37:36.664000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:36.664000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:36.664000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:36.664000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:36.664000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:36.664000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:36.664000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:36.664000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:36.664000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:36.665000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:36.665000 audit: BPF prog-id=220 op=LOAD Jul 10 00:37:36.665000 audit[5116]: AVC avc: denied { bpf } for pid=5116 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:36.665000 audit[5116]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=4270 pid=5116 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:36.665000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3033393234643334383037613863323366376631623731366166616638 Jul 10 00:37:36.665000 audit[5116]: AVC avc: denied { perfmon } for pid=5116 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:36.665000 audit[5116]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=4270 pid=5116 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:36.665000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3033393234643334383037613863323366376631623731366166616638 Jul 10 00:37:36.665000 audit[5116]: AVC avc: denied { bpf } for pid=5116 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:36.665000 audit[5116]: AVC avc: denied { bpf } for pid=5116 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:36.665000 audit[5116]: AVC avc: denied { bpf } for pid=5116 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:36.665000 audit[5116]: AVC avc: denied { perfmon } for pid=5116 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:36.665000 audit[5116]: AVC avc: denied { perfmon } for pid=5116 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:36.665000 audit[5116]: AVC avc: denied { perfmon } for pid=5116 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:36.665000 audit[5116]: AVC avc: denied { perfmon } for pid=5116 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:36.665000 audit[5116]: AVC avc: denied { perfmon } for pid=5116 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:36.665000 audit[5116]: AVC avc: denied { bpf } for pid=5116 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:36.665000 audit[5116]: AVC avc: denied { bpf } for pid=5116 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:36.665000 audit: BPF prog-id=221 op=LOAD Jul 10 00:37:36.665000 audit[5116]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c000221290 items=0 ppid=4270 pid=5116 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:36.665000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3033393234643334383037613863323366376631623731366166616638 Jul 10 00:37:36.665000 audit[5116]: AVC avc: denied { bpf } for pid=5116 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:36.665000 audit[5116]: AVC avc: denied { bpf } for pid=5116 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:36.665000 audit[5116]: AVC avc: denied { perfmon } for pid=5116 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:36.665000 audit[5116]: AVC avc: denied { perfmon } for pid=5116 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:36.665000 audit[5116]: AVC avc: denied { perfmon } for pid=5116 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:36.665000 audit[5116]: AVC avc: denied { perfmon } for pid=5116 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:36.665000 audit[5116]: AVC avc: denied { perfmon } for pid=5116 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:36.665000 audit[5116]: AVC avc: denied { bpf } for pid=5116 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:36.665000 audit[5116]: AVC avc: denied { bpf } for pid=5116 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:36.665000 audit: BPF prog-id=222 op=LOAD Jul 10 00:37:36.665000 audit[5116]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0002212d8 items=0 ppid=4270 pid=5116 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:36.665000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3033393234643334383037613863323366376631623731366166616638 Jul 10 00:37:36.666000 audit: BPF prog-id=222 op=UNLOAD Jul 10 00:37:36.666000 audit: BPF prog-id=221 op=UNLOAD Jul 10 00:37:36.666000 audit[5116]: AVC avc: denied { bpf } for pid=5116 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:36.666000 audit[5116]: AVC avc: denied { bpf } for pid=5116 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:36.666000 audit[5116]: AVC avc: denied { bpf } for pid=5116 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:36.666000 audit[5116]: AVC avc: denied { perfmon } for pid=5116 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:36.666000 audit[5116]: AVC avc: denied { perfmon } for pid=5116 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:36.666000 audit[5116]: AVC avc: denied { perfmon } for pid=5116 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:36.666000 audit[5116]: AVC avc: denied { perfmon } for pid=5116 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:36.666000 audit[5116]: AVC avc: denied { perfmon } for pid=5116 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:36.666000 audit[5116]: AVC avc: denied { bpf } for pid=5116 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:36.666000 audit[5116]: AVC avc: denied { bpf } for pid=5116 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:36.666000 audit: BPF prog-id=223 op=LOAD Jul 10 00:37:36.666000 audit[5116]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0002216e8 items=0 ppid=4270 pid=5116 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:36.666000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3033393234643334383037613863323366376631623731366166616638 Jul 10 00:37:36.696330 env[1205]: time="2025-07-10T00:37:36.696288500Z" level=info msg="StartContainer for \"03924d34807a8c23f7f1b716afaf8bf1a7c04c6bb35a67e2d606d3b88ac35bb4\" returns successfully" Jul 10 00:37:36.730542 env[1205]: 2025-07-10 00:37:36.692 [WARNING][5145] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="f9b12d61848dadeff42022b62731bf12497a5b269cb7844851312ec0c464409d" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--79f4d77569--qj846-eth0", GenerateName:"calico-apiserver-79f4d77569-", Namespace:"calico-apiserver", SelfLink:"", UID:"359ec5e8-588d-464e-9261-faefb7bc02b1", ResourceVersion:"1055", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 36, 52, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"79f4d77569", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"9d3e234b5c7c189b888f0f60c9e1913242edc3511a6cb1d4f3312bc81baa20db", Pod:"calico-apiserver-79f4d77569-qj846", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calidf845a029c1", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:37:36.730542 env[1205]: 2025-07-10 00:37:36.692 [INFO][5145] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="f9b12d61848dadeff42022b62731bf12497a5b269cb7844851312ec0c464409d" Jul 10 00:37:36.730542 env[1205]: 2025-07-10 00:37:36.692 [INFO][5145] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="f9b12d61848dadeff42022b62731bf12497a5b269cb7844851312ec0c464409d" iface="eth0" netns="" Jul 10 00:37:36.730542 env[1205]: 2025-07-10 00:37:36.692 [INFO][5145] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="f9b12d61848dadeff42022b62731bf12497a5b269cb7844851312ec0c464409d" Jul 10 00:37:36.730542 env[1205]: 2025-07-10 00:37:36.692 [INFO][5145] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="f9b12d61848dadeff42022b62731bf12497a5b269cb7844851312ec0c464409d" Jul 10 00:37:36.730542 env[1205]: 2025-07-10 00:37:36.717 [INFO][5164] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="f9b12d61848dadeff42022b62731bf12497a5b269cb7844851312ec0c464409d" HandleID="k8s-pod-network.f9b12d61848dadeff42022b62731bf12497a5b269cb7844851312ec0c464409d" Workload="localhost-k8s-calico--apiserver--79f4d77569--qj846-eth0" Jul 10 00:37:36.730542 env[1205]: 2025-07-10 00:37:36.718 [INFO][5164] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:37:36.730542 env[1205]: 2025-07-10 00:37:36.718 [INFO][5164] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:37:36.730542 env[1205]: 2025-07-10 00:37:36.724 [WARNING][5164] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="f9b12d61848dadeff42022b62731bf12497a5b269cb7844851312ec0c464409d" HandleID="k8s-pod-network.f9b12d61848dadeff42022b62731bf12497a5b269cb7844851312ec0c464409d" Workload="localhost-k8s-calico--apiserver--79f4d77569--qj846-eth0" Jul 10 00:37:36.730542 env[1205]: 2025-07-10 00:37:36.724 [INFO][5164] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="f9b12d61848dadeff42022b62731bf12497a5b269cb7844851312ec0c464409d" HandleID="k8s-pod-network.f9b12d61848dadeff42022b62731bf12497a5b269cb7844851312ec0c464409d" Workload="localhost-k8s-calico--apiserver--79f4d77569--qj846-eth0" Jul 10 00:37:36.730542 env[1205]: 2025-07-10 00:37:36.725 [INFO][5164] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:37:36.730542 env[1205]: 2025-07-10 00:37:36.728 [INFO][5145] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="f9b12d61848dadeff42022b62731bf12497a5b269cb7844851312ec0c464409d" Jul 10 00:37:36.731143 env[1205]: time="2025-07-10T00:37:36.730554326Z" level=info msg="TearDown network for sandbox \"f9b12d61848dadeff42022b62731bf12497a5b269cb7844851312ec0c464409d\" successfully" Jul 10 00:37:36.734335 env[1205]: time="2025-07-10T00:37:36.734272602Z" level=info msg="RemovePodSandbox \"f9b12d61848dadeff42022b62731bf12497a5b269cb7844851312ec0c464409d\" returns successfully" Jul 10 00:37:36.999688 env[1205]: time="2025-07-10T00:37:36.999632695Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:37:37.001842 env[1205]: time="2025-07-10T00:37:37.001801042Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:5509118eed617ef04ca00f5a095bfd0a4cd1cf69edcfcf9bedf0edb641be51dd,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:37:37.003357 env[1205]: time="2025-07-10T00:37:37.003319027Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:37:37.004960 env[1205]: time="2025-07-10T00:37:37.004907529Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver@sha256:ec6b10660962e7caad70c47755049fad68f9fc2f7064e8bc7cb862583e02cc2b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:37:37.005401 env[1205]: time="2025-07-10T00:37:37.005361718Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.2\" returns image reference \"sha256:5509118eed617ef04ca00f5a095bfd0a4cd1cf69edcfcf9bedf0edb641be51dd\"" Jul 10 00:37:37.006615 env[1205]: time="2025-07-10T00:37:37.006585944Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.2\"" Jul 10 00:37:37.007862 env[1205]: time="2025-07-10T00:37:37.007820101Z" level=info msg="CreateContainer within sandbox \"9d3e234b5c7c189b888f0f60c9e1913242edc3511a6cb1d4f3312bc81baa20db\" for container &ContainerMetadata{Name:calico-apiserver,Attempt:0,}" Jul 10 00:37:37.019671 env[1205]: time="2025-07-10T00:37:37.019612765Z" level=info msg="CreateContainer within sandbox \"9d3e234b5c7c189b888f0f60c9e1913242edc3511a6cb1d4f3312bc81baa20db\" for &ContainerMetadata{Name:calico-apiserver,Attempt:0,} returns container id \"a7802bf7cbd011394571fa1ba5fd3eb69508d1f959db6630e7fd5e9ebcc4d22b\"" Jul 10 00:37:37.020132 env[1205]: time="2025-07-10T00:37:37.020101630Z" level=info msg="StartContainer for \"a7802bf7cbd011394571fa1ba5fd3eb69508d1f959db6630e7fd5e9ebcc4d22b\"" Jul 10 00:37:37.034703 systemd[1]: Started cri-containerd-a7802bf7cbd011394571fa1ba5fd3eb69508d1f959db6630e7fd5e9ebcc4d22b.scope. Jul 10 00:37:37.044000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:37.044000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:37.044000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:37.044000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:37.044000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:37.044000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:37.044000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:37.044000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:37.044000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:37.044000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:37.044000 audit: BPF prog-id=224 op=LOAD Jul 10 00:37:37.044000 audit[5183]: AVC avc: denied { bpf } for pid=5183 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:37.044000 audit[5183]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=4398 pid=5183 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:37.044000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6137383032626637636264303131333934353731666131626135666433 Jul 10 00:37:37.044000 audit[5183]: AVC avc: denied { perfmon } for pid=5183 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:37.044000 audit[5183]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=4398 pid=5183 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:37.044000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6137383032626637636264303131333934353731666131626135666433 Jul 10 00:37:37.044000 audit[5183]: AVC avc: denied { bpf } for pid=5183 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:37.044000 audit[5183]: AVC avc: denied { bpf } for pid=5183 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:37.044000 audit[5183]: AVC avc: denied { bpf } for pid=5183 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:37.044000 audit[5183]: AVC avc: denied { perfmon } for pid=5183 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:37.044000 audit[5183]: AVC avc: denied { perfmon } for pid=5183 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:37.044000 audit[5183]: AVC avc: denied { perfmon } for pid=5183 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:37.044000 audit[5183]: AVC avc: denied { perfmon } for pid=5183 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:37.044000 audit[5183]: AVC avc: denied { perfmon } for pid=5183 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:37.044000 audit[5183]: AVC avc: denied { bpf } for pid=5183 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:37.044000 audit[5183]: AVC avc: denied { bpf } for pid=5183 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:37.044000 audit: BPF prog-id=225 op=LOAD Jul 10 00:37:37.044000 audit[5183]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0000257b0 items=0 ppid=4398 pid=5183 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:37.044000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6137383032626637636264303131333934353731666131626135666433 Jul 10 00:37:37.045000 audit[5183]: AVC avc: denied { bpf } for pid=5183 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:37.045000 audit[5183]: AVC avc: denied { bpf } for pid=5183 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:37.045000 audit[5183]: AVC avc: denied { perfmon } for pid=5183 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:37.045000 audit[5183]: AVC avc: denied { perfmon } for pid=5183 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:37.045000 audit[5183]: AVC avc: denied { perfmon } for pid=5183 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:37.045000 audit[5183]: AVC avc: denied { perfmon } for pid=5183 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:37.045000 audit[5183]: AVC avc: denied { perfmon } for pid=5183 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:37.045000 audit[5183]: AVC avc: denied { bpf } for pid=5183 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:37.045000 audit[5183]: AVC avc: denied { bpf } for pid=5183 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:37.045000 audit: BPF prog-id=226 op=LOAD Jul 10 00:37:37.045000 audit[5183]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0000257f8 items=0 ppid=4398 pid=5183 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:37.045000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6137383032626637636264303131333934353731666131626135666433 Jul 10 00:37:37.045000 audit: BPF prog-id=226 op=UNLOAD Jul 10 00:37:37.045000 audit: BPF prog-id=225 op=UNLOAD Jul 10 00:37:37.045000 audit[5183]: AVC avc: denied { bpf } for pid=5183 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:37.045000 audit[5183]: AVC avc: denied { bpf } for pid=5183 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:37.045000 audit[5183]: AVC avc: denied { bpf } for pid=5183 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:37.045000 audit[5183]: AVC avc: denied { perfmon } for pid=5183 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:37.045000 audit[5183]: AVC avc: denied { perfmon } for pid=5183 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:37.045000 audit[5183]: AVC avc: denied { perfmon } for pid=5183 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:37.045000 audit[5183]: AVC avc: denied { perfmon } for pid=5183 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:37.045000 audit[5183]: AVC avc: denied { perfmon } for pid=5183 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:37.045000 audit[5183]: AVC avc: denied { bpf } for pid=5183 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:37.045000 audit[5183]: AVC avc: denied { bpf } for pid=5183 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:37.045000 audit: BPF prog-id=227 op=LOAD Jul 10 00:37:37.045000 audit[5183]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c000025c08 items=0 ppid=4398 pid=5183 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:37.045000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6137383032626637636264303131333934353731666131626135666433 Jul 10 00:37:37.074190 env[1205]: time="2025-07-10T00:37:37.074134404Z" level=info msg="StartContainer for \"a7802bf7cbd011394571fa1ba5fd3eb69508d1f959db6630e7fd5e9ebcc4d22b\" returns successfully" Jul 10 00:37:37.323000 audit[5231]: NETFILTER_CFG table=filter:124 family=2 entries=10 op=nft_register_rule pid=5231 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:37:37.323000 audit[5231]: SYSCALL arch=c000003e syscall=46 success=yes exit=3760 a0=3 a1=7fffa798a060 a2=0 a3=7fffa798a04c items=0 ppid=2093 pid=5231 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:37.323000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:37:37.334683 kubelet[1947]: I0710 00:37:37.334314 1947 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-apiserver/calico-apiserver-79f4d77569-qj846" podStartSLOduration=32.567530914 podStartE2EDuration="45.320755678s" podCreationTimestamp="2025-07-10 00:36:52 +0000 UTC" firstStartedPulling="2025-07-10 00:37:24.253107931 +0000 UTC m=+49.675532939" lastFinishedPulling="2025-07-10 00:37:37.006332695 +0000 UTC m=+62.428757703" observedRunningTime="2025-07-10 00:37:37.299995825 +0000 UTC m=+62.722420833" watchObservedRunningTime="2025-07-10 00:37:37.320755678 +0000 UTC m=+62.743180686" Jul 10 00:37:37.332000 audit[5231]: NETFILTER_CFG table=nat:125 family=2 entries=32 op=nft_register_rule pid=5231 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:37:37.332000 audit[5231]: SYSCALL arch=c000003e syscall=46 success=yes exit=10116 a0=3 a1=7fffa798a060 a2=0 a3=7fffa798a04c items=0 ppid=2093 pid=5231 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:37.332000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:37:37.344000 audit[5238]: NETFILTER_CFG table=filter:126 family=2 entries=10 op=nft_register_rule pid=5238 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:37:37.344000 audit[5238]: SYSCALL arch=c000003e syscall=46 success=yes exit=3760 a0=3 a1=7ffd6cbd6e00 a2=0 a3=7ffd6cbd6dec items=0 ppid=2093 pid=5238 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:37.344000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:37:37.351000 audit[5238]: NETFILTER_CFG table=nat:127 family=2 entries=24 op=nft_register_rule pid=5238 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:37:37.351000 audit[5238]: SYSCALL arch=c000003e syscall=46 success=yes exit=7308 a0=3 a1=7ffd6cbd6e00 a2=0 a3=7ffd6cbd6dec items=0 ppid=2093 pid=5238 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:37.351000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:37:37.595000 audit[1803]: AVC avc: denied { watch } for pid=1803 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7304 scontext=system_u:system_r:svirt_lxc_net_t:s0:c544,c954 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:37:37.595000 audit[1803]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c0021717c0 a2=fc6 a3=0 items=0 ppid=1671 pid=1803 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c544,c954 key=(null) Jul 10 00:37:37.595000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 00:37:37.597000 audit[1803]: AVC avc: denied { watch } for pid=1803 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7304 scontext=system_u:system_r:svirt_lxc_net_t:s0:c544,c954 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:37:37.597000 audit[1803]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c0021717e0 a2=fc6 a3=0 items=0 ppid=1671 pid=1803 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c544,c954 key=(null) Jul 10 00:37:37.597000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 00:37:37.598000 audit[1803]: AVC avc: denied { watch } for pid=1803 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7304 scontext=system_u:system_r:svirt_lxc_net_t:s0:c544,c954 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:37:37.598000 audit[1803]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000b48920 a2=fc6 a3=0 items=0 ppid=1671 pid=1803 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c544,c954 key=(null) Jul 10 00:37:37.598000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 00:37:37.598000 audit[1803]: AVC avc: denied { watch } for pid=1803 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7304 scontext=system_u:system_r:svirt_lxc_net_t:s0:c544,c954 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:37:37.598000 audit[1803]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c002171800 a2=fc6 a3=0 items=0 ppid=1671 pid=1803 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c544,c954 key=(null) Jul 10 00:37:37.598000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 00:37:38.250000 audit[5194]: AVC avc: denied { watch } for pid=5194 comm="apiserver" path="/calico-apiserver-certs/..2025_07_10_00_37_08.3751994790/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c226,c444 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c226,c444 tclass=file permissive=0 Jul 10 00:37:38.250000 audit[5194]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c000b28940 a2=fc6 a3=0 items=0 ppid=4398 pid=5194 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c226,c444 key=(null) Jul 10 00:37:38.250000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 10 00:37:38.282735 kubelet[1947]: I0710 00:37:38.282702 1947 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Jul 10 00:37:39.051174 env[1205]: time="2025-07-10T00:37:39.051107528Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node-driver-registrar:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:37:39.054613 env[1205]: time="2025-07-10T00:37:39.054570143Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:9e48822a4fe26f4ed9231b361fdd1357ea3567f1fc0a8db4d616622fe570a866,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:37:39.057016 env[1205]: time="2025-07-10T00:37:39.056973323Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/node-driver-registrar:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:37:39.058966 env[1205]: time="2025-07-10T00:37:39.058938467Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node-driver-registrar@sha256:8fec2de12dfa51bae89d941938a07af2598eb8bfcab55d0dded1d9c193d7b99f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:37:39.059520 env[1205]: time="2025-07-10T00:37:39.059495882Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.2\" returns image reference \"sha256:9e48822a4fe26f4ed9231b361fdd1357ea3567f1fc0a8db4d616622fe570a866\"" Jul 10 00:37:39.062175 env[1205]: time="2025-07-10T00:37:39.061907509Z" level=info msg="CreateContainer within sandbox \"e85ccdde7862fa4c3cb351013b3e8613e58276bf4b718c855f3f5e86224e6cc8\" for container &ContainerMetadata{Name:csi-node-driver-registrar,Attempt:0,}" Jul 10 00:37:39.077687 env[1205]: time="2025-07-10T00:37:39.077623570Z" level=info msg="CreateContainer within sandbox \"e85ccdde7862fa4c3cb351013b3e8613e58276bf4b718c855f3f5e86224e6cc8\" for &ContainerMetadata{Name:csi-node-driver-registrar,Attempt:0,} returns container id \"8d224b076ea3d8fbc98b0b666a8bab70820a555ad96635f59ee633e00094fddc\"" Jul 10 00:37:39.078175 env[1205]: time="2025-07-10T00:37:39.078124036Z" level=info msg="StartContainer for \"8d224b076ea3d8fbc98b0b666a8bab70820a555ad96635f59ee633e00094fddc\"" Jul 10 00:37:39.098191 systemd[1]: Started cri-containerd-8d224b076ea3d8fbc98b0b666a8bab70820a555ad96635f59ee633e00094fddc.scope. Jul 10 00:37:39.107000 audit[5281]: AVC avc: denied { perfmon } for pid=5281 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:39.107000 audit[5281]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001176b0 a2=3c a3=7fb6a9365ad8 items=0 ppid=3941 pid=5281 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:39.107000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3864323234623037366561336438666263393862306236363661386261 Jul 10 00:37:39.107000 audit[5281]: AVC avc: denied { bpf } for pid=5281 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:39.107000 audit[5281]: AVC avc: denied { bpf } for pid=5281 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:39.107000 audit[5281]: AVC avc: denied { bpf } for pid=5281 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:39.107000 audit[5281]: AVC avc: denied { perfmon } for pid=5281 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:39.107000 audit[5281]: AVC avc: denied { perfmon } for pid=5281 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:39.107000 audit[5281]: AVC avc: denied { perfmon } for pid=5281 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:39.107000 audit[5281]: AVC avc: denied { perfmon } for pid=5281 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:39.107000 audit[5281]: AVC avc: denied { perfmon } for pid=5281 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:39.107000 audit[5281]: AVC avc: denied { bpf } for pid=5281 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:39.107000 audit[5281]: AVC avc: denied { bpf } for pid=5281 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:39.107000 audit: BPF prog-id=228 op=LOAD Jul 10 00:37:39.107000 audit[5281]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001179d8 a2=78 a3=c0001b6708 items=0 ppid=3941 pid=5281 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:39.107000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3864323234623037366561336438666263393862306236363661386261 Jul 10 00:37:39.108000 audit[5281]: AVC avc: denied { bpf } for pid=5281 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:39.108000 audit[5281]: AVC avc: denied { bpf } for pid=5281 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:39.108000 audit[5281]: AVC avc: denied { perfmon } for pid=5281 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:39.108000 audit[5281]: AVC avc: denied { perfmon } for pid=5281 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:39.108000 audit[5281]: AVC avc: denied { perfmon } for pid=5281 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:39.108000 audit[5281]: AVC avc: denied { perfmon } for pid=5281 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:39.108000 audit[5281]: AVC avc: denied { perfmon } for pid=5281 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:39.108000 audit[5281]: AVC avc: denied { bpf } for pid=5281 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:39.108000 audit[5281]: AVC avc: denied { bpf } for pid=5281 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:39.108000 audit: BPF prog-id=229 op=LOAD Jul 10 00:37:39.108000 audit[5281]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000117770 a2=78 a3=c0001b6758 items=0 ppid=3941 pid=5281 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:39.108000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3864323234623037366561336438666263393862306236363661386261 Jul 10 00:37:39.108000 audit: BPF prog-id=229 op=UNLOAD Jul 10 00:37:39.108000 audit: BPF prog-id=228 op=UNLOAD Jul 10 00:37:39.108000 audit[5281]: AVC avc: denied { bpf } for pid=5281 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:39.108000 audit[5281]: AVC avc: denied { bpf } for pid=5281 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:39.108000 audit[5281]: AVC avc: denied { bpf } for pid=5281 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:39.108000 audit[5281]: AVC avc: denied { perfmon } for pid=5281 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:39.108000 audit[5281]: AVC avc: denied { perfmon } for pid=5281 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:39.108000 audit[5281]: AVC avc: denied { perfmon } for pid=5281 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:39.108000 audit[5281]: AVC avc: denied { perfmon } for pid=5281 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:39.108000 audit[5281]: AVC avc: denied { perfmon } for pid=5281 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:39.108000 audit[5281]: AVC avc: denied { bpf } for pid=5281 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:39.108000 audit[5281]: AVC avc: denied { bpf } for pid=5281 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:37:39.108000 audit: BPF prog-id=230 op=LOAD Jul 10 00:37:39.108000 audit[5281]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000117c30 a2=78 a3=c0001b67e8 items=0 ppid=3941 pid=5281 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:39.108000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3864323234623037366561336438666263393862306236363661386261 Jul 10 00:37:39.123721 env[1205]: time="2025-07-10T00:37:39.123644158Z" level=info msg="StartContainer for \"8d224b076ea3d8fbc98b0b666a8bab70820a555ad96635f59ee633e00094fddc\" returns successfully" Jul 10 00:37:39.299008 kubelet[1947]: I0710 00:37:39.298950 1947 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/goldmane-768f4c5c69-z2lth" podStartSLOduration=32.043812554 podStartE2EDuration="45.298934022s" podCreationTimestamp="2025-07-10 00:36:54 +0000 UTC" firstStartedPulling="2025-07-10 00:37:23.347847526 +0000 UTC m=+48.770272534" lastFinishedPulling="2025-07-10 00:37:36.602968994 +0000 UTC m=+62.025394002" observedRunningTime="2025-07-10 00:37:37.334483274 +0000 UTC m=+62.756908282" watchObservedRunningTime="2025-07-10 00:37:39.298934022 +0000 UTC m=+64.721359030" Jul 10 00:37:39.299565 kubelet[1947]: I0710 00:37:39.299077 1947 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/csi-node-driver-xcq57" podStartSLOduration=28.041253397 podStartE2EDuration="44.299073261s" podCreationTimestamp="2025-07-10 00:36:55 +0000 UTC" firstStartedPulling="2025-07-10 00:37:22.802597878 +0000 UTC m=+48.225022886" lastFinishedPulling="2025-07-10 00:37:39.060417742 +0000 UTC m=+64.482842750" observedRunningTime="2025-07-10 00:37:39.297753132 +0000 UTC m=+64.720178140" watchObservedRunningTime="2025-07-10 00:37:39.299073261 +0000 UTC m=+64.721498269" Jul 10 00:37:39.980761 kubelet[1947]: I0710 00:37:39.980717 1947 csi_plugin.go:100] kubernetes.io/csi: Trying to validate a new CSI Driver with name: csi.tigera.io endpoint: /var/lib/kubelet/plugins/csi.tigera.io/csi.sock versions: 1.0.0 Jul 10 00:37:39.981798 kubelet[1947]: I0710 00:37:39.981770 1947 csi_plugin.go:113] kubernetes.io/csi: Register new plugin with name: csi.tigera.io at endpoint: /var/lib/kubelet/plugins/csi.tigera.io/csi.sock Jul 10 00:37:40.963684 systemd[1]: Started sshd@14-10.0.0.36:22-10.0.0.1:56248.service. Jul 10 00:37:40.963000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.0.0.36:22-10.0.0.1:56248 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:37:40.965034 kernel: kauditd_printk_skb: 185 callbacks suppressed Jul 10 00:37:40.965101 kernel: audit: type=1130 audit(1752107860.963:1514): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.0.0.36:22-10.0.0.1:56248 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:37:41.012000 audit[5336]: USER_ACCT pid=5336 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:37:41.014267 sshd[5336]: Accepted publickey for core from 10.0.0.1 port 56248 ssh2: RSA SHA256:suUhWV759MqU0C+Dl6JG8TPW8PqnqlsB4qushdi9Ejw Jul 10 00:37:41.017185 sshd[5336]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 00:37:41.016000 audit[5336]: CRED_ACQ pid=5336 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:37:41.022227 kernel: audit: type=1101 audit(1752107861.012:1515): pid=5336 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:37:41.022286 kernel: audit: type=1103 audit(1752107861.016:1516): pid=5336 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:37:41.022307 kernel: audit: type=1006 audit(1752107861.016:1517): pid=5336 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 Jul 10 00:37:41.022390 systemd[1]: Started session-15.scope. Jul 10 00:37:41.022881 systemd-logind[1194]: New session 15 of user core. Jul 10 00:37:41.016000 audit[5336]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe2d5dd7b0 a2=3 a3=0 items=0 ppid=1 pid=5336 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:41.030134 kernel: audit: type=1300 audit(1752107861.016:1517): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe2d5dd7b0 a2=3 a3=0 items=0 ppid=1 pid=5336 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:41.030181 kernel: audit: type=1327 audit(1752107861.016:1517): proctitle=737368643A20636F7265205B707269765D Jul 10 00:37:41.016000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 10 00:37:41.027000 audit[5336]: USER_START pid=5336 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:37:41.035969 kernel: audit: type=1105 audit(1752107861.027:1518): pid=5336 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:37:41.036189 kernel: audit: type=1103 audit(1752107861.028:1519): pid=5338 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:37:41.028000 audit[5338]: CRED_ACQ pid=5338 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:37:41.226890 sshd[5336]: pam_unix(sshd:session): session closed for user core Jul 10 00:37:41.227000 audit[5336]: USER_END pid=5336 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:37:41.229674 systemd[1]: sshd@14-10.0.0.36:22-10.0.0.1:56248.service: Deactivated successfully. Jul 10 00:37:41.230446 systemd[1]: session-15.scope: Deactivated successfully. Jul 10 00:37:41.231011 systemd-logind[1194]: Session 15 logged out. Waiting for processes to exit. Jul 10 00:37:41.231686 systemd-logind[1194]: Removed session 15. Jul 10 00:37:41.227000 audit[5336]: CRED_DISP pid=5336 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:37:41.236021 kernel: audit: type=1106 audit(1752107861.227:1520): pid=5336 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:37:41.236082 kernel: audit: type=1104 audit(1752107861.227:1521): pid=5336 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:37:41.229000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.0.0.36:22-10.0.0.1:56248 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:37:46.230511 systemd[1]: Started sshd@15-10.0.0.36:22-10.0.0.1:56252.service. Jul 10 00:37:46.229000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.0.0.36:22-10.0.0.1:56252 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:37:46.231851 kernel: kauditd_printk_skb: 1 callbacks suppressed Jul 10 00:37:46.231887 kernel: audit: type=1130 audit(1752107866.229:1523): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.0.0.36:22-10.0.0.1:56252 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:37:46.269000 audit[5355]: USER_ACCT pid=5355 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:37:46.270440 sshd[5355]: Accepted publickey for core from 10.0.0.1 port 56252 ssh2: RSA SHA256:suUhWV759MqU0C+Dl6JG8TPW8PqnqlsB4qushdi9Ejw Jul 10 00:37:46.272201 sshd[5355]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 00:37:46.271000 audit[5355]: CRED_ACQ pid=5355 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:37:46.275373 systemd-logind[1194]: New session 16 of user core. Jul 10 00:37:46.276094 systemd[1]: Started session-16.scope. Jul 10 00:37:46.277960 kernel: audit: type=1101 audit(1752107866.269:1524): pid=5355 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:37:46.278036 kernel: audit: type=1103 audit(1752107866.271:1525): pid=5355 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:37:46.278058 kernel: audit: type=1006 audit(1752107866.271:1526): pid=5355 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=16 res=1 Jul 10 00:37:46.271000 audit[5355]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffefca85450 a2=3 a3=0 items=0 ppid=1 pid=5355 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:46.284141 kernel: audit: type=1300 audit(1752107866.271:1526): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffefca85450 a2=3 a3=0 items=0 ppid=1 pid=5355 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:46.284191 kernel: audit: type=1327 audit(1752107866.271:1526): proctitle=737368643A20636F7265205B707269765D Jul 10 00:37:46.271000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 10 00:37:46.285387 kernel: audit: type=1105 audit(1752107866.280:1527): pid=5355 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:37:46.280000 audit[5355]: USER_START pid=5355 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:37:46.281000 audit[5357]: CRED_ACQ pid=5357 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:37:46.292601 kernel: audit: type=1103 audit(1752107866.281:1528): pid=5357 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:37:46.405397 sshd[5355]: pam_unix(sshd:session): session closed for user core Jul 10 00:37:46.405000 audit[5355]: USER_END pid=5355 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:37:46.407947 systemd[1]: sshd@15-10.0.0.36:22-10.0.0.1:56252.service: Deactivated successfully. Jul 10 00:37:46.408696 systemd[1]: session-16.scope: Deactivated successfully. Jul 10 00:37:46.409447 systemd-logind[1194]: Session 16 logged out. Waiting for processes to exit. Jul 10 00:37:46.410285 systemd-logind[1194]: Removed session 16. Jul 10 00:37:46.405000 audit[5355]: CRED_DISP pid=5355 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:37:46.414827 kernel: audit: type=1106 audit(1752107866.405:1529): pid=5355 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:37:46.414962 kernel: audit: type=1104 audit(1752107866.405:1530): pid=5355 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:37:46.407000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.0.0.36:22-10.0.0.1:56252 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:37:47.889550 kubelet[1947]: E0710 00:37:47.889488 1947 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:37:49.887756 kubelet[1947]: E0710 00:37:49.887707 1947 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:37:51.409000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.0.0.36:22-10.0.0.1:51548 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:37:51.409767 systemd[1]: Started sshd@16-10.0.0.36:22-10.0.0.1:51548.service. Jul 10 00:37:51.410825 kernel: kauditd_printk_skb: 1 callbacks suppressed Jul 10 00:37:51.410875 kernel: audit: type=1130 audit(1752107871.409:1532): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.0.0.36:22-10.0.0.1:51548 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:37:51.452000 audit[5368]: USER_ACCT pid=5368 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:37:51.453824 sshd[5368]: Accepted publickey for core from 10.0.0.1 port 51548 ssh2: RSA SHA256:suUhWV759MqU0C+Dl6JG8TPW8PqnqlsB4qushdi9Ejw Jul 10 00:37:51.456000 audit[5368]: CRED_ACQ pid=5368 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:37:51.457809 sshd[5368]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 00:37:51.460944 kernel: audit: type=1101 audit(1752107871.452:1533): pid=5368 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:37:51.460997 kernel: audit: type=1103 audit(1752107871.456:1534): pid=5368 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:37:51.461016 kernel: audit: type=1006 audit(1752107871.456:1535): pid=5368 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=17 res=1 Jul 10 00:37:51.462006 systemd[1]: Started session-17.scope. Jul 10 00:37:51.462287 systemd-logind[1194]: New session 17 of user core. Jul 10 00:37:51.456000 audit[5368]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe76ef1970 a2=3 a3=0 items=0 ppid=1 pid=5368 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:51.466909 kernel: audit: type=1300 audit(1752107871.456:1535): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe76ef1970 a2=3 a3=0 items=0 ppid=1 pid=5368 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:51.467143 kernel: audit: type=1327 audit(1752107871.456:1535): proctitle=737368643A20636F7265205B707269765D Jul 10 00:37:51.456000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 10 00:37:51.466000 audit[5368]: USER_START pid=5368 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:37:51.472208 kernel: audit: type=1105 audit(1752107871.466:1536): pid=5368 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:37:51.472243 kernel: audit: type=1103 audit(1752107871.467:1537): pid=5370 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:37:51.467000 audit[5370]: CRED_ACQ pid=5370 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:37:51.578429 sshd[5368]: pam_unix(sshd:session): session closed for user core Jul 10 00:37:51.578000 audit[5368]: USER_END pid=5368 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:37:51.582101 systemd[1]: Started sshd@17-10.0.0.36:22-10.0.0.1:51556.service. Jul 10 00:37:51.582732 systemd[1]: sshd@16-10.0.0.36:22-10.0.0.1:51548.service: Deactivated successfully. Jul 10 00:37:51.583392 systemd[1]: session-17.scope: Deactivated successfully. Jul 10 00:37:51.584240 systemd-logind[1194]: Session 17 logged out. Waiting for processes to exit. Jul 10 00:37:51.579000 audit[5368]: CRED_DISP pid=5368 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:37:51.585288 systemd-logind[1194]: Removed session 17. Jul 10 00:37:51.588997 kernel: audit: type=1106 audit(1752107871.578:1538): pid=5368 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:37:51.589073 kernel: audit: type=1104 audit(1752107871.579:1539): pid=5368 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:37:51.581000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.0.0.36:22-10.0.0.1:51556 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:37:51.582000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.0.0.36:22-10.0.0.1:51548 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:37:51.627000 audit[5380]: USER_ACCT pid=5380 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:37:51.628516 sshd[5380]: Accepted publickey for core from 10.0.0.1 port 51556 ssh2: RSA SHA256:suUhWV759MqU0C+Dl6JG8TPW8PqnqlsB4qushdi9Ejw Jul 10 00:37:51.629000 audit[5380]: CRED_ACQ pid=5380 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:37:51.629000 audit[5380]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff1d434b90 a2=3 a3=0 items=0 ppid=1 pid=5380 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:51.629000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 10 00:37:51.630165 sshd[5380]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 00:37:51.633636 systemd-logind[1194]: New session 18 of user core. Jul 10 00:37:51.634611 systemd[1]: Started session-18.scope. Jul 10 00:37:51.638000 audit[5380]: USER_START pid=5380 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:37:51.639000 audit[5383]: CRED_ACQ pid=5383 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:37:51.827922 sshd[5380]: pam_unix(sshd:session): session closed for user core Jul 10 00:37:51.828000 audit[5380]: USER_END pid=5380 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:37:51.828000 audit[5380]: CRED_DISP pid=5380 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:37:51.831169 systemd[1]: sshd@17-10.0.0.36:22-10.0.0.1:51556.service: Deactivated successfully. Jul 10 00:37:51.830000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.0.0.36:22-10.0.0.1:51556 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:37:51.831862 systemd[1]: session-18.scope: Deactivated successfully. Jul 10 00:37:51.832478 systemd-logind[1194]: Session 18 logged out. Waiting for processes to exit. Jul 10 00:37:51.833000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.0.0.36:22-10.0.0.1:51558 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:37:51.833647 systemd[1]: Started sshd@18-10.0.0.36:22-10.0.0.1:51558.service. Jul 10 00:37:51.834506 systemd-logind[1194]: Removed session 18. Jul 10 00:37:51.875000 audit[5392]: USER_ACCT pid=5392 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:37:51.876860 sshd[5392]: Accepted publickey for core from 10.0.0.1 port 51558 ssh2: RSA SHA256:suUhWV759MqU0C+Dl6JG8TPW8PqnqlsB4qushdi9Ejw Jul 10 00:37:51.876000 audit[5392]: CRED_ACQ pid=5392 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:37:51.876000 audit[5392]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffb0d74a70 a2=3 a3=0 items=0 ppid=1 pid=5392 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:51.876000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 10 00:37:51.877819 sshd[5392]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 00:37:51.881210 systemd-logind[1194]: New session 19 of user core. Jul 10 00:37:51.882109 systemd[1]: Started session-19.scope. Jul 10 00:37:51.885000 audit[5392]: USER_START pid=5392 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:37:51.886000 audit[5394]: CRED_ACQ pid=5394 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:37:52.741000 audit[5407]: NETFILTER_CFG table=filter:128 family=2 entries=22 op=nft_register_rule pid=5407 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:37:52.741000 audit[5407]: SYSCALL arch=c000003e syscall=46 success=yes exit=12688 a0=3 a1=7ffd33bdca70 a2=0 a3=7ffd33bdca5c items=0 ppid=2093 pid=5407 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:52.741000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:37:52.749000 audit[5407]: NETFILTER_CFG table=nat:129 family=2 entries=24 op=nft_register_rule pid=5407 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:37:52.749000 audit[5407]: SYSCALL arch=c000003e syscall=46 success=yes exit=7308 a0=3 a1=7ffd33bdca70 a2=0 a3=0 items=0 ppid=2093 pid=5407 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:52.749000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:37:52.752998 sshd[5392]: pam_unix(sshd:session): session closed for user core Jul 10 00:37:52.754000 audit[5392]: USER_END pid=5392 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:37:52.754000 audit[5392]: CRED_DISP pid=5392 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:37:52.756728 systemd[1]: sshd@18-10.0.0.36:22-10.0.0.1:51558.service: Deactivated successfully. Jul 10 00:37:52.756000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.0.0.36:22-10.0.0.1:51558 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:37:52.757279 systemd[1]: session-19.scope: Deactivated successfully. Jul 10 00:37:52.757921 systemd-logind[1194]: Session 19 logged out. Waiting for processes to exit. Jul 10 00:37:52.758000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.0.0.36:22-10.0.0.1:51564 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:37:52.759137 systemd[1]: Started sshd@19-10.0.0.36:22-10.0.0.1:51564.service. Jul 10 00:37:52.760280 systemd-logind[1194]: Removed session 19. Jul 10 00:37:52.770000 audit[5412]: NETFILTER_CFG table=filter:130 family=2 entries=34 op=nft_register_rule pid=5412 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:37:52.770000 audit[5412]: SYSCALL arch=c000003e syscall=46 success=yes exit=12688 a0=3 a1=7fffb0b80e60 a2=0 a3=7fffb0b80e4c items=0 ppid=2093 pid=5412 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:52.770000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:37:52.775000 audit[5412]: NETFILTER_CFG table=nat:131 family=2 entries=24 op=nft_register_rule pid=5412 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:37:52.775000 audit[5412]: SYSCALL arch=c000003e syscall=46 success=yes exit=7308 a0=3 a1=7fffb0b80e60 a2=0 a3=0 items=0 ppid=2093 pid=5412 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:52.775000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:37:52.802000 audit[5410]: USER_ACCT pid=5410 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:37:52.803172 sshd[5410]: Accepted publickey for core from 10.0.0.1 port 51564 ssh2: RSA SHA256:suUhWV759MqU0C+Dl6JG8TPW8PqnqlsB4qushdi9Ejw Jul 10 00:37:52.803000 audit[5410]: CRED_ACQ pid=5410 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:37:52.803000 audit[5410]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe79e797d0 a2=3 a3=0 items=0 ppid=1 pid=5410 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:52.803000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 10 00:37:52.804257 sshd[5410]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 00:37:52.807675 systemd-logind[1194]: New session 20 of user core. Jul 10 00:37:52.808530 systemd[1]: Started session-20.scope. Jul 10 00:37:52.811000 audit[5410]: USER_START pid=5410 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:37:52.813000 audit[5414]: CRED_ACQ pid=5414 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:37:53.077582 sshd[5410]: pam_unix(sshd:session): session closed for user core Jul 10 00:37:53.081622 systemd[1]: Started sshd@20-10.0.0.36:22-10.0.0.1:51580.service. Jul 10 00:37:53.081000 audit[5410]: USER_END pid=5410 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:37:53.081000 audit[5410]: CRED_DISP pid=5410 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:37:53.081000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.0.0.36:22-10.0.0.1:51580 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:37:53.084337 systemd[1]: sshd@19-10.0.0.36:22-10.0.0.1:51564.service: Deactivated successfully. Jul 10 00:37:53.083000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.0.0.36:22-10.0.0.1:51564 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:37:53.084914 systemd[1]: session-20.scope: Deactivated successfully. Jul 10 00:37:53.085749 systemd-logind[1194]: Session 20 logged out. Waiting for processes to exit. Jul 10 00:37:53.086561 systemd-logind[1194]: Removed session 20. Jul 10 00:37:53.124000 audit[5422]: USER_ACCT pid=5422 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:37:53.125006 sshd[5422]: Accepted publickey for core from 10.0.0.1 port 51580 ssh2: RSA SHA256:suUhWV759MqU0C+Dl6JG8TPW8PqnqlsB4qushdi9Ejw Jul 10 00:37:53.125000 audit[5422]: CRED_ACQ pid=5422 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:37:53.125000 audit[5422]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff591c6bf0 a2=3 a3=0 items=0 ppid=1 pid=5422 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:53.125000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 10 00:37:53.126071 sshd[5422]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 00:37:53.129907 systemd-logind[1194]: New session 21 of user core. Jul 10 00:37:53.130605 systemd[1]: Started session-21.scope. Jul 10 00:37:53.135000 audit[5422]: USER_START pid=5422 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:37:53.136000 audit[5425]: CRED_ACQ pid=5425 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:37:53.250826 sshd[5422]: pam_unix(sshd:session): session closed for user core Jul 10 00:37:53.251000 audit[5422]: USER_END pid=5422 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:37:53.251000 audit[5422]: CRED_DISP pid=5422 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:37:53.253312 systemd[1]: sshd@20-10.0.0.36:22-10.0.0.1:51580.service: Deactivated successfully. Jul 10 00:37:53.252000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.0.0.36:22-10.0.0.1:51580 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:37:53.254095 systemd[1]: session-21.scope: Deactivated successfully. Jul 10 00:37:53.254628 systemd-logind[1194]: Session 21 logged out. Waiting for processes to exit. Jul 10 00:37:53.255351 systemd-logind[1194]: Removed session 21. Jul 10 00:37:55.831546 systemd[1]: run-containerd-runc-k8s.io-ea2c8e0f16e40cff08cb91d4b77a42f0c4d2f4352511ed453d2af75bac840afc-runc.lXHHLO.mount: Deactivated successfully. Jul 10 00:37:58.253000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.0.0.36:22-10.0.0.1:51596 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:37:58.255370 systemd[1]: Started sshd@21-10.0.0.36:22-10.0.0.1:51596.service. Jul 10 00:37:58.257285 kernel: kauditd_printk_skb: 57 callbacks suppressed Jul 10 00:37:58.257478 kernel: audit: type=1130 audit(1752107878.253:1581): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.0.0.36:22-10.0.0.1:51596 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:37:58.303000 audit[5478]: USER_ACCT pid=5478 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:37:58.305453 sshd[5478]: Accepted publickey for core from 10.0.0.1 port 51596 ssh2: RSA SHA256:suUhWV759MqU0C+Dl6JG8TPW8PqnqlsB4qushdi9Ejw Jul 10 00:37:58.307177 sshd[5478]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 00:37:58.305000 audit[5478]: CRED_ACQ pid=5478 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:37:58.310768 systemd-logind[1194]: New session 22 of user core. Jul 10 00:37:58.311537 systemd[1]: Started session-22.scope. Jul 10 00:37:58.313581 kernel: audit: type=1101 audit(1752107878.303:1582): pid=5478 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:37:58.313783 kernel: audit: type=1103 audit(1752107878.305:1583): pid=5478 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:37:58.313820 kernel: audit: type=1006 audit(1752107878.305:1584): pid=5478 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=22 res=1 Jul 10 00:37:58.305000 audit[5478]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffb8a57e70 a2=3 a3=0 items=0 ppid=1 pid=5478 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:58.320239 kernel: audit: type=1300 audit(1752107878.305:1584): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffb8a57e70 a2=3 a3=0 items=0 ppid=1 pid=5478 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:58.320297 kernel: audit: type=1327 audit(1752107878.305:1584): proctitle=737368643A20636F7265205B707269765D Jul 10 00:37:58.305000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 10 00:37:58.314000 audit[5478]: USER_START pid=5478 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:37:58.326041 kernel: audit: type=1105 audit(1752107878.314:1585): pid=5478 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:37:58.326093 kernel: audit: type=1103 audit(1752107878.315:1586): pid=5480 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:37:58.315000 audit[5480]: CRED_ACQ pid=5480 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:37:58.594881 sshd[5478]: pam_unix(sshd:session): session closed for user core Jul 10 00:37:58.594000 audit[5478]: USER_END pid=5478 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:37:58.597202 systemd[1]: sshd@21-10.0.0.36:22-10.0.0.1:51596.service: Deactivated successfully. Jul 10 00:37:58.598163 systemd[1]: session-22.scope: Deactivated successfully. Jul 10 00:37:58.598674 systemd-logind[1194]: Session 22 logged out. Waiting for processes to exit. Jul 10 00:37:58.599460 systemd-logind[1194]: Removed session 22. Jul 10 00:37:58.594000 audit[5478]: CRED_DISP pid=5478 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:37:58.604071 kernel: audit: type=1106 audit(1752107878.594:1587): pid=5478 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:37:58.604132 kernel: audit: type=1104 audit(1752107878.594:1588): pid=5478 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:37:58.595000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.0.0.36:22-10.0.0.1:51596 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:37:58.774000 audit[5497]: NETFILTER_CFG table=filter:132 family=2 entries=22 op=nft_register_rule pid=5497 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:37:58.774000 audit[5497]: SYSCALL arch=c000003e syscall=46 success=yes exit=3760 a0=3 a1=7ffefc2917d0 a2=0 a3=7ffefc2917bc items=0 ppid=2093 pid=5497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:58.774000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:37:58.782000 audit[5497]: NETFILTER_CFG table=nat:133 family=2 entries=108 op=nft_register_chain pid=5497 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:37:58.782000 audit[5497]: SYSCALL arch=c000003e syscall=46 success=yes exit=50220 a0=3 a1=7ffefc2917d0 a2=0 a3=7ffefc2917bc items=0 ppid=2093 pid=5497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:58.782000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:38:01.888119 kubelet[1947]: E0710 00:38:01.888082 1947 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:38:01.923039 kubelet[1947]: I0710 00:38:01.923012 1947 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Jul 10 00:38:01.961000 audit[5499]: NETFILTER_CFG table=filter:134 family=2 entries=10 op=nft_register_rule pid=5499 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:38:01.961000 audit[5499]: SYSCALL arch=c000003e syscall=46 success=yes exit=3760 a0=3 a1=7ffce9a65da0 a2=0 a3=7ffce9a65d8c items=0 ppid=2093 pid=5499 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:38:01.961000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:38:01.966000 audit[5499]: NETFILTER_CFG table=nat:135 family=2 entries=60 op=nft_register_chain pid=5499 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:38:01.966000 audit[5499]: SYSCALL arch=c000003e syscall=46 success=yes exit=21220 a0=3 a1=7ffce9a65da0 a2=0 a3=7ffce9a65d8c items=0 ppid=2093 pid=5499 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:38:01.966000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:38:03.599666 systemd[1]: Started sshd@22-10.0.0.36:22-10.0.0.1:47166.service. Jul 10 00:38:03.598000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.0.0.36:22-10.0.0.1:47166 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:38:03.600804 kernel: kauditd_printk_skb: 13 callbacks suppressed Jul 10 00:38:03.600846 kernel: audit: type=1130 audit(1752107883.598:1594): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.0.0.36:22-10.0.0.1:47166 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:38:03.640000 audit[5521]: USER_ACCT pid=5521 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:38:03.642169 sshd[5521]: Accepted publickey for core from 10.0.0.1 port 47166 ssh2: RSA SHA256:suUhWV759MqU0C+Dl6JG8TPW8PqnqlsB4qushdi9Ejw Jul 10 00:38:03.643870 sshd[5521]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 00:38:03.641000 audit[5521]: CRED_ACQ pid=5521 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:38:03.648205 systemd-logind[1194]: New session 23 of user core. Jul 10 00:38:03.648609 systemd[1]: Started session-23.scope. Jul 10 00:38:03.649122 kernel: audit: type=1101 audit(1752107883.640:1595): pid=5521 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:38:03.649172 kernel: audit: type=1103 audit(1752107883.641:1596): pid=5521 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:38:03.649204 kernel: audit: type=1006 audit(1752107883.641:1597): pid=5521 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=23 res=1 Jul 10 00:38:03.641000 audit[5521]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffda2616ee0 a2=3 a3=0 items=0 ppid=1 pid=5521 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:38:03.655416 kernel: audit: type=1300 audit(1752107883.641:1597): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffda2616ee0 a2=3 a3=0 items=0 ppid=1 pid=5521 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:38:03.655538 kernel: audit: type=1327 audit(1752107883.641:1597): proctitle=737368643A20636F7265205B707269765D Jul 10 00:38:03.641000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 10 00:38:03.657129 kernel: audit: type=1105 audit(1752107883.651:1598): pid=5521 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:38:03.651000 audit[5521]: USER_START pid=5521 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:38:03.664258 kernel: audit: type=1103 audit(1752107883.652:1599): pid=5523 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:38:03.652000 audit[5523]: CRED_ACQ pid=5523 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:38:03.782855 sshd[5521]: pam_unix(sshd:session): session closed for user core Jul 10 00:38:03.782000 audit[5521]: USER_END pid=5521 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:38:03.785480 systemd[1]: sshd@22-10.0.0.36:22-10.0.0.1:47166.service: Deactivated successfully. Jul 10 00:38:03.786409 systemd[1]: session-23.scope: Deactivated successfully. Jul 10 00:38:03.786985 systemd-logind[1194]: Session 23 logged out. Waiting for processes to exit. Jul 10 00:38:03.787705 systemd-logind[1194]: Removed session 23. Jul 10 00:38:03.782000 audit[5521]: CRED_DISP pid=5521 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:38:03.792039 kernel: audit: type=1106 audit(1752107883.782:1600): pid=5521 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:38:03.792103 kernel: audit: type=1104 audit(1752107883.782:1601): pid=5521 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:38:03.784000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.0.0.36:22-10.0.0.1:47166 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:38:08.788315 systemd[1]: Started sshd@23-10.0.0.36:22-10.0.0.1:47168.service. Jul 10 00:38:08.787000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.0.0.36:22-10.0.0.1:47168 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:38:08.789789 kernel: kauditd_printk_skb: 1 callbacks suppressed Jul 10 00:38:08.789842 kernel: audit: type=1130 audit(1752107888.787:1603): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.0.0.36:22-10.0.0.1:47168 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:38:08.833000 audit[5557]: USER_ACCT pid=5557 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:38:08.834923 sshd[5557]: Accepted publickey for core from 10.0.0.1 port 47168 ssh2: RSA SHA256:suUhWV759MqU0C+Dl6JG8TPW8PqnqlsB4qushdi9Ejw Jul 10 00:38:08.835905 sshd[5557]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 00:38:08.834000 audit[5557]: CRED_ACQ pid=5557 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:38:08.842191 kernel: audit: type=1101 audit(1752107888.833:1604): pid=5557 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:38:08.842251 kernel: audit: type=1103 audit(1752107888.834:1605): pid=5557 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:38:08.844829 kernel: audit: type=1006 audit(1752107888.834:1606): pid=5557 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=24 res=1 Jul 10 00:38:08.844060 systemd-logind[1194]: New session 24 of user core. Jul 10 00:38:08.844423 systemd[1]: Started session-24.scope. Jul 10 00:38:08.834000 audit[5557]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffeebaf3b60 a2=3 a3=0 items=0 ppid=1 pid=5557 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:38:08.849944 kernel: audit: type=1300 audit(1752107888.834:1606): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffeebaf3b60 a2=3 a3=0 items=0 ppid=1 pid=5557 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:38:08.851589 kernel: audit: type=1327 audit(1752107888.834:1606): proctitle=737368643A20636F7265205B707269765D Jul 10 00:38:08.834000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 10 00:38:08.848000 audit[5557]: USER_START pid=5557 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:38:08.860964 kernel: audit: type=1105 audit(1752107888.848:1607): pid=5557 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:38:08.861024 kernel: audit: type=1103 audit(1752107888.850:1608): pid=5559 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:38:08.850000 audit[5559]: CRED_ACQ pid=5559 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:38:09.011678 sshd[5557]: pam_unix(sshd:session): session closed for user core Jul 10 00:38:09.012000 audit[5557]: USER_END pid=5557 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:38:09.013964 systemd[1]: sshd@23-10.0.0.36:22-10.0.0.1:47168.service: Deactivated successfully. Jul 10 00:38:09.014724 systemd[1]: session-24.scope: Deactivated successfully. Jul 10 00:38:09.015250 systemd-logind[1194]: Session 24 logged out. Waiting for processes to exit. Jul 10 00:38:09.016102 systemd-logind[1194]: Removed session 24. Jul 10 00:38:09.012000 audit[5557]: CRED_DISP pid=5557 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:38:09.019872 kernel: audit: type=1106 audit(1752107889.012:1609): pid=5557 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:38:09.019917 kernel: audit: type=1104 audit(1752107889.012:1610): pid=5557 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:38:09.013000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.0.0.36:22-10.0.0.1:47168 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:38:09.379000 audit[5595]: NETFILTER_CFG table=filter:136 family=2 entries=9 op=nft_register_rule pid=5595 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:38:09.379000 audit[5595]: SYSCALL arch=c000003e syscall=46 success=yes exit=3016 a0=3 a1=7ffc5e40d150 a2=0 a3=7ffc5e40d13c items=0 ppid=2093 pid=5595 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:38:09.379000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:38:09.386000 audit[5595]: NETFILTER_CFG table=nat:137 family=2 entries=55 op=nft_register_chain pid=5595 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:38:09.386000 audit[5595]: SYSCALL arch=c000003e syscall=46 success=yes exit=20100 a0=3 a1=7ffc5e40d150 a2=0 a3=7ffc5e40d13c items=0 ppid=2093 pid=5595 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:38:09.386000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:38:13.887711 kubelet[1947]: E0710 00:38:13.887638 1947 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:38:14.015591 systemd[1]: Started sshd@24-10.0.0.36:22-10.0.0.1:38162.service. Jul 10 00:38:14.015000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-10.0.0.36:22-10.0.0.1:38162 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:38:14.019857 kernel: kauditd_printk_skb: 7 callbacks suppressed Jul 10 00:38:14.019922 kernel: audit: type=1130 audit(1752107894.015:1614): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-10.0.0.36:22-10.0.0.1:38162 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:38:14.055000 audit[5597]: USER_ACCT pid=5597 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:38:14.056055 sshd[5597]: Accepted publickey for core from 10.0.0.1 port 38162 ssh2: RSA SHA256:suUhWV759MqU0C+Dl6JG8TPW8PqnqlsB4qushdi9Ejw Jul 10 00:38:14.059000 audit[5597]: CRED_ACQ pid=5597 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:38:14.060960 sshd[5597]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 00:38:14.064256 systemd-logind[1194]: New session 25 of user core. Jul 10 00:38:14.064966 kernel: audit: type=1101 audit(1752107894.055:1615): pid=5597 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:38:14.065014 kernel: audit: type=1103 audit(1752107894.059:1616): pid=5597 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:38:14.065035 kernel: audit: type=1006 audit(1752107894.060:1617): pid=5597 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=25 res=1 Jul 10 00:38:14.065075 systemd[1]: Started session-25.scope. Jul 10 00:38:14.060000 audit[5597]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe93d4fb80 a2=3 a3=0 items=0 ppid=1 pid=5597 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:38:14.072192 kernel: audit: type=1300 audit(1752107894.060:1617): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe93d4fb80 a2=3 a3=0 items=0 ppid=1 pid=5597 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:38:14.072282 kernel: audit: type=1327 audit(1752107894.060:1617): proctitle=737368643A20636F7265205B707269765D Jul 10 00:38:14.060000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 10 00:38:14.068000 audit[5597]: USER_START pid=5597 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:38:14.077996 kernel: audit: type=1105 audit(1752107894.068:1618): pid=5597 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:38:14.078139 kernel: audit: type=1103 audit(1752107894.069:1619): pid=5599 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:38:14.069000 audit[5599]: CRED_ACQ pid=5599 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:38:14.170914 sshd[5597]: pam_unix(sshd:session): session closed for user core Jul 10 00:38:14.171000 audit[5597]: USER_END pid=5597 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:38:14.173387 systemd[1]: sshd@24-10.0.0.36:22-10.0.0.1:38162.service: Deactivated successfully. Jul 10 00:38:14.174098 systemd[1]: session-25.scope: Deactivated successfully. Jul 10 00:38:14.174720 systemd-logind[1194]: Session 25 logged out. Waiting for processes to exit. Jul 10 00:38:14.175465 systemd-logind[1194]: Removed session 25. Jul 10 00:38:14.171000 audit[5597]: CRED_DISP pid=5597 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:38:14.179377 kernel: audit: type=1106 audit(1752107894.171:1620): pid=5597 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:38:14.179437 kernel: audit: type=1104 audit(1752107894.171:1621): pid=5597 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:38:14.172000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-10.0.0.36:22-10.0.0.1:38162 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'