Jul 10 00:43:23.137542 kernel: Linux version 5.15.186-flatcar (build@pony-truck.infra.kinvolk.io) (x86_64-cros-linux-gnu-gcc (Gentoo Hardened 11.3.1_p20221209 p3) 11.3.1 20221209, GNU ld (Gentoo 2.39 p5) 2.39.0) #1 SMP Wed Jul 9 23:09:45 -00 2025 Jul 10 00:43:23.137575 kernel: Command line: BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200 flatcar.first_boot=detected verity.usrhash=6cddad5f675165861f6062277cc28875548c735477e689762fc73abc16b63a3d Jul 10 00:43:23.137584 kernel: BIOS-provided physical RAM map: Jul 10 00:43:23.137590 kernel: BIOS-e820: [mem 0x0000000000000000-0x000000000009fbff] usable Jul 10 00:43:23.137595 kernel: BIOS-e820: [mem 0x000000000009fc00-0x000000000009ffff] reserved Jul 10 00:43:23.137601 kernel: BIOS-e820: [mem 0x00000000000f0000-0x00000000000fffff] reserved Jul 10 00:43:23.137607 kernel: BIOS-e820: [mem 0x0000000000100000-0x000000009cfdbfff] usable Jul 10 00:43:23.137613 kernel: BIOS-e820: [mem 0x000000009cfdc000-0x000000009cffffff] reserved Jul 10 00:43:23.137621 kernel: BIOS-e820: [mem 0x00000000b0000000-0x00000000bfffffff] reserved Jul 10 00:43:23.137626 kernel: BIOS-e820: [mem 0x00000000fed1c000-0x00000000fed1ffff] reserved Jul 10 00:43:23.137632 kernel: BIOS-e820: [mem 0x00000000feffc000-0x00000000feffffff] reserved Jul 10 00:43:23.137638 kernel: BIOS-e820: [mem 0x00000000fffc0000-0x00000000ffffffff] reserved Jul 10 00:43:23.137643 kernel: BIOS-e820: [mem 0x000000fd00000000-0x000000ffffffffff] reserved Jul 10 00:43:23.137649 kernel: NX (Execute Disable) protection: active Jul 10 00:43:23.137658 kernel: SMBIOS 2.8 present. Jul 10 00:43:23.137664 kernel: DMI: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 Jul 10 00:43:23.137670 kernel: Hypervisor detected: KVM Jul 10 00:43:23.137676 kernel: kvm-clock: Using msrs 4b564d01 and 4b564d00 Jul 10 00:43:23.137685 kernel: kvm-clock: cpu 0, msr 4719a001, primary cpu clock Jul 10 00:43:23.137691 kernel: kvm-clock: using sched offset of 3432384636 cycles Jul 10 00:43:23.137697 kernel: clocksource: kvm-clock: mask: 0xffffffffffffffff max_cycles: 0x1cd42e4dffb, max_idle_ns: 881590591483 ns Jul 10 00:43:23.137704 kernel: tsc: Detected 2794.748 MHz processor Jul 10 00:43:23.137710 kernel: e820: update [mem 0x00000000-0x00000fff] usable ==> reserved Jul 10 00:43:23.137718 kernel: e820: remove [mem 0x000a0000-0x000fffff] usable Jul 10 00:43:23.137724 kernel: last_pfn = 0x9cfdc max_arch_pfn = 0x400000000 Jul 10 00:43:23.137731 kernel: x86/PAT: Configuration [0-7]: WB WC UC- UC WB WP UC- WT Jul 10 00:43:23.137737 kernel: Using GB pages for direct mapping Jul 10 00:43:23.137743 kernel: ACPI: Early table checksum verification disabled Jul 10 00:43:23.137750 kernel: ACPI: RSDP 0x00000000000F59D0 000014 (v00 BOCHS ) Jul 10 00:43:23.137756 kernel: ACPI: RSDT 0x000000009CFE241A 000038 (v01 BOCHS BXPC 00000001 BXPC 00000001) Jul 10 00:43:23.137762 kernel: ACPI: FACP 0x000000009CFE21FA 0000F4 (v03 BOCHS BXPC 00000001 BXPC 00000001) Jul 10 00:43:23.137769 kernel: ACPI: DSDT 0x000000009CFE0040 0021BA (v01 BOCHS BXPC 00000001 BXPC 00000001) Jul 10 00:43:23.137776 kernel: ACPI: FACS 0x000000009CFE0000 000040 Jul 10 00:43:23.137783 kernel: ACPI: APIC 0x000000009CFE22EE 000090 (v01 BOCHS BXPC 00000001 BXPC 00000001) Jul 10 00:43:23.137789 kernel: ACPI: HPET 0x000000009CFE237E 000038 (v01 BOCHS BXPC 00000001 BXPC 00000001) Jul 10 00:43:23.137795 kernel: ACPI: MCFG 0x000000009CFE23B6 00003C (v01 BOCHS BXPC 00000001 BXPC 00000001) Jul 10 00:43:23.137802 kernel: ACPI: WAET 0x000000009CFE23F2 000028 (v01 BOCHS BXPC 00000001 BXPC 00000001) Jul 10 00:43:23.137808 kernel: ACPI: Reserving FACP table memory at [mem 0x9cfe21fa-0x9cfe22ed] Jul 10 00:43:23.137814 kernel: ACPI: Reserving DSDT table memory at [mem 0x9cfe0040-0x9cfe21f9] Jul 10 00:43:23.137820 kernel: ACPI: Reserving FACS table memory at [mem 0x9cfe0000-0x9cfe003f] Jul 10 00:43:23.137831 kernel: ACPI: Reserving APIC table memory at [mem 0x9cfe22ee-0x9cfe237d] Jul 10 00:43:23.137838 kernel: ACPI: Reserving HPET table memory at [mem 0x9cfe237e-0x9cfe23b5] Jul 10 00:43:23.137856 kernel: ACPI: Reserving MCFG table memory at [mem 0x9cfe23b6-0x9cfe23f1] Jul 10 00:43:23.137863 kernel: ACPI: Reserving WAET table memory at [mem 0x9cfe23f2-0x9cfe2419] Jul 10 00:43:23.137869 kernel: No NUMA configuration found Jul 10 00:43:23.137876 kernel: Faking a node at [mem 0x0000000000000000-0x000000009cfdbfff] Jul 10 00:43:23.137885 kernel: NODE_DATA(0) allocated [mem 0x9cfd6000-0x9cfdbfff] Jul 10 00:43:23.137892 kernel: Zone ranges: Jul 10 00:43:23.137899 kernel: DMA [mem 0x0000000000001000-0x0000000000ffffff] Jul 10 00:43:23.137905 kernel: DMA32 [mem 0x0000000001000000-0x000000009cfdbfff] Jul 10 00:43:23.137912 kernel: Normal empty Jul 10 00:43:23.137919 kernel: Movable zone start for each node Jul 10 00:43:23.137925 kernel: Early memory node ranges Jul 10 00:43:23.137932 kernel: node 0: [mem 0x0000000000001000-0x000000000009efff] Jul 10 00:43:23.137939 kernel: node 0: [mem 0x0000000000100000-0x000000009cfdbfff] Jul 10 00:43:23.137947 kernel: Initmem setup node 0 [mem 0x0000000000001000-0x000000009cfdbfff] Jul 10 00:43:23.137956 kernel: On node 0, zone DMA: 1 pages in unavailable ranges Jul 10 00:43:23.137963 kernel: On node 0, zone DMA: 97 pages in unavailable ranges Jul 10 00:43:23.137970 kernel: On node 0, zone DMA32: 12324 pages in unavailable ranges Jul 10 00:43:23.137977 kernel: ACPI: PM-Timer IO Port: 0x608 Jul 10 00:43:23.137984 kernel: ACPI: LAPIC_NMI (acpi_id[0xff] dfl dfl lint[0x1]) Jul 10 00:43:23.137998 kernel: IOAPIC[0]: apic_id 0, version 17, address 0xfec00000, GSI 0-23 Jul 10 00:43:23.138005 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 0 global_irq 2 dfl dfl) Jul 10 00:43:23.138012 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 5 global_irq 5 high level) Jul 10 00:43:23.138019 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 9 global_irq 9 high level) Jul 10 00:43:23.138033 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 10 global_irq 10 high level) Jul 10 00:43:23.138040 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 11 global_irq 11 high level) Jul 10 00:43:23.138047 kernel: ACPI: Using ACPI (MADT) for SMP configuration information Jul 10 00:43:23.138056 kernel: ACPI: HPET id: 0x8086a201 base: 0xfed00000 Jul 10 00:43:23.138063 kernel: TSC deadline timer available Jul 10 00:43:23.138070 kernel: smpboot: Allowing 4 CPUs, 0 hotplug CPUs Jul 10 00:43:23.138076 kernel: kvm-guest: KVM setup pv remote TLB flush Jul 10 00:43:23.138083 kernel: kvm-guest: setup PV sched yield Jul 10 00:43:23.138090 kernel: [mem 0xc0000000-0xfed1bfff] available for PCI devices Jul 10 00:43:23.138116 kernel: Booting paravirtualized kernel on KVM Jul 10 00:43:23.138123 kernel: clocksource: refined-jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1910969940391419 ns Jul 10 00:43:23.138130 kernel: setup_percpu: NR_CPUS:512 nr_cpumask_bits:512 nr_cpu_ids:4 nr_node_ids:1 Jul 10 00:43:23.138137 kernel: percpu: Embedded 56 pages/cpu s188696 r8192 d32488 u524288 Jul 10 00:43:23.138144 kernel: pcpu-alloc: s188696 r8192 d32488 u524288 alloc=1*2097152 Jul 10 00:43:23.138150 kernel: pcpu-alloc: [0] 0 1 2 3 Jul 10 00:43:23.138157 kernel: kvm-guest: setup async PF for cpu 0 Jul 10 00:43:23.138164 kernel: kvm-guest: stealtime: cpu 0, msr 9a41c0c0 Jul 10 00:43:23.138171 kernel: kvm-guest: PV spinlocks enabled Jul 10 00:43:23.138183 kernel: PV qspinlock hash table entries: 256 (order: 0, 4096 bytes, linear) Jul 10 00:43:23.138190 kernel: Built 1 zonelists, mobility grouping on. Total pages: 632732 Jul 10 00:43:23.138196 kernel: Policy zone: DMA32 Jul 10 00:43:23.138204 kernel: Kernel command line: rootflags=rw mount.usrflags=ro BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200 flatcar.first_boot=detected verity.usrhash=6cddad5f675165861f6062277cc28875548c735477e689762fc73abc16b63a3d Jul 10 00:43:23.138212 kernel: Unknown kernel command line parameters "BOOT_IMAGE=/flatcar/vmlinuz-a", will be passed to user space. Jul 10 00:43:23.138218 kernel: Dentry cache hash table entries: 524288 (order: 10, 4194304 bytes, linear) Jul 10 00:43:23.138225 kernel: Inode-cache hash table entries: 262144 (order: 9, 2097152 bytes, linear) Jul 10 00:43:23.138232 kernel: mem auto-init: stack:off, heap alloc:off, heap free:off Jul 10 00:43:23.138241 kernel: Memory: 2436696K/2571752K available (12295K kernel code, 2275K rwdata, 13724K rodata, 47472K init, 4108K bss, 134796K reserved, 0K cma-reserved) Jul 10 00:43:23.138248 kernel: SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=4, Nodes=1 Jul 10 00:43:23.138255 kernel: ftrace: allocating 34602 entries in 136 pages Jul 10 00:43:23.138262 kernel: ftrace: allocated 136 pages with 2 groups Jul 10 00:43:23.138268 kernel: rcu: Hierarchical RCU implementation. Jul 10 00:43:23.138276 kernel: rcu: RCU event tracing is enabled. Jul 10 00:43:23.138283 kernel: rcu: RCU restricting CPUs from NR_CPUS=512 to nr_cpu_ids=4. Jul 10 00:43:23.138289 kernel: Rude variant of Tasks RCU enabled. Jul 10 00:43:23.138296 kernel: Tracing variant of Tasks RCU enabled. Jul 10 00:43:23.138305 kernel: rcu: RCU calculated value of scheduler-enlistment delay is 100 jiffies. Jul 10 00:43:23.138312 kernel: rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=4 Jul 10 00:43:23.138318 kernel: NR_IRQS: 33024, nr_irqs: 456, preallocated irqs: 16 Jul 10 00:43:23.138325 kernel: random: crng init done Jul 10 00:43:23.138332 kernel: Console: colour VGA+ 80x25 Jul 10 00:43:23.138338 kernel: printk: console [ttyS0] enabled Jul 10 00:43:23.138345 kernel: ACPI: Core revision 20210730 Jul 10 00:43:23.138352 kernel: clocksource: hpet: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604467 ns Jul 10 00:43:23.138359 kernel: APIC: Switch to symmetric I/O mode setup Jul 10 00:43:23.138367 kernel: x2apic enabled Jul 10 00:43:23.138374 kernel: Switched APIC routing to physical x2apic. Jul 10 00:43:23.138383 kernel: kvm-guest: setup PV IPIs Jul 10 00:43:23.138390 kernel: ..TIMER: vector=0x30 apic1=0 pin1=2 apic2=-1 pin2=-1 Jul 10 00:43:23.138396 kernel: tsc: Marking TSC unstable due to TSCs unsynchronized Jul 10 00:43:23.138405 kernel: Calibrating delay loop (skipped) preset value.. 5589.49 BogoMIPS (lpj=2794748) Jul 10 00:43:23.138412 kernel: x86/cpu: User Mode Instruction Prevention (UMIP) activated Jul 10 00:43:23.138419 kernel: Last level iTLB entries: 4KB 512, 2MB 255, 4MB 127 Jul 10 00:43:23.138426 kernel: Last level dTLB entries: 4KB 512, 2MB 255, 4MB 127, 1GB 0 Jul 10 00:43:23.138442 kernel: Spectre V1 : Mitigation: usercopy/swapgs barriers and __user pointer sanitization Jul 10 00:43:23.138449 kernel: Spectre V2 : Mitigation: Retpolines Jul 10 00:43:23.138456 kernel: Spectre V2 : Spectre v2 / SpectreRSB: Filling RSB on context switch and VMEXIT Jul 10 00:43:23.138465 kernel: Spectre V2 : Enabling Speculation Barrier for firmware calls Jul 10 00:43:23.138472 kernel: RETBleed: Mitigation: untrained return thunk Jul 10 00:43:23.138479 kernel: Spectre V2 : mitigation: Enabling conditional Indirect Branch Prediction Barrier Jul 10 00:43:23.138487 kernel: Speculative Store Bypass: Mitigation: Speculative Store Bypass disabled via prctl and seccomp Jul 10 00:43:23.138494 kernel: x86/fpu: Supporting XSAVE feature 0x001: 'x87 floating point registers' Jul 10 00:43:23.138501 kernel: x86/fpu: Supporting XSAVE feature 0x002: 'SSE registers' Jul 10 00:43:23.138510 kernel: x86/fpu: Supporting XSAVE feature 0x004: 'AVX registers' Jul 10 00:43:23.138517 kernel: x86/fpu: xstate_offset[2]: 576, xstate_sizes[2]: 256 Jul 10 00:43:23.138524 kernel: x86/fpu: Enabled xstate features 0x7, context size is 832 bytes, using 'standard' format. Jul 10 00:43:23.138532 kernel: Freeing SMP alternatives memory: 32K Jul 10 00:43:23.138539 kernel: pid_max: default: 32768 minimum: 301 Jul 10 00:43:23.138546 kernel: LSM: Security Framework initializing Jul 10 00:43:23.138553 kernel: SELinux: Initializing. Jul 10 00:43:23.138560 kernel: Mount-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Jul 10 00:43:23.138569 kernel: Mountpoint-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Jul 10 00:43:23.138576 kernel: smpboot: CPU0: AMD EPYC 7402P 24-Core Processor (family: 0x17, model: 0x31, stepping: 0x0) Jul 10 00:43:23.138583 kernel: Performance Events: Fam17h+ core perfctr, AMD PMU driver. Jul 10 00:43:23.138590 kernel: ... version: 0 Jul 10 00:43:23.138597 kernel: ... bit width: 48 Jul 10 00:43:23.138604 kernel: ... generic registers: 6 Jul 10 00:43:23.138612 kernel: ... value mask: 0000ffffffffffff Jul 10 00:43:23.138619 kernel: ... max period: 00007fffffffffff Jul 10 00:43:23.138626 kernel: ... fixed-purpose events: 0 Jul 10 00:43:23.138637 kernel: ... event mask: 000000000000003f Jul 10 00:43:23.138644 kernel: signal: max sigframe size: 1776 Jul 10 00:43:23.138651 kernel: rcu: Hierarchical SRCU implementation. Jul 10 00:43:23.138658 kernel: smp: Bringing up secondary CPUs ... Jul 10 00:43:23.138665 kernel: x86: Booting SMP configuration: Jul 10 00:43:23.138673 kernel: .... node #0, CPUs: #1 Jul 10 00:43:23.138680 kernel: kvm-clock: cpu 1, msr 4719a041, secondary cpu clock Jul 10 00:43:23.138687 kernel: kvm-guest: setup async PF for cpu 1 Jul 10 00:43:23.138694 kernel: kvm-guest: stealtime: cpu 1, msr 9a49c0c0 Jul 10 00:43:23.138703 kernel: #2 Jul 10 00:43:23.138712 kernel: kvm-clock: cpu 2, msr 4719a081, secondary cpu clock Jul 10 00:43:23.138720 kernel: kvm-guest: setup async PF for cpu 2 Jul 10 00:43:23.138728 kernel: kvm-guest: stealtime: cpu 2, msr 9a51c0c0 Jul 10 00:43:23.138736 kernel: #3 Jul 10 00:43:23.138745 kernel: kvm-clock: cpu 3, msr 4719a0c1, secondary cpu clock Jul 10 00:43:23.138752 kernel: kvm-guest: setup async PF for cpu 3 Jul 10 00:43:23.138760 kernel: kvm-guest: stealtime: cpu 3, msr 9a59c0c0 Jul 10 00:43:23.138767 kernel: smp: Brought up 1 node, 4 CPUs Jul 10 00:43:23.138776 kernel: smpboot: Max logical packages: 1 Jul 10 00:43:23.138783 kernel: smpboot: Total of 4 processors activated (22357.98 BogoMIPS) Jul 10 00:43:23.138790 kernel: devtmpfs: initialized Jul 10 00:43:23.138797 kernel: x86/mm: Memory block size: 128MB Jul 10 00:43:23.138804 kernel: clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1911260446275000 ns Jul 10 00:43:23.138811 kernel: futex hash table entries: 1024 (order: 4, 65536 bytes, linear) Jul 10 00:43:23.138818 kernel: pinctrl core: initialized pinctrl subsystem Jul 10 00:43:23.138825 kernel: NET: Registered PF_NETLINK/PF_ROUTE protocol family Jul 10 00:43:23.138832 kernel: audit: initializing netlink subsys (disabled) Jul 10 00:43:23.138852 kernel: audit: type=2000 audit(1752108201.781:1): state=initialized audit_enabled=0 res=1 Jul 10 00:43:23.138859 kernel: thermal_sys: Registered thermal governor 'step_wise' Jul 10 00:43:23.138866 kernel: thermal_sys: Registered thermal governor 'user_space' Jul 10 00:43:23.138873 kernel: cpuidle: using governor menu Jul 10 00:43:23.138880 kernel: ACPI: bus type PCI registered Jul 10 00:43:23.138887 kernel: acpiphp: ACPI Hot Plug PCI Controller Driver version: 0.5 Jul 10 00:43:23.138894 kernel: dca service started, version 1.12.1 Jul 10 00:43:23.138905 kernel: PCI: MMCONFIG for domain 0000 [bus 00-ff] at [mem 0xb0000000-0xbfffffff] (base 0xb0000000) Jul 10 00:43:23.138912 kernel: PCI: MMCONFIG at [mem 0xb0000000-0xbfffffff] reserved in E820 Jul 10 00:43:23.138921 kernel: PCI: Using configuration type 1 for base access Jul 10 00:43:23.138929 kernel: kprobes: kprobe jump-optimization is enabled. All kprobes are optimized if possible. Jul 10 00:43:23.138936 kernel: HugeTLB registered 1.00 GiB page size, pre-allocated 0 pages Jul 10 00:43:23.138943 kernel: HugeTLB registered 2.00 MiB page size, pre-allocated 0 pages Jul 10 00:43:23.138950 kernel: ACPI: Added _OSI(Module Device) Jul 10 00:43:23.138957 kernel: ACPI: Added _OSI(Processor Device) Jul 10 00:43:23.138964 kernel: ACPI: Added _OSI(Processor Aggregator Device) Jul 10 00:43:23.138971 kernel: ACPI: Added _OSI(Linux-Dell-Video) Jul 10 00:43:23.138979 kernel: ACPI: Added _OSI(Linux-Lenovo-NV-HDMI-Audio) Jul 10 00:43:23.138995 kernel: ACPI: Added _OSI(Linux-HPI-Hybrid-Graphics) Jul 10 00:43:23.139002 kernel: ACPI: 1 ACPI AML tables successfully acquired and loaded Jul 10 00:43:23.139009 kernel: ACPI: Interpreter enabled Jul 10 00:43:23.139017 kernel: ACPI: PM: (supports S0 S3 S5) Jul 10 00:43:23.139024 kernel: ACPI: Using IOAPIC for interrupt routing Jul 10 00:43:23.139031 kernel: PCI: Using host bridge windows from ACPI; if necessary, use "pci=nocrs" and report a bug Jul 10 00:43:23.139039 kernel: ACPI: Enabled 2 GPEs in block 00 to 3F Jul 10 00:43:23.139046 kernel: ACPI: PCI Root Bridge [PCI0] (domain 0000 [bus 00-ff]) Jul 10 00:43:23.140196 kernel: acpi PNP0A08:00: _OSC: OS supports [ExtendedConfig ASPM ClockPM Segments MSI HPX-Type3] Jul 10 00:43:23.140286 kernel: acpi PNP0A08:00: _OSC: platform does not support [PCIeHotplug LTR] Jul 10 00:43:23.140361 kernel: acpi PNP0A08:00: _OSC: OS now controls [PME AER PCIeCapability] Jul 10 00:43:23.140371 kernel: PCI host bridge to bus 0000:00 Jul 10 00:43:23.140466 kernel: pci_bus 0000:00: root bus resource [io 0x0000-0x0cf7 window] Jul 10 00:43:23.140536 kernel: pci_bus 0000:00: root bus resource [io 0x0d00-0xffff window] Jul 10 00:43:23.140603 kernel: pci_bus 0000:00: root bus resource [mem 0x000a0000-0x000bffff window] Jul 10 00:43:23.140678 kernel: pci_bus 0000:00: root bus resource [mem 0x9d000000-0xafffffff window] Jul 10 00:43:23.140746 kernel: pci_bus 0000:00: root bus resource [mem 0xc0000000-0xfebfffff window] Jul 10 00:43:23.140814 kernel: pci_bus 0000:00: root bus resource [mem 0x100000000-0x8ffffffff window] Jul 10 00:43:23.140899 kernel: pci_bus 0000:00: root bus resource [bus 00-ff] Jul 10 00:43:23.141020 kernel: pci 0000:00:00.0: [8086:29c0] type 00 class 0x060000 Jul 10 00:43:23.141110 kernel: pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 Jul 10 00:43:23.141190 kernel: pci 0000:00:01.0: reg 0x10: [mem 0xfd000000-0xfdffffff pref] Jul 10 00:43:23.141270 kernel: pci 0000:00:01.0: reg 0x18: [mem 0xfebd0000-0xfebd0fff] Jul 10 00:43:23.141345 kernel: pci 0000:00:01.0: reg 0x30: [mem 0xfebc0000-0xfebcffff pref] Jul 10 00:43:23.141418 kernel: pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] Jul 10 00:43:23.141514 kernel: pci 0000:00:02.0: [1af4:1005] type 00 class 0x00ff00 Jul 10 00:43:23.141592 kernel: pci 0000:00:02.0: reg 0x10: [io 0xc0c0-0xc0df] Jul 10 00:43:23.141674 kernel: pci 0000:00:02.0: reg 0x14: [mem 0xfebd1000-0xfebd1fff] Jul 10 00:43:23.141755 kernel: pci 0000:00:02.0: reg 0x20: [mem 0xfe000000-0xfe003fff 64bit pref] Jul 10 00:43:23.141854 kernel: pci 0000:00:03.0: [1af4:1001] type 00 class 0x010000 Jul 10 00:43:23.141934 kernel: pci 0000:00:03.0: reg 0x10: [io 0xc000-0xc07f] Jul 10 00:43:23.142021 kernel: pci 0000:00:03.0: reg 0x14: [mem 0xfebd2000-0xfebd2fff] Jul 10 00:43:23.142096 kernel: pci 0000:00:03.0: reg 0x20: [mem 0xfe004000-0xfe007fff 64bit pref] Jul 10 00:43:23.142201 kernel: pci 0000:00:04.0: [1af4:1000] type 00 class 0x020000 Jul 10 00:43:23.142278 kernel: pci 0000:00:04.0: reg 0x10: [io 0xc0e0-0xc0ff] Jul 10 00:43:23.142357 kernel: pci 0000:00:04.0: reg 0x14: [mem 0xfebd3000-0xfebd3fff] Jul 10 00:43:23.142431 kernel: pci 0000:00:04.0: reg 0x20: [mem 0xfe008000-0xfe00bfff 64bit pref] Jul 10 00:43:23.142504 kernel: pci 0000:00:04.0: reg 0x30: [mem 0xfeb80000-0xfebbffff pref] Jul 10 00:43:23.142591 kernel: pci 0000:00:1f.0: [8086:2918] type 00 class 0x060100 Jul 10 00:43:23.142667 kernel: pci 0000:00:1f.0: quirk: [io 0x0600-0x067f] claimed by ICH6 ACPI/GPIO/TCO Jul 10 00:43:23.142753 kernel: pci 0000:00:1f.2: [8086:2922] type 00 class 0x010601 Jul 10 00:43:23.142828 kernel: pci 0000:00:1f.2: reg 0x20: [io 0xc100-0xc11f] Jul 10 00:43:23.142958 kernel: pci 0000:00:1f.2: reg 0x24: [mem 0xfebd4000-0xfebd4fff] Jul 10 00:43:23.143062 kernel: pci 0000:00:1f.3: [8086:2930] type 00 class 0x0c0500 Jul 10 00:43:23.143137 kernel: pci 0000:00:1f.3: reg 0x20: [io 0x0700-0x073f] Jul 10 00:43:23.143146 kernel: ACPI: PCI: Interrupt link LNKA configured for IRQ 10 Jul 10 00:43:23.143154 kernel: ACPI: PCI: Interrupt link LNKB configured for IRQ 10 Jul 10 00:43:23.143161 kernel: ACPI: PCI: Interrupt link LNKC configured for IRQ 11 Jul 10 00:43:23.143168 kernel: ACPI: PCI: Interrupt link LNKD configured for IRQ 11 Jul 10 00:43:23.143179 kernel: ACPI: PCI: Interrupt link LNKE configured for IRQ 10 Jul 10 00:43:23.143189 kernel: ACPI: PCI: Interrupt link LNKF configured for IRQ 10 Jul 10 00:43:23.143197 kernel: ACPI: PCI: Interrupt link LNKG configured for IRQ 11 Jul 10 00:43:23.143204 kernel: ACPI: PCI: Interrupt link LNKH configured for IRQ 11 Jul 10 00:43:23.143211 kernel: ACPI: PCI: Interrupt link GSIA configured for IRQ 16 Jul 10 00:43:23.143218 kernel: ACPI: PCI: Interrupt link GSIB configured for IRQ 17 Jul 10 00:43:23.143225 kernel: ACPI: PCI: Interrupt link GSIC configured for IRQ 18 Jul 10 00:43:23.143232 kernel: ACPI: PCI: Interrupt link GSID configured for IRQ 19 Jul 10 00:43:23.143240 kernel: ACPI: PCI: Interrupt link GSIE configured for IRQ 20 Jul 10 00:43:23.143247 kernel: ACPI: PCI: Interrupt link GSIF configured for IRQ 21 Jul 10 00:43:23.143256 kernel: ACPI: PCI: Interrupt link GSIG configured for IRQ 22 Jul 10 00:43:23.143263 kernel: ACPI: PCI: Interrupt link GSIH configured for IRQ 23 Jul 10 00:43:23.143270 kernel: iommu: Default domain type: Translated Jul 10 00:43:23.143280 kernel: iommu: DMA domain TLB invalidation policy: lazy mode Jul 10 00:43:23.143355 kernel: pci 0000:00:01.0: vgaarb: setting as boot VGA device Jul 10 00:43:23.143428 kernel: pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none Jul 10 00:43:23.143514 kernel: pci 0000:00:01.0: vgaarb: bridge control possible Jul 10 00:43:23.143528 kernel: vgaarb: loaded Jul 10 00:43:23.143541 kernel: pps_core: LinuxPPS API ver. 1 registered Jul 10 00:43:23.143551 kernel: pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti Jul 10 00:43:23.143560 kernel: PTP clock support registered Jul 10 00:43:23.143570 kernel: PCI: Using ACPI for IRQ routing Jul 10 00:43:23.143579 kernel: PCI: pci_cache_line_size set to 64 bytes Jul 10 00:43:23.143588 kernel: e820: reserve RAM buffer [mem 0x0009fc00-0x0009ffff] Jul 10 00:43:23.143597 kernel: e820: reserve RAM buffer [mem 0x9cfdc000-0x9fffffff] Jul 10 00:43:23.143605 kernel: hpet0: at MMIO 0xfed00000, IRQs 2, 8, 0 Jul 10 00:43:23.143612 kernel: hpet0: 3 comparators, 64-bit 100.000000 MHz counter Jul 10 00:43:23.143624 kernel: clocksource: Switched to clocksource kvm-clock Jul 10 00:43:23.143633 kernel: VFS: Disk quotas dquot_6.6.0 Jul 10 00:43:23.143642 kernel: VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes) Jul 10 00:43:23.143652 kernel: pnp: PnP ACPI init Jul 10 00:43:23.143757 kernel: system 00:05: [mem 0xb0000000-0xbfffffff window] has been reserved Jul 10 00:43:23.143769 kernel: pnp: PnP ACPI: found 6 devices Jul 10 00:43:23.143776 kernel: clocksource: acpi_pm: mask: 0xffffff max_cycles: 0xffffff, max_idle_ns: 2085701024 ns Jul 10 00:43:23.143783 kernel: NET: Registered PF_INET protocol family Jul 10 00:43:23.143791 kernel: IP idents hash table entries: 65536 (order: 7, 524288 bytes, linear) Jul 10 00:43:23.143801 kernel: tcp_listen_portaddr_hash hash table entries: 2048 (order: 3, 32768 bytes, linear) Jul 10 00:43:23.143808 kernel: Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear) Jul 10 00:43:23.143816 kernel: TCP established hash table entries: 32768 (order: 6, 262144 bytes, linear) Jul 10 00:43:23.143823 kernel: TCP bind hash table entries: 32768 (order: 7, 524288 bytes, linear) Jul 10 00:43:23.143830 kernel: TCP: Hash tables configured (established 32768 bind 32768) Jul 10 00:43:23.143838 kernel: UDP hash table entries: 2048 (order: 4, 65536 bytes, linear) Jul 10 00:43:23.143857 kernel: UDP-Lite hash table entries: 2048 (order: 4, 65536 bytes, linear) Jul 10 00:43:23.143865 kernel: NET: Registered PF_UNIX/PF_LOCAL protocol family Jul 10 00:43:23.143874 kernel: NET: Registered PF_XDP protocol family Jul 10 00:43:23.143946 kernel: pci_bus 0000:00: resource 4 [io 0x0000-0x0cf7 window] Jul 10 00:43:23.144022 kernel: pci_bus 0000:00: resource 5 [io 0x0d00-0xffff window] Jul 10 00:43:23.144090 kernel: pci_bus 0000:00: resource 6 [mem 0x000a0000-0x000bffff window] Jul 10 00:43:23.144156 kernel: pci_bus 0000:00: resource 7 [mem 0x9d000000-0xafffffff window] Jul 10 00:43:23.144221 kernel: pci_bus 0000:00: resource 8 [mem 0xc0000000-0xfebfffff window] Jul 10 00:43:23.144287 kernel: pci_bus 0000:00: resource 9 [mem 0x100000000-0x8ffffffff window] Jul 10 00:43:23.144296 kernel: PCI: CLS 0 bytes, default 64 Jul 10 00:43:23.144304 kernel: Initialise system trusted keyrings Jul 10 00:43:23.144314 kernel: workingset: timestamp_bits=39 max_order=20 bucket_order=0 Jul 10 00:43:23.144321 kernel: Key type asymmetric registered Jul 10 00:43:23.144328 kernel: Asymmetric key parser 'x509' registered Jul 10 00:43:23.144336 kernel: Block layer SCSI generic (bsg) driver version 0.4 loaded (major 249) Jul 10 00:43:23.144343 kernel: io scheduler mq-deadline registered Jul 10 00:43:23.144350 kernel: io scheduler kyber registered Jul 10 00:43:23.144358 kernel: io scheduler bfq registered Jul 10 00:43:23.144365 kernel: ioatdma: Intel(R) QuickData Technology Driver 5.00 Jul 10 00:43:23.144373 kernel: ACPI: \_SB_.GSIG: Enabled at IRQ 22 Jul 10 00:43:23.144382 kernel: ACPI: \_SB_.GSIH: Enabled at IRQ 23 Jul 10 00:43:23.144389 kernel: ACPI: \_SB_.GSIE: Enabled at IRQ 20 Jul 10 00:43:23.144397 kernel: Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled Jul 10 00:43:23.144404 kernel: 00:03: ttyS0 at I/O 0x3f8 (irq = 4, base_baud = 115200) is a 16550A Jul 10 00:43:23.144411 kernel: i8042: PNP: PS/2 Controller [PNP0303:KBD,PNP0f13:MOU] at 0x60,0x64 irq 1,12 Jul 10 00:43:23.144418 kernel: serio: i8042 KBD port at 0x60,0x64 irq 1 Jul 10 00:43:23.144425 kernel: serio: i8042 AUX port at 0x60,0x64 irq 12 Jul 10 00:43:23.144433 kernel: input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input0 Jul 10 00:43:23.144530 kernel: rtc_cmos 00:04: RTC can wake from S4 Jul 10 00:43:23.144606 kernel: rtc_cmos 00:04: registered as rtc0 Jul 10 00:43:23.144676 kernel: rtc_cmos 00:04: setting system clock to 2025-07-10T00:43:22 UTC (1752108202) Jul 10 00:43:23.144746 kernel: rtc_cmos 00:04: alarms up to one day, y3k, 242 bytes nvram, hpet irqs Jul 10 00:43:23.144755 kernel: NET: Registered PF_INET6 protocol family Jul 10 00:43:23.144762 kernel: Segment Routing with IPv6 Jul 10 00:43:23.144770 kernel: In-situ OAM (IOAM) with IPv6 Jul 10 00:43:23.144777 kernel: NET: Registered PF_PACKET protocol family Jul 10 00:43:23.144784 kernel: Key type dns_resolver registered Jul 10 00:43:23.144793 kernel: IPI shorthand broadcast: enabled Jul 10 00:43:23.144800 kernel: sched_clock: Marking stable (466818879, 97850166)->(579393871, -14724826) Jul 10 00:43:23.144808 kernel: registered taskstats version 1 Jul 10 00:43:23.144815 kernel: Loading compiled-in X.509 certificates Jul 10 00:43:23.144822 kernel: Loaded X.509 cert 'Kinvolk GmbH: Module signing key for 5.15.186-flatcar: 6ebecdd7757c0df63fc51731f0b99957f4e4af16' Jul 10 00:43:23.144829 kernel: Key type .fscrypt registered Jul 10 00:43:23.144836 kernel: Key type fscrypt-provisioning registered Jul 10 00:43:23.144855 kernel: ima: No TPM chip found, activating TPM-bypass! Jul 10 00:43:23.144864 kernel: ima: Allocated hash algorithm: sha1 Jul 10 00:43:23.144872 kernel: ima: No architecture policies found Jul 10 00:43:23.144879 kernel: clk: Disabling unused clocks Jul 10 00:43:23.144886 kernel: Freeing unused kernel image (initmem) memory: 47472K Jul 10 00:43:23.144893 kernel: Write protecting the kernel read-only data: 28672k Jul 10 00:43:23.144900 kernel: Freeing unused kernel image (text/rodata gap) memory: 2040K Jul 10 00:43:23.144907 kernel: Freeing unused kernel image (rodata/data gap) memory: 612K Jul 10 00:43:23.144914 kernel: Run /init as init process Jul 10 00:43:23.144921 kernel: with arguments: Jul 10 00:43:23.144928 kernel: /init Jul 10 00:43:23.144937 kernel: with environment: Jul 10 00:43:23.144944 kernel: HOME=/ Jul 10 00:43:23.144951 kernel: TERM=linux Jul 10 00:43:23.144959 kernel: BOOT_IMAGE=/flatcar/vmlinuz-a Jul 10 00:43:23.144971 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Jul 10 00:43:23.144981 systemd[1]: Detected virtualization kvm. Jul 10 00:43:23.144996 systemd[1]: Detected architecture x86-64. Jul 10 00:43:23.145005 systemd[1]: Running in initrd. Jul 10 00:43:23.145013 systemd[1]: No hostname configured, using default hostname. Jul 10 00:43:23.145020 systemd[1]: Hostname set to . Jul 10 00:43:23.145029 systemd[1]: Initializing machine ID from VM UUID. Jul 10 00:43:23.145036 systemd[1]: Queued start job for default target initrd.target. Jul 10 00:43:23.145044 systemd[1]: Started systemd-ask-password-console.path. Jul 10 00:43:23.145052 systemd[1]: Reached target cryptsetup.target. Jul 10 00:43:23.145059 systemd[1]: Reached target paths.target. Jul 10 00:43:23.145066 systemd[1]: Reached target slices.target. Jul 10 00:43:23.145075 systemd[1]: Reached target swap.target. Jul 10 00:43:23.145090 systemd[1]: Reached target timers.target. Jul 10 00:43:23.145100 systemd[1]: Listening on iscsid.socket. Jul 10 00:43:23.145107 systemd[1]: Listening on iscsiuio.socket. Jul 10 00:43:23.145115 systemd[1]: Listening on systemd-journald-audit.socket. Jul 10 00:43:23.145125 systemd[1]: Listening on systemd-journald-dev-log.socket. Jul 10 00:43:23.145133 systemd[1]: Listening on systemd-journald.socket. Jul 10 00:43:23.145141 systemd[1]: Listening on systemd-networkd.socket. Jul 10 00:43:23.145148 systemd[1]: Listening on systemd-udevd-control.socket. Jul 10 00:43:23.145156 systemd[1]: Listening on systemd-udevd-kernel.socket. Jul 10 00:43:23.145164 systemd[1]: Reached target sockets.target. Jul 10 00:43:23.145172 systemd[1]: Starting kmod-static-nodes.service... Jul 10 00:43:23.145180 systemd[1]: Finished network-cleanup.service. Jul 10 00:43:23.145188 systemd[1]: Starting systemd-fsck-usr.service... Jul 10 00:43:23.145197 systemd[1]: Starting systemd-journald.service... Jul 10 00:43:23.145205 systemd[1]: Starting systemd-modules-load.service... Jul 10 00:43:23.145213 systemd[1]: Starting systemd-resolved.service... Jul 10 00:43:23.145221 systemd[1]: Starting systemd-vconsole-setup.service... Jul 10 00:43:23.145229 systemd[1]: Finished kmod-static-nodes.service. Jul 10 00:43:23.145237 systemd[1]: Finished systemd-fsck-usr.service. Jul 10 00:43:23.145245 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Jul 10 00:43:23.145253 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Jul 10 00:43:23.145261 kernel: audit: type=1130 audit(1752108203.139:2): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:43:23.145277 systemd-journald[198]: Journal started Jul 10 00:43:23.145321 systemd-journald[198]: Runtime Journal (/run/log/journal/084d9d55429c42dd8f57e57782fc9740) is 6.0M, max 48.5M, 42.5M free. Jul 10 00:43:23.139000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:43:23.130923 systemd-modules-load[199]: Inserted module 'overlay' Jul 10 00:43:23.191381 systemd[1]: Started systemd-journald.service. Jul 10 00:43:23.191411 kernel: bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this. Jul 10 00:43:23.191424 kernel: Bridge firewalling registered Jul 10 00:43:23.191434 kernel: audit: type=1130 audit(1752108203.178:3): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:43:23.191446 kernel: audit: type=1130 audit(1752108203.181:4): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:43:23.191456 kernel: audit: type=1130 audit(1752108203.185:5): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:43:23.178000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:43:23.181000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:43:23.185000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:43:23.145349 systemd-resolved[200]: Positive Trust Anchors: Jul 10 00:43:23.145373 systemd-resolved[200]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Jul 10 00:43:23.145416 systemd-resolved[200]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Jul 10 00:43:23.149143 systemd-resolved[200]: Defaulting to hostname 'linux'. Jul 10 00:43:23.170330 systemd-modules-load[199]: Inserted module 'br_netfilter' Jul 10 00:43:23.179082 systemd[1]: Started systemd-resolved.service. Jul 10 00:43:23.182703 systemd[1]: Finished systemd-vconsole-setup.service. Jul 10 00:43:23.186136 systemd[1]: Reached target nss-lookup.target. Jul 10 00:43:23.191278 systemd[1]: Starting dracut-cmdline-ask.service... Jul 10 00:43:23.204122 systemd[1]: Finished dracut-cmdline-ask.service. Jul 10 00:43:23.208359 kernel: SCSI subsystem initialized Jul 10 00:43:23.208375 kernel: audit: type=1130 audit(1752108203.203:6): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:43:23.203000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:43:23.205088 systemd[1]: Starting dracut-cmdline.service... Jul 10 00:43:23.213163 dracut-cmdline[218]: dracut-dracut-053 Jul 10 00:43:23.214763 dracut-cmdline[218]: Using kernel command line parameters: rd.driver.pre=btrfs rootflags=rw mount.usrflags=ro BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200 flatcar.first_boot=detected verity.usrhash=6cddad5f675165861f6062277cc28875548c735477e689762fc73abc16b63a3d Jul 10 00:43:23.226159 kernel: device-mapper: core: CONFIG_IMA_DISABLE_HTABLE is disabled. Duplicate IMA measurements will not be recorded in the IMA log. Jul 10 00:43:23.226183 kernel: device-mapper: uevent: version 1.0.3 Jul 10 00:43:23.227409 kernel: device-mapper: ioctl: 4.45.0-ioctl (2021-03-22) initialised: dm-devel@redhat.com Jul 10 00:43:23.230225 systemd-modules-load[199]: Inserted module 'dm_multipath' Jul 10 00:43:23.232184 systemd[1]: Finished systemd-modules-load.service. Jul 10 00:43:23.232000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:43:23.237456 systemd[1]: Starting systemd-sysctl.service... Jul 10 00:43:23.239070 kernel: audit: type=1130 audit(1752108203.232:7): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:43:23.243494 systemd[1]: Finished systemd-sysctl.service. Jul 10 00:43:23.244000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:43:23.247878 kernel: audit: type=1130 audit(1752108203.244:8): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:43:23.264870 kernel: Loading iSCSI transport class v2.0-870. Jul 10 00:43:23.280864 kernel: iscsi: registered transport (tcp) Jul 10 00:43:23.302154 kernel: iscsi: registered transport (qla4xxx) Jul 10 00:43:23.302189 kernel: QLogic iSCSI HBA Driver Jul 10 00:43:23.325223 systemd[1]: Finished dracut-cmdline.service. Jul 10 00:43:23.326000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:43:23.328192 systemd[1]: Starting dracut-pre-udev.service... Jul 10 00:43:23.331708 kernel: audit: type=1130 audit(1752108203.326:9): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:43:23.372879 kernel: raid6: avx2x4 gen() 30363 MB/s Jul 10 00:43:23.389870 kernel: raid6: avx2x4 xor() 7439 MB/s Jul 10 00:43:23.406865 kernel: raid6: avx2x2 gen() 32324 MB/s Jul 10 00:43:23.423866 kernel: raid6: avx2x2 xor() 19152 MB/s Jul 10 00:43:23.440864 kernel: raid6: avx2x1 gen() 26252 MB/s Jul 10 00:43:23.457863 kernel: raid6: avx2x1 xor() 15203 MB/s Jul 10 00:43:23.474865 kernel: raid6: sse2x4 gen() 14488 MB/s Jul 10 00:43:23.491864 kernel: raid6: sse2x4 xor() 7225 MB/s Jul 10 00:43:23.508864 kernel: raid6: sse2x2 gen() 16040 MB/s Jul 10 00:43:23.525860 kernel: raid6: sse2x2 xor() 9765 MB/s Jul 10 00:43:23.542868 kernel: raid6: sse2x1 gen() 12202 MB/s Jul 10 00:43:23.560199 kernel: raid6: sse2x1 xor() 7633 MB/s Jul 10 00:43:23.560223 kernel: raid6: using algorithm avx2x2 gen() 32324 MB/s Jul 10 00:43:23.560233 kernel: raid6: .... xor() 19152 MB/s, rmw enabled Jul 10 00:43:23.560891 kernel: raid6: using avx2x2 recovery algorithm Jul 10 00:43:23.573873 kernel: xor: automatically using best checksumming function avx Jul 10 00:43:23.667879 kernel: Btrfs loaded, crc32c=crc32c-intel, zoned=no, fsverity=no Jul 10 00:43:23.674892 systemd[1]: Finished dracut-pre-udev.service. Jul 10 00:43:23.679347 kernel: audit: type=1130 audit(1752108203.674:10): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:43:23.674000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:43:23.678000 audit: BPF prog-id=7 op=LOAD Jul 10 00:43:23.678000 audit: BPF prog-id=8 op=LOAD Jul 10 00:43:23.679809 systemd[1]: Starting systemd-udevd.service... Jul 10 00:43:23.693017 systemd-udevd[400]: Using default interface naming scheme 'v252'. Jul 10 00:43:23.698133 systemd[1]: Started systemd-udevd.service. Jul 10 00:43:23.697000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:43:23.700004 systemd[1]: Starting dracut-pre-trigger.service... Jul 10 00:43:23.711038 dracut-pre-trigger[402]: rd.md=0: removing MD RAID activation Jul 10 00:43:23.735544 systemd[1]: Finished dracut-pre-trigger.service. Jul 10 00:43:23.735000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:43:23.737420 systemd[1]: Starting systemd-udev-trigger.service... Jul 10 00:43:23.771757 systemd[1]: Finished systemd-udev-trigger.service. Jul 10 00:43:23.772000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:43:23.804599 kernel: virtio_blk virtio1: [vda] 19775488 512-byte logical blocks (10.1 GB/9.43 GiB) Jul 10 00:43:23.811195 kernel: GPT:Primary header thinks Alt. header is not at the end of the disk. Jul 10 00:43:23.811207 kernel: GPT:9289727 != 19775487 Jul 10 00:43:23.811216 kernel: GPT:Alternate GPT header not at the end of the disk. Jul 10 00:43:23.811229 kernel: GPT:9289727 != 19775487 Jul 10 00:43:23.811238 kernel: GPT: Use GNU Parted to correct GPT errors. Jul 10 00:43:23.811247 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Jul 10 00:43:23.812863 kernel: cryptd: max_cpu_qlen set to 1000 Jul 10 00:43:23.820762 kernel: libata version 3.00 loaded. Jul 10 00:43:23.864867 kernel: AVX2 version of gcm_enc/dec engaged. Jul 10 00:43:23.869864 kernel: ahci 0000:00:1f.2: version 3.0 Jul 10 00:43:23.891423 kernel: ACPI: \_SB_.GSIA: Enabled at IRQ 16 Jul 10 00:43:23.891451 kernel: AES CTR mode by8 optimization enabled Jul 10 00:43:23.891462 kernel: ahci 0000:00:1f.2: AHCI 0001.0000 32 slots 6 ports 1.5 Gbps 0x3f impl SATA mode Jul 10 00:43:23.891558 kernel: ahci 0000:00:1f.2: flags: 64bit ncq only Jul 10 00:43:23.891638 kernel: BTRFS: device label OEM devid 1 transid 9 /dev/vda6 scanned by (udev-worker) (451) Jul 10 00:43:23.891648 kernel: scsi host0: ahci Jul 10 00:43:23.891744 kernel: scsi host1: ahci Jul 10 00:43:23.891832 kernel: scsi host2: ahci Jul 10 00:43:23.891961 kernel: scsi host3: ahci Jul 10 00:43:23.892064 kernel: scsi host4: ahci Jul 10 00:43:23.892157 kernel: scsi host5: ahci Jul 10 00:43:23.892243 kernel: ata1: SATA max UDMA/133 abar m4096@0xfebd4000 port 0xfebd4100 irq 34 Jul 10 00:43:23.892253 kernel: ata2: SATA max UDMA/133 abar m4096@0xfebd4000 port 0xfebd4180 irq 34 Jul 10 00:43:23.892262 kernel: ata3: SATA max UDMA/133 abar m4096@0xfebd4000 port 0xfebd4200 irq 34 Jul 10 00:43:23.892271 kernel: ata4: SATA max UDMA/133 abar m4096@0xfebd4000 port 0xfebd4280 irq 34 Jul 10 00:43:23.892283 kernel: ata5: SATA max UDMA/133 abar m4096@0xfebd4000 port 0xfebd4300 irq 34 Jul 10 00:43:23.892292 kernel: ata6: SATA max UDMA/133 abar m4096@0xfebd4000 port 0xfebd4380 irq 34 Jul 10 00:43:23.882856 systemd[1]: Found device dev-disk-by\x2dpartuuid-7130c94a\x2d213a\x2d4e5a\x2d8e26\x2d6cce9662f132.device. Jul 10 00:43:23.921752 systemd[1]: Found device dev-disk-by\x2dpartlabel-USR\x2dA.device. Jul 10 00:43:23.926706 systemd[1]: Found device dev-disk-by\x2dlabel-ROOT.device. Jul 10 00:43:23.931319 systemd[1]: Found device dev-disk-by\x2dlabel-EFI\x2dSYSTEM.device. Jul 10 00:43:23.939237 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Jul 10 00:43:23.941586 systemd[1]: Starting disk-uuid.service... Jul 10 00:43:24.069712 disk-uuid[518]: Primary Header is updated. Jul 10 00:43:24.069712 disk-uuid[518]: Secondary Entries is updated. Jul 10 00:43:24.069712 disk-uuid[518]: Secondary Header is updated. Jul 10 00:43:24.073390 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Jul 10 00:43:24.075866 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Jul 10 00:43:24.078867 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Jul 10 00:43:24.198496 kernel: ata5: SATA link down (SStatus 0 SControl 300) Jul 10 00:43:24.198585 kernel: ata4: SATA link down (SStatus 0 SControl 300) Jul 10 00:43:24.198598 kernel: ata6: SATA link down (SStatus 0 SControl 300) Jul 10 00:43:24.199873 kernel: ata1: SATA link down (SStatus 0 SControl 300) Jul 10 00:43:24.200884 kernel: ata2: SATA link down (SStatus 0 SControl 300) Jul 10 00:43:24.201878 kernel: ata3: SATA link up 1.5 Gbps (SStatus 113 SControl 300) Jul 10 00:43:24.203364 kernel: ata3.00: ATAPI: QEMU DVD-ROM, 2.5+, max UDMA/100 Jul 10 00:43:24.203388 kernel: ata3.00: applying bridge limits Jul 10 00:43:24.204901 kernel: ata3.00: configured for UDMA/100 Jul 10 00:43:24.204937 kernel: scsi 2:0:0:0: CD-ROM QEMU QEMU DVD-ROM 2.5+ PQ: 0 ANSI: 5 Jul 10 00:43:24.239045 kernel: sr 2:0:0:0: [sr0] scsi3-mmc drive: 4x/4x cd/rw xa/form2 tray Jul 10 00:43:24.256511 kernel: cdrom: Uniform CD-ROM driver Revision: 3.20 Jul 10 00:43:24.256528 kernel: sr 2:0:0:0: Attached scsi CD-ROM sr0 Jul 10 00:43:25.079745 disk-uuid[519]: The operation has completed successfully. Jul 10 00:43:25.081894 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Jul 10 00:43:25.582890 systemd[1]: disk-uuid.service: Deactivated successfully. Jul 10 00:43:25.582000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:43:25.582000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:43:25.583044 systemd[1]: Finished disk-uuid.service. Jul 10 00:43:25.585059 systemd[1]: Starting verity-setup.service... Jul 10 00:43:25.600880 kernel: device-mapper: verity: sha256 using implementation "sha256-ni" Jul 10 00:43:25.621461 systemd[1]: Found device dev-mapper-usr.device. Jul 10 00:43:25.623253 systemd[1]: Mounting sysusr-usr.mount... Jul 10 00:43:25.625199 systemd[1]: Finished verity-setup.service. Jul 10 00:43:25.624000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:43:25.691592 systemd[1]: Mounted sysusr-usr.mount. Jul 10 00:43:25.693016 kernel: EXT4-fs (dm-0): mounted filesystem without journal. Opts: norecovery. Quota mode: none. Jul 10 00:43:25.691999 systemd[1]: afterburn-network-kargs.service was skipped because no trigger condition checks were met. Jul 10 00:43:25.693004 systemd[1]: Starting ignition-setup.service... Jul 10 00:43:25.694019 systemd[1]: Starting parse-ip-for-networkd.service... Jul 10 00:43:25.707448 kernel: BTRFS info (device vda6): using crc32c (crc32c-intel) checksum algorithm Jul 10 00:43:25.707479 kernel: BTRFS info (device vda6): using free space tree Jul 10 00:43:25.707489 kernel: BTRFS info (device vda6): has skinny extents Jul 10 00:43:25.715994 systemd[1]: mnt-oem.mount: Deactivated successfully. Jul 10 00:43:25.724114 systemd[1]: Finished ignition-setup.service. Jul 10 00:43:25.724000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:43:25.725718 systemd[1]: Starting ignition-fetch-offline.service... Jul 10 00:43:25.813950 systemd[1]: Finished parse-ip-for-networkd.service. Jul 10 00:43:25.813000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:43:25.815000 audit: BPF prog-id=9 op=LOAD Jul 10 00:43:25.816508 systemd[1]: Starting systemd-networkd.service... Jul 10 00:43:25.842506 systemd-networkd[717]: lo: Link UP Jul 10 00:43:25.842517 systemd-networkd[717]: lo: Gained carrier Jul 10 00:43:25.843149 systemd-networkd[717]: Enumeration completed Jul 10 00:43:25.843304 systemd[1]: Started systemd-networkd.service. Jul 10 00:43:25.843397 systemd-networkd[717]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Jul 10 00:43:25.846000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:43:25.844634 systemd-networkd[717]: eth0: Link UP Jul 10 00:43:25.844637 systemd-networkd[717]: eth0: Gained carrier Jul 10 00:43:25.847711 systemd[1]: Reached target network.target. Jul 10 00:43:25.850764 systemd[1]: Starting iscsiuio.service... Jul 10 00:43:25.856980 ignition[644]: Ignition 2.14.0 Jul 10 00:43:25.856992 ignition[644]: Stage: fetch-offline Jul 10 00:43:25.857252 ignition[644]: no configs at "/usr/lib/ignition/base.d" Jul 10 00:43:25.857262 ignition[644]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Jul 10 00:43:25.857378 ignition[644]: parsed url from cmdline: "" Jul 10 00:43:25.857381 ignition[644]: no config URL provided Jul 10 00:43:25.857386 ignition[644]: reading system config file "/usr/lib/ignition/user.ign" Jul 10 00:43:25.857402 ignition[644]: no config at "/usr/lib/ignition/user.ign" Jul 10 00:43:25.857427 ignition[644]: op(1): [started] loading QEMU firmware config module Jul 10 00:43:25.858017 ignition[644]: op(1): executing: "modprobe" "qemu_fw_cfg" Jul 10 00:43:25.871438 ignition[644]: op(1): [finished] loading QEMU firmware config module Jul 10 00:43:25.887221 systemd[1]: Started iscsiuio.service. Jul 10 00:43:25.888000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:43:25.889907 systemd[1]: Starting iscsid.service... Jul 10 00:43:25.894343 iscsid[723]: iscsid: can't open InitiatorName configuration file /etc/iscsi/initiatorname.iscsi Jul 10 00:43:25.894343 iscsid[723]: iscsid: Warning: InitiatorName file /etc/iscsi/initiatorname.iscsi does not exist or does not contain a properly formatted InitiatorName. If using software iscsi (iscsi_tcp or ib_iser) or partial offload (bnx2i or cxgbi iscsi), you may not be able to log into or discover targets. Please create a file /etc/iscsi/initiatorname.iscsi that contains a sting with the format: InitiatorName=iqn.yyyy-mm.[:identifier]. Jul 10 00:43:25.894343 iscsid[723]: Example: InitiatorName=iqn.2001-04.com.redhat:fc6. Jul 10 00:43:25.894343 iscsid[723]: If using hardware iscsi like qla4xxx this message can be ignored. Jul 10 00:43:25.894343 iscsid[723]: iscsid: can't open InitiatorAlias configuration file /etc/iscsi/initiatorname.iscsi Jul 10 00:43:25.902000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:43:25.906904 iscsid[723]: iscsid: can't open iscsid.safe_logout configuration file /etc/iscsi/iscsid.conf Jul 10 00:43:25.897968 systemd[1]: Started iscsid.service. Jul 10 00:43:25.903182 systemd[1]: Starting dracut-initqueue.service... Jul 10 00:43:25.917216 systemd[1]: Finished dracut-initqueue.service. Jul 10 00:43:25.918000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:43:25.919289 systemd[1]: Reached target remote-fs-pre.target. Jul 10 00:43:25.919776 systemd[1]: Reached target remote-cryptsetup.target. Jul 10 00:43:25.920206 systemd[1]: Reached target remote-fs.target. Jul 10 00:43:25.921222 systemd[1]: Starting dracut-pre-mount.service... Jul 10 00:43:25.929579 systemd[1]: Finished dracut-pre-mount.service. Jul 10 00:43:25.930000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:43:25.938024 ignition[644]: parsing config with SHA512: 624511405f38f135644777a78fde3d61043948c3b56359ac676f0e08cb4b03d922e0f4a0c9492c09958fcef569bbfab4ba3f908484202672fd7ab6249a5b1cec Jul 10 00:43:25.996391 systemd-networkd[717]: eth0: DHCPv4 address 10.0.0.116/16, gateway 10.0.0.1 acquired from 10.0.0.1 Jul 10 00:43:26.002866 unknown[644]: fetched base config from "system" Jul 10 00:43:26.002878 unknown[644]: fetched user config from "qemu" Jul 10 00:43:26.003340 ignition[644]: fetch-offline: fetch-offline passed Jul 10 00:43:26.005000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:43:26.004664 systemd[1]: Finished ignition-fetch-offline.service. Jul 10 00:43:26.003396 ignition[644]: Ignition finished successfully Jul 10 00:43:26.006209 systemd[1]: ignition-fetch.service was skipped because of an unmet condition check (ConditionPathExists=!/run/ignition.json). Jul 10 00:43:26.007040 systemd[1]: Starting ignition-kargs.service... Jul 10 00:43:26.028280 ignition[738]: Ignition 2.14.0 Jul 10 00:43:26.028291 ignition[738]: Stage: kargs Jul 10 00:43:26.028401 ignition[738]: no configs at "/usr/lib/ignition/base.d" Jul 10 00:43:26.028411 ignition[738]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Jul 10 00:43:26.030951 systemd[1]: Finished ignition-kargs.service. Jul 10 00:43:26.032000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:43:26.029678 ignition[738]: kargs: kargs passed Jul 10 00:43:26.029728 ignition[738]: Ignition finished successfully Jul 10 00:43:26.033611 systemd[1]: Starting ignition-disks.service... Jul 10 00:43:26.042426 ignition[744]: Ignition 2.14.0 Jul 10 00:43:26.042434 ignition[744]: Stage: disks Jul 10 00:43:26.042531 ignition[744]: no configs at "/usr/lib/ignition/base.d" Jul 10 00:43:26.043967 systemd[1]: Finished ignition-disks.service. Jul 10 00:43:26.045000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:43:26.042540 ignition[744]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Jul 10 00:43:26.045733 systemd[1]: Reached target initrd-root-device.target. Jul 10 00:43:26.043339 ignition[744]: disks: disks passed Jul 10 00:43:26.047361 systemd[1]: Reached target local-fs-pre.target. Jul 10 00:43:26.043374 ignition[744]: Ignition finished successfully Jul 10 00:43:26.048263 systemd[1]: Reached target local-fs.target. Jul 10 00:43:26.050043 systemd[1]: Reached target sysinit.target. Jul 10 00:43:26.050808 systemd[1]: Reached target basic.target. Jul 10 00:43:26.053225 systemd[1]: Starting systemd-fsck-root.service... Jul 10 00:43:26.066367 systemd-fsck[752]: ROOT: clean, 619/553520 files, 56023/553472 blocks Jul 10 00:43:26.072065 systemd[1]: Finished systemd-fsck-root.service. Jul 10 00:43:26.073000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:43:26.074881 systemd[1]: Mounting sysroot.mount... Jul 10 00:43:26.081865 kernel: EXT4-fs (vda9): mounted filesystem with ordered data mode. Opts: (null). Quota mode: none. Jul 10 00:43:26.082280 systemd[1]: Mounted sysroot.mount. Jul 10 00:43:26.082597 systemd[1]: Reached target initrd-root-fs.target. Jul 10 00:43:26.084749 systemd[1]: Mounting sysroot-usr.mount... Jul 10 00:43:26.085633 systemd[1]: flatcar-metadata-hostname.service was skipped because no trigger condition checks were met. Jul 10 00:43:26.085663 systemd[1]: ignition-remount-sysroot.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/sysroot). Jul 10 00:43:26.085682 systemd[1]: Reached target ignition-diskful.target. Jul 10 00:43:26.087464 systemd[1]: Mounted sysroot-usr.mount. Jul 10 00:43:26.089383 systemd[1]: Starting initrd-setup-root.service... Jul 10 00:43:26.096643 initrd-setup-root[762]: cut: /sysroot/etc/passwd: No such file or directory Jul 10 00:43:26.100236 initrd-setup-root[770]: cut: /sysroot/etc/group: No such file or directory Jul 10 00:43:26.104270 initrd-setup-root[778]: cut: /sysroot/etc/shadow: No such file or directory Jul 10 00:43:26.107356 initrd-setup-root[786]: cut: /sysroot/etc/gshadow: No such file or directory Jul 10 00:43:26.190660 systemd[1]: Finished initrd-setup-root.service. Jul 10 00:43:26.191000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:43:26.193402 systemd[1]: Starting ignition-mount.service... Jul 10 00:43:26.195563 systemd[1]: Starting sysroot-boot.service... Jul 10 00:43:26.200139 bash[803]: umount: /sysroot/usr/share/oem: not mounted. Jul 10 00:43:26.212830 systemd[1]: Finished sysroot-boot.service. Jul 10 00:43:26.212000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:43:26.215113 ignition[804]: INFO : Ignition 2.14.0 Jul 10 00:43:26.215113 ignition[804]: INFO : Stage: mount Jul 10 00:43:26.216672 ignition[804]: INFO : no configs at "/usr/lib/ignition/base.d" Jul 10 00:43:26.216672 ignition[804]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Jul 10 00:43:26.216672 ignition[804]: INFO : mount: mount passed Jul 10 00:43:26.216672 ignition[804]: INFO : Ignition finished successfully Jul 10 00:43:26.217000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:43:26.217066 systemd[1]: Finished ignition-mount.service. Jul 10 00:43:26.634249 systemd[1]: Mounting sysroot-usr-share-oem.mount... Jul 10 00:43:26.643457 kernel: BTRFS: device label OEM devid 1 transid 10 /dev/vda6 scanned by mount (814) Jul 10 00:43:26.643496 kernel: BTRFS info (device vda6): using crc32c (crc32c-intel) checksum algorithm Jul 10 00:43:26.643513 kernel: BTRFS info (device vda6): using free space tree Jul 10 00:43:26.644285 kernel: BTRFS info (device vda6): has skinny extents Jul 10 00:43:26.648181 systemd[1]: Mounted sysroot-usr-share-oem.mount. Jul 10 00:43:26.650009 systemd[1]: Starting ignition-files.service... Jul 10 00:43:26.667645 ignition[834]: INFO : Ignition 2.14.0 Jul 10 00:43:26.667645 ignition[834]: INFO : Stage: files Jul 10 00:43:26.669852 ignition[834]: INFO : no configs at "/usr/lib/ignition/base.d" Jul 10 00:43:26.669852 ignition[834]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Jul 10 00:43:26.669852 ignition[834]: DEBUG : files: compiled without relabeling support, skipping Jul 10 00:43:26.674226 ignition[834]: INFO : files: ensureUsers: op(1): [started] creating or modifying user "core" Jul 10 00:43:26.674226 ignition[834]: DEBUG : files: ensureUsers: op(1): executing: "usermod" "--root" "/sysroot" "core" Jul 10 00:43:26.674226 ignition[834]: INFO : files: ensureUsers: op(1): [finished] creating or modifying user "core" Jul 10 00:43:26.674226 ignition[834]: INFO : files: ensureUsers: op(2): [started] adding ssh keys to user "core" Jul 10 00:43:26.674226 ignition[834]: INFO : files: ensureUsers: op(2): [finished] adding ssh keys to user "core" Jul 10 00:43:26.674226 ignition[834]: INFO : files: createFilesystemsFiles: createFiles: op(3): [started] writing file "/sysroot/opt/helm-v3.17.3-linux-amd64.tar.gz" Jul 10 00:43:26.674226 ignition[834]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET https://get.helm.sh/helm-v3.17.3-linux-amd64.tar.gz: attempt #1 Jul 10 00:43:26.672932 unknown[834]: wrote ssh authorized keys file for user: core Jul 10 00:43:26.728384 ignition[834]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET result: OK Jul 10 00:43:27.254733 ignition[834]: INFO : files: createFilesystemsFiles: createFiles: op(3): [finished] writing file "/sysroot/opt/helm-v3.17.3-linux-amd64.tar.gz" Jul 10 00:43:27.254733 ignition[834]: INFO : files: createFilesystemsFiles: createFiles: op(4): [started] writing file "/sysroot/home/core/install.sh" Jul 10 00:43:27.259019 ignition[834]: INFO : files: createFilesystemsFiles: createFiles: op(4): [finished] writing file "/sysroot/home/core/install.sh" Jul 10 00:43:27.259019 ignition[834]: INFO : files: createFilesystemsFiles: createFiles: op(5): [started] writing file "/sysroot/home/core/nginx.yaml" Jul 10 00:43:27.259019 ignition[834]: INFO : files: createFilesystemsFiles: createFiles: op(5): [finished] writing file "/sysroot/home/core/nginx.yaml" Jul 10 00:43:27.259019 ignition[834]: INFO : files: createFilesystemsFiles: createFiles: op(6): [started] writing file "/sysroot/home/core/nfs-pod.yaml" Jul 10 00:43:27.259019 ignition[834]: INFO : files: createFilesystemsFiles: createFiles: op(6): [finished] writing file "/sysroot/home/core/nfs-pod.yaml" Jul 10 00:43:27.259019 ignition[834]: INFO : files: createFilesystemsFiles: createFiles: op(7): [started] writing file "/sysroot/home/core/nfs-pvc.yaml" Jul 10 00:43:27.259019 ignition[834]: INFO : files: createFilesystemsFiles: createFiles: op(7): [finished] writing file "/sysroot/home/core/nfs-pvc.yaml" Jul 10 00:43:27.259019 ignition[834]: INFO : files: createFilesystemsFiles: createFiles: op(8): [started] writing file "/sysroot/etc/flatcar/update.conf" Jul 10 00:43:27.259019 ignition[834]: INFO : files: createFilesystemsFiles: createFiles: op(8): [finished] writing file "/sysroot/etc/flatcar/update.conf" Jul 10 00:43:27.259019 ignition[834]: INFO : files: createFilesystemsFiles: createFiles: op(9): [started] writing link "/sysroot/etc/extensions/kubernetes.raw" -> "/opt/extensions/kubernetes/kubernetes-v1.33.0-x86-64.raw" Jul 10 00:43:27.259019 ignition[834]: INFO : files: createFilesystemsFiles: createFiles: op(9): [finished] writing link "/sysroot/etc/extensions/kubernetes.raw" -> "/opt/extensions/kubernetes/kubernetes-v1.33.0-x86-64.raw" Jul 10 00:43:27.259019 ignition[834]: INFO : files: createFilesystemsFiles: createFiles: op(a): [started] writing file "/sysroot/opt/extensions/kubernetes/kubernetes-v1.33.0-x86-64.raw" Jul 10 00:43:27.259019 ignition[834]: INFO : files: createFilesystemsFiles: createFiles: op(a): GET https://extensions.flatcar.org/extensions/kubernetes-v1.33.0-x86-64.raw: attempt #1 Jul 10 00:43:27.423270 systemd-networkd[717]: eth0: Gained IPv6LL Jul 10 00:43:27.950658 ignition[834]: INFO : files: createFilesystemsFiles: createFiles: op(a): GET result: OK Jul 10 00:43:28.513701 ignition[834]: INFO : files: createFilesystemsFiles: createFiles: op(a): [finished] writing file "/sysroot/opt/extensions/kubernetes/kubernetes-v1.33.0-x86-64.raw" Jul 10 00:43:28.513701 ignition[834]: INFO : files: op(b): [started] processing unit "prepare-helm.service" Jul 10 00:43:28.517161 ignition[834]: INFO : files: op(b): op(c): [started] writing unit "prepare-helm.service" at "/sysroot/etc/systemd/system/prepare-helm.service" Jul 10 00:43:28.519511 ignition[834]: INFO : files: op(b): op(c): [finished] writing unit "prepare-helm.service" at "/sysroot/etc/systemd/system/prepare-helm.service" Jul 10 00:43:28.519511 ignition[834]: INFO : files: op(b): [finished] processing unit "prepare-helm.service" Jul 10 00:43:28.519511 ignition[834]: INFO : files: op(d): [started] processing unit "coreos-metadata.service" Jul 10 00:43:28.525039 ignition[834]: INFO : files: op(d): op(e): [started] writing unit "coreos-metadata.service" at "/sysroot/etc/systemd/system/coreos-metadata.service" Jul 10 00:43:28.525039 ignition[834]: INFO : files: op(d): op(e): [finished] writing unit "coreos-metadata.service" at "/sysroot/etc/systemd/system/coreos-metadata.service" Jul 10 00:43:28.525039 ignition[834]: INFO : files: op(d): [finished] processing unit "coreos-metadata.service" Jul 10 00:43:28.525039 ignition[834]: INFO : files: op(f): [started] setting preset to enabled for "prepare-helm.service" Jul 10 00:43:28.525039 ignition[834]: INFO : files: op(f): [finished] setting preset to enabled for "prepare-helm.service" Jul 10 00:43:28.525039 ignition[834]: INFO : files: op(10): [started] setting preset to disabled for "coreos-metadata.service" Jul 10 00:43:28.525039 ignition[834]: INFO : files: op(10): op(11): [started] removing enablement symlink(s) for "coreos-metadata.service" Jul 10 00:43:28.595223 ignition[834]: INFO : files: op(10): op(11): [finished] removing enablement symlink(s) for "coreos-metadata.service" Jul 10 00:43:28.596905 ignition[834]: INFO : files: op(10): [finished] setting preset to disabled for "coreos-metadata.service" Jul 10 00:43:28.596905 ignition[834]: INFO : files: createResultFile: createFiles: op(12): [started] writing file "/sysroot/etc/.ignition-result.json" Jul 10 00:43:28.596905 ignition[834]: INFO : files: createResultFile: createFiles: op(12): [finished] writing file "/sysroot/etc/.ignition-result.json" Jul 10 00:43:28.596905 ignition[834]: INFO : files: files passed Jul 10 00:43:28.596905 ignition[834]: INFO : Ignition finished successfully Jul 10 00:43:28.604593 systemd[1]: Finished ignition-files.service. Jul 10 00:43:28.605000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:43:28.607300 kernel: kauditd_printk_skb: 23 callbacks suppressed Jul 10 00:43:28.607330 kernel: audit: type=1130 audit(1752108208.605:34): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:43:28.607985 systemd[1]: Starting initrd-setup-root-after-ignition.service... Jul 10 00:43:28.612018 systemd[1]: torcx-profile-populate.service was skipped because of an unmet condition check (ConditionPathExists=/sysroot/etc/torcx/next-profile). Jul 10 00:43:28.614052 initrd-setup-root-after-ignition[858]: grep: /sysroot/usr/share/oem/oem-release: No such file or directory Jul 10 00:43:28.615721 initrd-setup-root-after-ignition[860]: grep: /sysroot/etc/flatcar/enabled-sysext.conf: No such file or directory Jul 10 00:43:28.618120 systemd[1]: Starting ignition-quench.service... Jul 10 00:43:28.620067 systemd[1]: Finished initrd-setup-root-after-ignition.service. Jul 10 00:43:28.621000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:43:28.622253 systemd[1]: ignition-quench.service: Deactivated successfully. Jul 10 00:43:28.622330 systemd[1]: Finished ignition-quench.service. Jul 10 00:43:28.627478 kernel: audit: type=1130 audit(1752108208.621:35): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:43:28.627498 kernel: audit: type=1130 audit(1752108208.626:36): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:43:28.626000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:43:28.627607 systemd[1]: Reached target ignition-complete.target. Jul 10 00:43:28.634501 kernel: audit: type=1131 audit(1752108208.626:37): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:43:28.626000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:43:28.635249 systemd[1]: Starting initrd-parse-etc.service... Jul 10 00:43:28.652462 systemd[1]: initrd-parse-etc.service: Deactivated successfully. Jul 10 00:43:28.653500 systemd[1]: Finished initrd-parse-etc.service. Jul 10 00:43:28.654000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:43:28.655147 systemd[1]: Reached target initrd-fs.target. Jul 10 00:43:28.662076 kernel: audit: type=1130 audit(1752108208.654:38): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:43:28.662092 kernel: audit: type=1131 audit(1752108208.654:39): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:43:28.654000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:43:28.662095 systemd[1]: Reached target initrd.target. Jul 10 00:43:28.663600 systemd[1]: dracut-mount.service was skipped because no trigger condition checks were met. Jul 10 00:43:28.665631 systemd[1]: Starting dracut-pre-pivot.service... Jul 10 00:43:28.677903 systemd[1]: Finished dracut-pre-pivot.service. Jul 10 00:43:28.679000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:43:28.680133 systemd[1]: Starting initrd-cleanup.service... Jul 10 00:43:28.683634 kernel: audit: type=1130 audit(1752108208.679:40): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:43:28.690007 systemd[1]: Stopped target nss-lookup.target. Jul 10 00:43:28.691565 systemd[1]: Stopped target remote-cryptsetup.target. Jul 10 00:43:28.693300 systemd[1]: Stopped target timers.target. Jul 10 00:43:28.694738 systemd[1]: dracut-pre-pivot.service: Deactivated successfully. Jul 10 00:43:28.695689 systemd[1]: Stopped dracut-pre-pivot.service. Jul 10 00:43:28.697000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:43:28.697402 systemd[1]: Stopped target initrd.target. Jul 10 00:43:28.701484 kernel: audit: type=1131 audit(1752108208.697:41): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:43:28.701577 systemd[1]: Stopped target basic.target. Jul 10 00:43:28.703049 systemd[1]: Stopped target ignition-complete.target. Jul 10 00:43:28.704765 systemd[1]: Stopped target ignition-diskful.target. Jul 10 00:43:28.706458 systemd[1]: Stopped target initrd-root-device.target. Jul 10 00:43:28.708194 systemd[1]: Stopped target remote-fs.target. Jul 10 00:43:28.709710 systemd[1]: Stopped target remote-fs-pre.target. Jul 10 00:43:28.711334 systemd[1]: Stopped target sysinit.target. Jul 10 00:43:28.712791 systemd[1]: Stopped target local-fs.target. Jul 10 00:43:28.714295 systemd[1]: Stopped target local-fs-pre.target. Jul 10 00:43:28.715886 systemd[1]: Stopped target swap.target. Jul 10 00:43:28.717257 systemd[1]: dracut-pre-mount.service: Deactivated successfully. Jul 10 00:43:28.717349 systemd[1]: Stopped dracut-pre-mount.service. Jul 10 00:43:28.718000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:43:28.719795 systemd[1]: Stopped target cryptsetup.target. Jul 10 00:43:28.724044 kernel: audit: type=1131 audit(1752108208.718:42): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:43:28.723959 systemd[1]: dracut-initqueue.service: Deactivated successfully. Jul 10 00:43:28.724046 systemd[1]: Stopped dracut-initqueue.service. Jul 10 00:43:28.725000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:43:28.726468 systemd[1]: ignition-fetch-offline.service: Deactivated successfully. Jul 10 00:43:28.730083 kernel: audit: type=1131 audit(1752108208.725:43): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:43:28.726560 systemd[1]: Stopped ignition-fetch-offline.service. Jul 10 00:43:28.730000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:43:28.731779 systemd[1]: Stopped target paths.target. Jul 10 00:43:28.733194 systemd[1]: systemd-ask-password-console.path: Deactivated successfully. Jul 10 00:43:28.734271 systemd[1]: Stopped systemd-ask-password-console.path. Jul 10 00:43:28.736120 systemd[1]: Stopped target slices.target. Jul 10 00:43:28.737592 systemd[1]: Stopped target sockets.target. Jul 10 00:43:28.739104 systemd[1]: initrd-setup-root-after-ignition.service: Deactivated successfully. Jul 10 00:43:28.740233 systemd[1]: Stopped initrd-setup-root-after-ignition.service. Jul 10 00:43:28.742000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:43:28.742215 systemd[1]: ignition-files.service: Deactivated successfully. Jul 10 00:43:28.743151 systemd[1]: Stopped ignition-files.service. Jul 10 00:43:28.743000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:43:28.745538 systemd[1]: Stopping ignition-mount.service... Jul 10 00:43:28.747106 systemd[1]: Stopping iscsid.service... Jul 10 00:43:28.748379 iscsid[723]: iscsid shutting down. Jul 10 00:43:28.749914 systemd[1]: Stopping sysroot-boot.service... Jul 10 00:43:28.751333 systemd[1]: systemd-udev-trigger.service: Deactivated successfully. Jul 10 00:43:28.752449 systemd[1]: Stopped systemd-udev-trigger.service. Jul 10 00:43:28.754000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:43:28.754220 systemd[1]: dracut-pre-trigger.service: Deactivated successfully. Jul 10 00:43:28.755248 ignition[875]: INFO : Ignition 2.14.0 Jul 10 00:43:28.755248 ignition[875]: INFO : Stage: umount Jul 10 00:43:28.755248 ignition[875]: INFO : no configs at "/usr/lib/ignition/base.d" Jul 10 00:43:28.755248 ignition[875]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Jul 10 00:43:28.756000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:43:28.759716 ignition[875]: INFO : umount: umount passed Jul 10 00:43:28.759716 ignition[875]: INFO : Ignition finished successfully Jul 10 00:43:28.755283 systemd[1]: Stopped dracut-pre-trigger.service. Jul 10 00:43:28.763343 systemd[1]: iscsid.service: Deactivated successfully. Jul 10 00:43:28.764240 systemd[1]: Stopped iscsid.service. Jul 10 00:43:28.764000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:43:28.766003 systemd[1]: ignition-mount.service: Deactivated successfully. Jul 10 00:43:28.766976 systemd[1]: Stopped ignition-mount.service. Jul 10 00:43:28.768000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:43:28.769937 systemd[1]: sysroot-boot.mount: Deactivated successfully. Jul 10 00:43:28.771290 systemd[1]: iscsid.socket: Deactivated successfully. Jul 10 00:43:28.771365 systemd[1]: Closed iscsid.socket. Jul 10 00:43:28.773000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:43:28.773057 systemd[1]: ignition-disks.service: Deactivated successfully. Jul 10 00:43:28.773097 systemd[1]: Stopped ignition-disks.service. Jul 10 00:43:28.776000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:43:28.774677 systemd[1]: ignition-kargs.service: Deactivated successfully. Jul 10 00:43:28.774711 systemd[1]: Stopped ignition-kargs.service. Jul 10 00:43:28.778000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:43:28.776541 systemd[1]: ignition-setup.service: Deactivated successfully. Jul 10 00:43:28.777313 systemd[1]: Stopped ignition-setup.service. Jul 10 00:43:28.779930 systemd[1]: Stopping iscsiuio.service... Jul 10 00:43:28.827669 systemd[1]: iscsiuio.service: Deactivated successfully. Jul 10 00:43:28.828611 systemd[1]: Stopped iscsiuio.service. Jul 10 00:43:28.829000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:43:28.830306 systemd[1]: initrd-cleanup.service: Deactivated successfully. Jul 10 00:43:28.831296 systemd[1]: Finished initrd-cleanup.service. Jul 10 00:43:28.831000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:43:28.831000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:43:28.833503 systemd[1]: Stopped target network.target. Jul 10 00:43:28.835019 systemd[1]: iscsiuio.socket: Deactivated successfully. Jul 10 00:43:28.835053 systemd[1]: Closed iscsiuio.socket. Jul 10 00:43:28.837251 systemd[1]: Stopping systemd-networkd.service... Jul 10 00:43:28.838892 systemd[1]: Stopping systemd-resolved.service... Jul 10 00:43:28.841901 systemd-networkd[717]: eth0: DHCPv6 lease lost Jul 10 00:43:28.843218 systemd[1]: systemd-networkd.service: Deactivated successfully. Jul 10 00:43:28.844380 systemd[1]: Stopped systemd-networkd.service. Jul 10 00:43:28.845000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:43:28.846577 systemd[1]: systemd-networkd.socket: Deactivated successfully. Jul 10 00:43:28.846611 systemd[1]: Closed systemd-networkd.socket. Jul 10 00:43:28.849635 systemd[1]: Stopping network-cleanup.service... Jul 10 00:43:28.851235 systemd[1]: parse-ip-for-networkd.service: Deactivated successfully. Jul 10 00:43:28.851283 systemd[1]: Stopped parse-ip-for-networkd.service. Jul 10 00:43:28.852000 audit: BPF prog-id=9 op=UNLOAD Jul 10 00:43:28.852000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:43:28.853827 systemd[1]: systemd-sysctl.service: Deactivated successfully. Jul 10 00:43:28.853887 systemd[1]: Stopped systemd-sysctl.service. Jul 10 00:43:28.856000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:43:28.856315 systemd[1]: systemd-modules-load.service: Deactivated successfully. Jul 10 00:43:28.856360 systemd[1]: Stopped systemd-modules-load.service. Jul 10 00:43:28.858000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:43:28.858988 systemd[1]: Stopping systemd-udevd.service... Jul 10 00:43:28.862189 systemd[1]: run-credentials-systemd\x2dsysctl.service.mount: Deactivated successfully. Jul 10 00:43:28.886765 systemd[1]: systemd-resolved.service: Deactivated successfully. Jul 10 00:43:28.887765 systemd[1]: Stopped systemd-resolved.service. Jul 10 00:43:28.889000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:43:28.890100 systemd[1]: systemd-udevd.service: Deactivated successfully. Jul 10 00:43:28.891103 systemd[1]: Stopped systemd-udevd.service. Jul 10 00:43:28.891000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:43:28.892000 audit: BPF prog-id=6 op=UNLOAD Jul 10 00:43:28.893754 systemd[1]: systemd-udevd-control.socket: Deactivated successfully. Jul 10 00:43:28.893797 systemd[1]: Closed systemd-udevd-control.socket. Jul 10 00:43:28.896373 systemd[1]: systemd-udevd-kernel.socket: Deactivated successfully. Jul 10 00:43:28.896405 systemd[1]: Closed systemd-udevd-kernel.socket. Jul 10 00:43:28.898762 systemd[1]: dracut-pre-udev.service: Deactivated successfully. Jul 10 00:43:28.898804 systemd[1]: Stopped dracut-pre-udev.service. Jul 10 00:43:28.901000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:43:28.901256 systemd[1]: dracut-cmdline.service: Deactivated successfully. Jul 10 00:43:28.901306 systemd[1]: Stopped dracut-cmdline.service. Jul 10 00:43:28.912000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:43:28.912134 systemd[1]: dracut-cmdline-ask.service: Deactivated successfully. Jul 10 00:43:28.912168 systemd[1]: Stopped dracut-cmdline-ask.service. Jul 10 00:43:28.913000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:43:28.915229 systemd[1]: Starting initrd-udevadm-cleanup-db.service... Jul 10 00:43:28.916905 systemd[1]: systemd-tmpfiles-setup-dev.service: Deactivated successfully. Jul 10 00:43:28.916953 systemd[1]: Stopped systemd-tmpfiles-setup-dev.service. Jul 10 00:43:28.919000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:43:28.919739 systemd[1]: kmod-static-nodes.service: Deactivated successfully. Jul 10 00:43:28.919790 systemd[1]: Stopped kmod-static-nodes.service. Jul 10 00:43:28.922000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:43:28.922223 systemd[1]: systemd-vconsole-setup.service: Deactivated successfully. Jul 10 00:43:28.922257 systemd[1]: Stopped systemd-vconsole-setup.service. Jul 10 00:43:28.923000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:43:28.925467 systemd[1]: run-credentials-systemd\x2dtmpfiles\x2dsetup\x2ddev.service.mount: Deactivated successfully. Jul 10 00:43:28.927224 systemd[1]: network-cleanup.service: Deactivated successfully. Jul 10 00:43:28.928199 systemd[1]: Stopped network-cleanup.service. Jul 10 00:43:28.928000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=network-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:43:28.929897 systemd[1]: initrd-udevadm-cleanup-db.service: Deactivated successfully. Jul 10 00:43:28.930971 systemd[1]: Finished initrd-udevadm-cleanup-db.service. Jul 10 00:43:28.931000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:43:28.931000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:43:28.959645 systemd[1]: sysroot-boot.service: Deactivated successfully. Jul 10 00:43:28.959000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:43:28.959722 systemd[1]: Stopped sysroot-boot.service. Jul 10 00:43:28.961482 systemd[1]: Reached target initrd-switch-root.target. Jul 10 00:43:28.963027 systemd[1]: initrd-setup-root.service: Deactivated successfully. Jul 10 00:43:28.963072 systemd[1]: Stopped initrd-setup-root.service. Jul 10 00:43:28.965000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:43:28.966686 systemd[1]: Starting initrd-switch-root.service... Jul 10 00:43:28.983898 systemd[1]: Switching root. Jul 10 00:43:29.004025 systemd-journald[198]: Journal stopped Jul 10 00:43:33.167694 systemd-journald[198]: Received SIGTERM from PID 1 (systemd). Jul 10 00:43:33.167767 kernel: SELinux: Class mctp_socket not defined in policy. Jul 10 00:43:33.167783 kernel: SELinux: Class anon_inode not defined in policy. Jul 10 00:43:33.167910 kernel: SELinux: the above unknown classes and permissions will be allowed Jul 10 00:43:33.167926 kernel: SELinux: policy capability network_peer_controls=1 Jul 10 00:43:33.167939 kernel: SELinux: policy capability open_perms=1 Jul 10 00:43:33.167949 kernel: SELinux: policy capability extended_socket_class=1 Jul 10 00:43:33.167961 kernel: SELinux: policy capability always_check_network=0 Jul 10 00:43:33.167971 kernel: SELinux: policy capability cgroup_seclabel=1 Jul 10 00:43:33.167983 kernel: SELinux: policy capability nnp_nosuid_transition=1 Jul 10 00:43:33.167995 kernel: SELinux: policy capability genfs_seclabel_symlinks=0 Jul 10 00:43:33.168004 kernel: SELinux: policy capability ioctl_skip_cloexec=0 Jul 10 00:43:33.168014 systemd[1]: Successfully loaded SELinux policy in 44.641ms. Jul 10 00:43:33.168041 systemd[1]: Relabelled /dev, /dev/shm, /run, /sys/fs/cgroup in 7.050ms. Jul 10 00:43:33.168053 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Jul 10 00:43:33.168063 systemd[1]: Detected virtualization kvm. Jul 10 00:43:33.168073 systemd[1]: Detected architecture x86-64. Jul 10 00:43:33.168084 systemd[1]: Detected first boot. Jul 10 00:43:33.168094 systemd[1]: Initializing machine ID from VM UUID. Jul 10 00:43:33.168107 kernel: SELinux: Context system_u:object_r:container_file_t:s0:c1022,c1023 is not valid (left unmapped). Jul 10 00:43:33.168117 systemd[1]: Populated /etc with preset unit settings. Jul 10 00:43:33.168133 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Jul 10 00:43:33.168148 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Jul 10 00:43:33.168162 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Jul 10 00:43:33.168180 systemd[1]: initrd-switch-root.service: Deactivated successfully. Jul 10 00:43:33.168195 systemd[1]: Stopped initrd-switch-root.service. Jul 10 00:43:33.168205 systemd[1]: systemd-journald.service: Scheduled restart job, restart counter is at 1. Jul 10 00:43:33.168216 systemd[1]: Created slice system-addon\x2dconfig.slice. Jul 10 00:43:33.168226 systemd[1]: Created slice system-addon\x2drun.slice. Jul 10 00:43:33.168241 systemd[1]: Created slice system-getty.slice. Jul 10 00:43:33.168251 systemd[1]: Created slice system-modprobe.slice. Jul 10 00:43:33.168261 systemd[1]: Created slice system-serial\x2dgetty.slice. Jul 10 00:43:33.168272 systemd[1]: Created slice system-system\x2dcloudinit.slice. Jul 10 00:43:33.168282 systemd[1]: Created slice system-systemd\x2dfsck.slice. Jul 10 00:43:33.168296 systemd[1]: Created slice user.slice. Jul 10 00:43:33.168309 systemd[1]: Started systemd-ask-password-console.path. Jul 10 00:43:33.168319 systemd[1]: Started systemd-ask-password-wall.path. Jul 10 00:43:33.168330 systemd[1]: Set up automount boot.automount. Jul 10 00:43:33.168340 systemd[1]: Set up automount proc-sys-fs-binfmt_misc.automount. Jul 10 00:43:33.168355 systemd[1]: Stopped target initrd-switch-root.target. Jul 10 00:43:33.168372 systemd[1]: Stopped target initrd-fs.target. Jul 10 00:43:33.168382 systemd[1]: Stopped target initrd-root-fs.target. Jul 10 00:43:33.168398 systemd[1]: Reached target integritysetup.target. Jul 10 00:43:33.168408 systemd[1]: Reached target remote-cryptsetup.target. Jul 10 00:43:33.168418 systemd[1]: Reached target remote-fs.target. Jul 10 00:43:33.168430 systemd[1]: Reached target slices.target. Jul 10 00:43:33.168440 systemd[1]: Reached target swap.target. Jul 10 00:43:33.168450 systemd[1]: Reached target torcx.target. Jul 10 00:43:33.168460 systemd[1]: Reached target veritysetup.target. Jul 10 00:43:33.168470 systemd[1]: Listening on systemd-coredump.socket. Jul 10 00:43:33.168480 systemd[1]: Listening on systemd-initctl.socket. Jul 10 00:43:33.168495 systemd[1]: Listening on systemd-networkd.socket. Jul 10 00:43:33.168505 systemd[1]: Listening on systemd-udevd-control.socket. Jul 10 00:43:33.168516 systemd[1]: Listening on systemd-udevd-kernel.socket. Jul 10 00:43:33.168526 systemd[1]: Listening on systemd-userdbd.socket. Jul 10 00:43:33.168536 systemd[1]: Mounting dev-hugepages.mount... Jul 10 00:43:33.168546 systemd[1]: Mounting dev-mqueue.mount... Jul 10 00:43:33.168556 systemd[1]: Mounting media.mount... Jul 10 00:43:33.168567 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 10 00:43:33.168577 systemd[1]: Mounting sys-kernel-debug.mount... Jul 10 00:43:33.168587 systemd[1]: Mounting sys-kernel-tracing.mount... Jul 10 00:43:33.168602 systemd[1]: Mounting tmp.mount... Jul 10 00:43:33.168612 systemd[1]: Starting flatcar-tmpfiles.service... Jul 10 00:43:33.168622 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Jul 10 00:43:33.168633 systemd[1]: Starting kmod-static-nodes.service... Jul 10 00:43:33.168643 systemd[1]: Starting modprobe@configfs.service... Jul 10 00:43:33.168654 systemd[1]: Starting modprobe@dm_mod.service... Jul 10 00:43:33.168664 systemd[1]: Starting modprobe@drm.service... Jul 10 00:43:33.168674 systemd[1]: Starting modprobe@efi_pstore.service... Jul 10 00:43:33.168685 systemd[1]: Starting modprobe@fuse.service... Jul 10 00:43:33.168699 systemd[1]: Starting modprobe@loop.service... Jul 10 00:43:33.168710 systemd[1]: setup-nsswitch.service was skipped because of an unmet condition check (ConditionPathExists=!/etc/nsswitch.conf). Jul 10 00:43:33.168721 systemd[1]: systemd-fsck-root.service: Deactivated successfully. Jul 10 00:43:33.168731 systemd[1]: Stopped systemd-fsck-root.service. Jul 10 00:43:33.168749 systemd[1]: systemd-fsck-usr.service: Deactivated successfully. Jul 10 00:43:33.168759 systemd[1]: Stopped systemd-fsck-usr.service. Jul 10 00:43:33.168769 systemd[1]: Stopped systemd-journald.service. Jul 10 00:43:33.168779 kernel: loop: module loaded Jul 10 00:43:33.168790 systemd[1]: Starting systemd-journald.service... Jul 10 00:43:33.168805 kernel: fuse: init (API version 7.34) Jul 10 00:43:33.168815 systemd[1]: Starting systemd-modules-load.service... Jul 10 00:43:33.168825 systemd[1]: Starting systemd-network-generator.service... Jul 10 00:43:33.168836 systemd[1]: Starting systemd-remount-fs.service... Jul 10 00:43:33.168859 systemd[1]: Starting systemd-udev-trigger.service... Jul 10 00:43:33.168870 systemd[1]: verity-setup.service: Deactivated successfully. Jul 10 00:43:33.168880 systemd[1]: Stopped verity-setup.service. Jul 10 00:43:33.168891 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 10 00:43:33.168918 systemd-journald[986]: Journal started Jul 10 00:43:33.168971 systemd-journald[986]: Runtime Journal (/run/log/journal/084d9d55429c42dd8f57e57782fc9740) is 6.0M, max 48.5M, 42.5M free. Jul 10 00:43:29.075000 audit: MAC_POLICY_LOAD auid=4294967295 ses=4294967295 lsm=selinux res=1 Jul 10 00:43:29.404000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Jul 10 00:43:29.404000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Jul 10 00:43:29.404000 audit: BPF prog-id=10 op=LOAD Jul 10 00:43:29.404000 audit: BPF prog-id=10 op=UNLOAD Jul 10 00:43:29.404000 audit: BPF prog-id=11 op=LOAD Jul 10 00:43:29.404000 audit: BPF prog-id=11 op=UNLOAD Jul 10 00:43:29.444000 audit[909]: AVC avc: denied { associate } for pid=909 comm="torcx-generator" name="docker" dev="tmpfs" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:object_r:container_file_t:s0:c1022,c1023" Jul 10 00:43:29.444000 audit[909]: SYSCALL arch=c000003e syscall=188 success=yes exit=0 a0=c0001858cc a1=c00002ae40 a2=c000029100 a3=32 items=0 ppid=892 pid=909 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:43:29.444000 audit: PROCTITLE proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Jul 10 00:43:29.445000 audit[909]: AVC avc: denied { associate } for pid=909 comm="torcx-generator" name="lib" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 Jul 10 00:43:29.445000 audit[909]: SYSCALL arch=c000003e syscall=258 success=yes exit=0 a0=ffffffffffffff9c a1=c0001859a5 a2=1ed a3=0 items=2 ppid=892 pid=909 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:43:29.445000 audit: CWD cwd="/" Jul 10 00:43:29.445000 audit: PATH item=0 name=(null) inode=2 dev=00:1b mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:43:29.445000 audit: PATH item=1 name=(null) inode=3 dev=00:1b mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:43:29.445000 audit: PROCTITLE proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Jul 10 00:43:33.029000 audit: BPF prog-id=12 op=LOAD Jul 10 00:43:33.029000 audit: BPF prog-id=3 op=UNLOAD Jul 10 00:43:33.029000 audit: BPF prog-id=13 op=LOAD Jul 10 00:43:33.029000 audit: BPF prog-id=14 op=LOAD Jul 10 00:43:33.029000 audit: BPF prog-id=4 op=UNLOAD Jul 10 00:43:33.029000 audit: BPF prog-id=5 op=UNLOAD Jul 10 00:43:33.030000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:43:33.038000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:43:33.038000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:43:33.044000 audit: BPF prog-id=12 op=UNLOAD Jul 10 00:43:33.137000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:43:33.140000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:43:33.142000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:43:33.142000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:43:33.143000 audit: BPF prog-id=15 op=LOAD Jul 10 00:43:33.143000 audit: BPF prog-id=16 op=LOAD Jul 10 00:43:33.143000 audit: BPF prog-id=17 op=LOAD Jul 10 00:43:33.143000 audit: BPF prog-id=13 op=UNLOAD Jul 10 00:43:33.143000 audit: BPF prog-id=14 op=UNLOAD Jul 10 00:43:33.163000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:43:33.163000 audit: CONFIG_CHANGE op=set audit_enabled=1 old=1 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 res=1 Jul 10 00:43:33.163000 audit[986]: SYSCALL arch=c000003e syscall=46 success=yes exit=60 a0=3 a1=7ffc186e1920 a2=4000 a3=7ffc186e19bc items=0 ppid=1 pid=986 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-journal" exe="/usr/lib/systemd/systemd-journald" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:43:33.163000 audit: PROCTITLE proctitle="/usr/lib/systemd/systemd-journald" Jul 10 00:43:33.028294 systemd[1]: Queued start job for default target multi-user.target. Jul 10 00:43:29.443423 /usr/lib/systemd/system-generators/torcx-generator[909]: time="2025-07-10T00:43:29Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.7 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.7 /var/lib/torcx/store]" Jul 10 00:43:33.028306 systemd[1]: Unnecessary job was removed for dev-vda6.device. Jul 10 00:43:29.443715 /usr/lib/systemd/system-generators/torcx-generator[909]: time="2025-07-10T00:43:29Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Jul 10 00:43:33.031448 systemd[1]: systemd-journald.service: Deactivated successfully. Jul 10 00:43:29.443736 /usr/lib/systemd/system-generators/torcx-generator[909]: time="2025-07-10T00:43:29Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Jul 10 00:43:29.443767 /usr/lib/systemd/system-generators/torcx-generator[909]: time="2025-07-10T00:43:29Z" level=info msg="no vendor profile selected by /etc/flatcar/docker-1.12" Jul 10 00:43:29.443776 /usr/lib/systemd/system-generators/torcx-generator[909]: time="2025-07-10T00:43:29Z" level=debug msg="skipped missing lower profile" missing profile=oem Jul 10 00:43:29.443811 /usr/lib/systemd/system-generators/torcx-generator[909]: time="2025-07-10T00:43:29Z" level=warning msg="no next profile: unable to read profile file: open /etc/torcx/next-profile: no such file or directory" Jul 10 00:43:29.443822 /usr/lib/systemd/system-generators/torcx-generator[909]: time="2025-07-10T00:43:29Z" level=debug msg="apply configuration parsed" lower profiles (vendor/oem)="[vendor]" upper profile (user)= Jul 10 00:43:29.444063 /usr/lib/systemd/system-generators/torcx-generator[909]: time="2025-07-10T00:43:29Z" level=debug msg="mounted tmpfs" target=/run/torcx/unpack Jul 10 00:43:33.170861 systemd[1]: Mounted dev-hugepages.mount. Jul 10 00:43:29.444102 /usr/lib/systemd/system-generators/torcx-generator[909]: time="2025-07-10T00:43:29Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Jul 10 00:43:29.444115 /usr/lib/systemd/system-generators/torcx-generator[909]: time="2025-07-10T00:43:29Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Jul 10 00:43:29.444733 /usr/lib/systemd/system-generators/torcx-generator[909]: time="2025-07-10T00:43:29Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:20.10.torcx.tgz" reference=20.10 Jul 10 00:43:29.444766 /usr/lib/systemd/system-generators/torcx-generator[909]: time="2025-07-10T00:43:29Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:com.coreos.cl.torcx.tgz" reference=com.coreos.cl Jul 10 00:43:29.444783 /usr/lib/systemd/system-generators/torcx-generator[909]: time="2025-07-10T00:43:29Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store/3510.3.7: no such file or directory" path=/usr/share/oem/torcx/store/3510.3.7 Jul 10 00:43:29.444797 /usr/lib/systemd/system-generators/torcx-generator[909]: time="2025-07-10T00:43:29Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store: no such file or directory" path=/usr/share/oem/torcx/store Jul 10 00:43:29.444814 /usr/lib/systemd/system-generators/torcx-generator[909]: time="2025-07-10T00:43:29Z" level=info msg="store skipped" err="open /var/lib/torcx/store/3510.3.7: no such file or directory" path=/var/lib/torcx/store/3510.3.7 Jul 10 00:43:29.444827 /usr/lib/systemd/system-generators/torcx-generator[909]: time="2025-07-10T00:43:29Z" level=info msg="store skipped" err="open /var/lib/torcx/store: no such file or directory" path=/var/lib/torcx/store Jul 10 00:43:32.682530 /usr/lib/systemd/system-generators/torcx-generator[909]: time="2025-07-10T00:43:32Z" level=debug msg="image unpacked" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Jul 10 00:43:32.682884 /usr/lib/systemd/system-generators/torcx-generator[909]: time="2025-07-10T00:43:32Z" level=debug msg="binaries propagated" assets="[/bin/containerd /bin/containerd-shim /bin/ctr /bin/docker /bin/docker-containerd /bin/docker-containerd-shim /bin/docker-init /bin/docker-proxy /bin/docker-runc /bin/dockerd /bin/runc /bin/tini]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Jul 10 00:43:32.683045 /usr/lib/systemd/system-generators/torcx-generator[909]: time="2025-07-10T00:43:32Z" level=debug msg="networkd units propagated" assets="[/lib/systemd/network/50-docker.network /lib/systemd/network/90-docker-veth.network]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Jul 10 00:43:32.683274 /usr/lib/systemd/system-generators/torcx-generator[909]: time="2025-07-10T00:43:32Z" level=debug msg="systemd units propagated" assets="[/lib/systemd/system/containerd.service /lib/systemd/system/docker.service /lib/systemd/system/docker.socket /lib/systemd/system/sockets.target.wants /lib/systemd/system/multi-user.target.wants]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Jul 10 00:43:32.683344 /usr/lib/systemd/system-generators/torcx-generator[909]: time="2025-07-10T00:43:32Z" level=debug msg="profile applied" sealed profile=/run/torcx/profile.json upper profile= Jul 10 00:43:32.683437 /usr/lib/systemd/system-generators/torcx-generator[909]: time="2025-07-10T00:43:32Z" level=debug msg="system state sealed" content="[TORCX_LOWER_PROFILES=\"vendor\" TORCX_UPPER_PROFILE=\"\" TORCX_PROFILE_PATH=\"/run/torcx/profile.json\" TORCX_BINDIR=\"/run/torcx/bin\" TORCX_UNPACKDIR=\"/run/torcx/unpack\"]" path=/run/metadata/torcx Jul 10 00:43:33.172864 systemd[1]: Started systemd-journald.service. Jul 10 00:43:33.172000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:43:33.173650 systemd[1]: Mounted dev-mqueue.mount. Jul 10 00:43:33.174554 systemd[1]: Mounted media.mount. Jul 10 00:43:33.175390 systemd[1]: Mounted sys-kernel-debug.mount. Jul 10 00:43:33.176367 systemd[1]: Mounted sys-kernel-tracing.mount. Jul 10 00:43:33.251673 systemd[1]: Mounted tmp.mount. Jul 10 00:43:33.252809 systemd[1]: Finished flatcar-tmpfiles.service. Jul 10 00:43:33.253000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=flatcar-tmpfiles comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:43:33.254138 systemd[1]: Finished kmod-static-nodes.service. Jul 10 00:43:33.254000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:43:33.255316 systemd[1]: modprobe@configfs.service: Deactivated successfully. Jul 10 00:43:33.255505 systemd[1]: Finished modprobe@configfs.service. Jul 10 00:43:33.255000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:43:33.255000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:43:33.256779 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Jul 10 00:43:33.256993 systemd[1]: Finished modprobe@dm_mod.service. Jul 10 00:43:33.257000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:43:33.257000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:43:33.258301 systemd[1]: modprobe@drm.service: Deactivated successfully. Jul 10 00:43:33.258488 systemd[1]: Finished modprobe@drm.service. Jul 10 00:43:33.258000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:43:33.258000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:43:33.259585 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Jul 10 00:43:33.259797 systemd[1]: Finished modprobe@efi_pstore.service. Jul 10 00:43:33.259000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:43:33.259000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:43:33.260923 systemd[1]: modprobe@fuse.service: Deactivated successfully. Jul 10 00:43:33.261126 systemd[1]: Finished modprobe@fuse.service. Jul 10 00:43:33.261000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:43:33.261000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:43:33.262359 systemd[1]: modprobe@loop.service: Deactivated successfully. Jul 10 00:43:33.262581 systemd[1]: Finished modprobe@loop.service. Jul 10 00:43:33.263000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:43:33.263000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:43:33.263859 systemd[1]: Finished systemd-modules-load.service. Jul 10 00:43:33.263000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:43:33.265193 systemd[1]: Finished systemd-network-generator.service. Jul 10 00:43:33.265000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-network-generator comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:43:33.266590 systemd[1]: Finished systemd-remount-fs.service. Jul 10 00:43:33.266000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-remount-fs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:43:33.268317 systemd[1]: Reached target network-pre.target. Jul 10 00:43:33.271048 systemd[1]: Mounting sys-fs-fuse-connections.mount... Jul 10 00:43:33.273284 systemd[1]: Mounting sys-kernel-config.mount... Jul 10 00:43:33.305489 systemd[1]: remount-root.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/). Jul 10 00:43:33.307475 systemd[1]: Starting systemd-hwdb-update.service... Jul 10 00:43:33.309890 systemd[1]: Starting systemd-journal-flush.service... Jul 10 00:43:33.310932 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Jul 10 00:43:33.312366 systemd[1]: Starting systemd-random-seed.service... Jul 10 00:43:33.315209 systemd-journald[986]: Time spent on flushing to /var/log/journal/084d9d55429c42dd8f57e57782fc9740 is 23.198ms for 1091 entries. Jul 10 00:43:33.315209 systemd-journald[986]: System Journal (/var/log/journal/084d9d55429c42dd8f57e57782fc9740) is 8.0M, max 195.6M, 187.6M free. Jul 10 00:43:33.612116 systemd-journald[986]: Received client request to flush runtime journal. Jul 10 00:43:33.459000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-random-seed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:43:33.461000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:43:33.472000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:43:33.611000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysusers comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:43:33.613313 kernel: kauditd_printk_skb: 92 callbacks suppressed Jul 10 00:43:33.613362 kernel: audit: type=1130 audit(1752108213.611:127): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysusers comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:43:33.317013 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Jul 10 00:43:33.318403 systemd[1]: Starting systemd-sysctl.service... Jul 10 00:43:33.436918 systemd[1]: Starting systemd-sysusers.service... Jul 10 00:43:33.614075 udevadm[1014]: systemd-udev-settle.service is deprecated. Please fix lvm2-activation.service, lvm2-activation-early.service not to pull it in. Jul 10 00:43:33.443067 systemd[1]: Mounted sys-fs-fuse-connections.mount. Jul 10 00:43:33.444475 systemd[1]: Mounted sys-kernel-config.mount. Jul 10 00:43:33.459021 systemd[1]: Finished systemd-random-seed.service. Jul 10 00:43:33.460877 systemd[1]: Finished systemd-sysctl.service. Jul 10 00:43:33.462309 systemd[1]: Reached target first-boot-complete.target. Jul 10 00:43:33.472311 systemd[1]: Finished systemd-udev-trigger.service. Jul 10 00:43:33.474892 systemd[1]: Starting systemd-udev-settle.service... Jul 10 00:43:33.611317 systemd[1]: Finished systemd-sysusers.service. Jul 10 00:43:33.613688 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Jul 10 00:43:33.624869 kernel: audit: type=1130 audit(1752108213.619:128): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-flush comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:43:33.619000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-flush comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:43:33.619195 systemd[1]: Finished systemd-journal-flush.service. Jul 10 00:43:33.635148 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Jul 10 00:43:33.635000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:43:33.640921 kernel: audit: type=1130 audit(1752108213.635:129): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:43:34.284594 systemd[1]: Finished systemd-hwdb-update.service. Jul 10 00:43:34.284000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hwdb-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:43:34.287000 audit: BPF prog-id=18 op=LOAD Jul 10 00:43:34.289598 kernel: audit: type=1130 audit(1752108214.284:130): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hwdb-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:43:34.289658 kernel: audit: type=1334 audit(1752108214.287:131): prog-id=18 op=LOAD Jul 10 00:43:34.289676 kernel: audit: type=1334 audit(1752108214.288:132): prog-id=19 op=LOAD Jul 10 00:43:34.288000 audit: BPF prog-id=19 op=LOAD Jul 10 00:43:34.290428 systemd[1]: Starting systemd-udevd.service... Jul 10 00:43:34.288000 audit: BPF prog-id=7 op=UNLOAD Jul 10 00:43:34.288000 audit: BPF prog-id=8 op=UNLOAD Jul 10 00:43:34.290863 kernel: audit: type=1334 audit(1752108214.288:133): prog-id=7 op=UNLOAD Jul 10 00:43:34.290889 kernel: audit: type=1334 audit(1752108214.288:134): prog-id=8 op=UNLOAD Jul 10 00:43:34.311982 systemd-udevd[1017]: Using default interface naming scheme 'v252'. Jul 10 00:43:34.329186 systemd[1]: Started systemd-udevd.service. Jul 10 00:43:34.329000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:43:34.334864 kernel: audit: type=1130 audit(1752108214.329:135): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:43:34.335000 audit: BPF prog-id=20 op=LOAD Jul 10 00:43:34.337425 systemd[1]: Starting systemd-networkd.service... Jul 10 00:43:34.340334 kernel: audit: type=1334 audit(1752108214.335:136): prog-id=20 op=LOAD Jul 10 00:43:34.344000 audit: BPF prog-id=21 op=LOAD Jul 10 00:43:34.345000 audit: BPF prog-id=22 op=LOAD Jul 10 00:43:34.345000 audit: BPF prog-id=23 op=LOAD Jul 10 00:43:34.346666 systemd[1]: Starting systemd-userdbd.service... Jul 10 00:43:34.387941 systemd[1]: Condition check resulted in dev-ttyS0.device being skipped. Jul 10 00:43:34.389838 systemd[1]: Started systemd-userdbd.service. Jul 10 00:43:34.390000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-userdbd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:43:34.392639 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Jul 10 00:43:34.422902 kernel: input: Power Button as /devices/LNXSYSTM:00/LNXPWRBN:00/input/input2 Jul 10 00:43:34.428871 kernel: ACPI: button: Power Button [PWRF] Jul 10 00:43:34.436311 systemd-networkd[1027]: lo: Link UP Jul 10 00:43:34.436319 systemd-networkd[1027]: lo: Gained carrier Jul 10 00:43:34.436682 systemd-networkd[1027]: Enumeration completed Jul 10 00:43:34.436809 systemd[1]: Started systemd-networkd.service. Jul 10 00:43:34.437561 systemd-networkd[1027]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Jul 10 00:43:34.436000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:43:34.438694 systemd-networkd[1027]: eth0: Link UP Jul 10 00:43:34.438700 systemd-networkd[1027]: eth0: Gained carrier Jul 10 00:43:34.445000 audit[1018]: AVC avc: denied { confidentiality } for pid=1018 comm="(udev-worker)" lockdown_reason="use of tracefs" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=1 Jul 10 00:43:34.453970 systemd-networkd[1027]: eth0: DHCPv4 address 10.0.0.116/16, gateway 10.0.0.1 acquired from 10.0.0.1 Jul 10 00:43:34.445000 audit[1018]: SYSCALL arch=c000003e syscall=175 success=yes exit=0 a0=55971f33aa10 a1=338ac a2=7fe79f7ebbc5 a3=5 items=110 ppid=1017 pid=1018 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="(udev-worker)" exe="/usr/bin/udevadm" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:43:34.445000 audit: CWD cwd="/" Jul 10 00:43:34.445000 audit: PATH item=0 name=(null) inode=1041 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:43:34.445000 audit: PATH item=1 name=(null) inode=12028 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:43:34.445000 audit: PATH item=2 name=(null) inode=12028 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:43:34.445000 audit: PATH item=3 name=(null) inode=12029 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:43:34.445000 audit: PATH item=4 name=(null) inode=12028 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:43:34.445000 audit: PATH item=5 name=(null) inode=12030 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:43:34.445000 audit: PATH item=6 name=(null) inode=12028 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:43:34.445000 audit: PATH item=7 name=(null) inode=12031 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:43:34.445000 audit: PATH item=8 name=(null) inode=12031 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:43:34.445000 audit: PATH item=9 name=(null) inode=12032 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:43:34.445000 audit: PATH item=10 name=(null) inode=12031 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:43:34.445000 audit: PATH item=11 name=(null) inode=12033 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:43:34.445000 audit: PATH item=12 name=(null) inode=12031 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:43:34.445000 audit: PATH item=13 name=(null) inode=12034 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:43:34.445000 audit: PATH item=14 name=(null) inode=12031 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:43:34.445000 audit: PATH item=15 name=(null) inode=12035 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:43:34.445000 audit: PATH item=16 name=(null) inode=12031 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:43:34.445000 audit: PATH item=17 name=(null) inode=12036 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:43:34.445000 audit: PATH item=18 name=(null) inode=12028 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:43:34.445000 audit: PATH item=19 name=(null) inode=12037 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:43:34.445000 audit: PATH item=20 name=(null) inode=12037 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:43:34.445000 audit: PATH item=21 name=(null) inode=12038 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:43:34.445000 audit: PATH item=22 name=(null) inode=12037 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:43:34.445000 audit: PATH item=23 name=(null) inode=12039 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:43:34.445000 audit: PATH item=24 name=(null) inode=12037 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:43:34.445000 audit: PATH item=25 name=(null) inode=12040 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:43:34.445000 audit: PATH item=26 name=(null) inode=12037 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:43:34.445000 audit: PATH item=27 name=(null) inode=12041 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:43:34.445000 audit: PATH item=28 name=(null) inode=12037 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:43:34.445000 audit: PATH item=29 name=(null) inode=12042 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:43:34.445000 audit: PATH item=30 name=(null) inode=12028 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:43:34.445000 audit: PATH item=31 name=(null) inode=12043 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:43:34.445000 audit: PATH item=32 name=(null) inode=12043 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:43:34.445000 audit: PATH item=33 name=(null) inode=12044 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:43:34.445000 audit: PATH item=34 name=(null) inode=12043 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:43:34.445000 audit: PATH item=35 name=(null) inode=12045 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:43:34.445000 audit: PATH item=36 name=(null) inode=12043 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:43:34.445000 audit: PATH item=37 name=(null) inode=12046 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:43:34.445000 audit: PATH item=38 name=(null) inode=12043 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:43:34.445000 audit: PATH item=39 name=(null) inode=12047 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:43:34.445000 audit: PATH item=40 name=(null) inode=12043 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:43:34.445000 audit: PATH item=41 name=(null) inode=12048 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:43:34.445000 audit: PATH item=42 name=(null) inode=12028 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:43:34.445000 audit: PATH item=43 name=(null) inode=12049 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:43:34.445000 audit: PATH item=44 name=(null) inode=12049 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:43:34.445000 audit: PATH item=45 name=(null) inode=12050 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:43:34.445000 audit: PATH item=46 name=(null) inode=12049 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:43:34.445000 audit: PATH item=47 name=(null) inode=12051 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:43:34.445000 audit: PATH item=48 name=(null) inode=12049 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:43:34.445000 audit: PATH item=49 name=(null) inode=12052 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:43:34.445000 audit: PATH item=50 name=(null) inode=12049 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:43:34.445000 audit: PATH item=51 name=(null) inode=12053 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:43:34.445000 audit: PATH item=52 name=(null) inode=12049 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:43:34.445000 audit: PATH item=53 name=(null) inode=12054 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:43:34.445000 audit: PATH item=54 name=(null) inode=1041 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:43:34.445000 audit: PATH item=55 name=(null) inode=12055 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:43:34.445000 audit: PATH item=56 name=(null) inode=12055 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:43:34.445000 audit: PATH item=57 name=(null) inode=12056 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:43:34.445000 audit: PATH item=58 name=(null) inode=12055 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:43:34.445000 audit: PATH item=59 name=(null) inode=12057 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:43:34.445000 audit: PATH item=60 name=(null) inode=12055 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:43:34.445000 audit: PATH item=61 name=(null) inode=12058 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:43:34.445000 audit: PATH item=62 name=(null) inode=12058 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:43:34.445000 audit: PATH item=63 name=(null) inode=12059 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:43:34.445000 audit: PATH item=64 name=(null) inode=12058 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:43:34.445000 audit: PATH item=65 name=(null) inode=12060 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:43:34.445000 audit: PATH item=66 name=(null) inode=12058 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:43:34.445000 audit: PATH item=67 name=(null) inode=12061 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:43:34.445000 audit: PATH item=68 name=(null) inode=12058 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:43:34.445000 audit: PATH item=69 name=(null) inode=12062 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:43:34.445000 audit: PATH item=70 name=(null) inode=12058 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:43:34.445000 audit: PATH item=71 name=(null) inode=12063 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:43:34.445000 audit: PATH item=72 name=(null) inode=12055 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:43:34.445000 audit: PATH item=73 name=(null) inode=12064 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:43:34.445000 audit: PATH item=74 name=(null) inode=12064 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:43:34.445000 audit: PATH item=75 name=(null) inode=12065 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:43:34.445000 audit: PATH item=76 name=(null) inode=12064 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:43:34.445000 audit: PATH item=77 name=(null) inode=12066 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:43:34.445000 audit: PATH item=78 name=(null) inode=12064 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:43:34.445000 audit: PATH item=79 name=(null) inode=12067 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:43:34.445000 audit: PATH item=80 name=(null) inode=12064 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:43:34.445000 audit: PATH item=81 name=(null) inode=12068 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:43:34.445000 audit: PATH item=82 name=(null) inode=12064 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:43:34.445000 audit: PATH item=83 name=(null) inode=12069 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:43:34.445000 audit: PATH item=84 name=(null) inode=12055 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:43:34.445000 audit: PATH item=85 name=(null) inode=12070 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:43:34.445000 audit: PATH item=86 name=(null) inode=12070 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:43:34.445000 audit: PATH item=87 name=(null) inode=12071 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:43:34.445000 audit: PATH item=88 name=(null) inode=12070 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:43:34.445000 audit: PATH item=89 name=(null) inode=12072 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:43:34.445000 audit: PATH item=90 name=(null) inode=12070 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:43:34.445000 audit: PATH item=91 name=(null) inode=12073 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:43:34.445000 audit: PATH item=92 name=(null) inode=12070 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:43:34.445000 audit: PATH item=93 name=(null) inode=12074 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:43:34.445000 audit: PATH item=94 name=(null) inode=12070 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:43:34.445000 audit: PATH item=95 name=(null) inode=12075 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:43:34.445000 audit: PATH item=96 name=(null) inode=12055 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:43:34.445000 audit: PATH item=97 name=(null) inode=12076 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:43:34.445000 audit: PATH item=98 name=(null) inode=12076 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:43:34.445000 audit: PATH item=99 name=(null) inode=12077 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:43:34.445000 audit: PATH item=100 name=(null) inode=12076 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:43:34.445000 audit: PATH item=101 name=(null) inode=12078 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:43:34.445000 audit: PATH item=102 name=(null) inode=12076 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:43:34.445000 audit: PATH item=103 name=(null) inode=12079 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:43:34.445000 audit: PATH item=104 name=(null) inode=12076 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:43:34.445000 audit: PATH item=105 name=(null) inode=12080 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:43:34.445000 audit: PATH item=106 name=(null) inode=12076 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:43:34.445000 audit: PATH item=107 name=(null) inode=12081 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:43:34.445000 audit: PATH item=108 name=(null) inode=1 dev=00:07 mode=040700 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:debugfs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:43:34.445000 audit: PATH item=109 name=(null) inode=14597 dev=00:07 mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:debugfs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:43:34.445000 audit: PROCTITLE proctitle="(udev-worker)" Jul 10 00:43:34.482872 kernel: i801_smbus 0000:00:1f.3: SMBus using PCI interrupt Jul 10 00:43:34.499776 kernel: input: ImExPS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input3 Jul 10 00:43:34.499816 kernel: i2c i2c-0: 1/1 memory slots populated (from DMI) Jul 10 00:43:34.500014 kernel: i2c i2c-0: Memory type 0x07 not supported yet, not instantiating SPD Jul 10 00:43:34.501868 kernel: mousedev: PS/2 mouse device common for all mice Jul 10 00:43:34.546879 kernel: kvm: Nested Virtualization enabled Jul 10 00:43:34.547081 kernel: SVM: kvm: Nested Paging enabled Jul 10 00:43:34.547133 kernel: SVM: Virtual VMLOAD VMSAVE supported Jul 10 00:43:34.547166 kernel: SVM: Virtual GIF supported Jul 10 00:43:34.567909 kernel: EDAC MC: Ver: 3.0.0 Jul 10 00:43:34.600401 systemd[1]: Finished systemd-udev-settle.service. Jul 10 00:43:34.600000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-settle comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:43:34.602893 systemd[1]: Starting lvm2-activation-early.service... Jul 10 00:43:34.612716 lvm[1052]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Jul 10 00:43:34.643949 systemd[1]: Finished lvm2-activation-early.service. Jul 10 00:43:34.644000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation-early comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:43:34.645061 systemd[1]: Reached target cryptsetup.target. Jul 10 00:43:34.647068 systemd[1]: Starting lvm2-activation.service... Jul 10 00:43:34.650752 lvm[1053]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Jul 10 00:43:34.678591 systemd[1]: Finished lvm2-activation.service. Jul 10 00:43:34.678000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:43:34.679522 systemd[1]: Reached target local-fs-pre.target. Jul 10 00:43:34.680377 systemd[1]: var-lib-machines.mount was skipped because of an unmet condition check (ConditionPathExists=/var/lib/machines.raw). Jul 10 00:43:34.680404 systemd[1]: Reached target local-fs.target. Jul 10 00:43:34.681196 systemd[1]: Reached target machines.target. Jul 10 00:43:34.683090 systemd[1]: Starting ldconfig.service... Jul 10 00:43:34.684067 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 10 00:43:34.684105 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 10 00:43:34.685177 systemd[1]: Starting systemd-boot-update.service... Jul 10 00:43:34.686929 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-OEM.service... Jul 10 00:43:34.689245 systemd[1]: Starting systemd-machine-id-commit.service... Jul 10 00:43:34.691124 systemd[1]: Starting systemd-sysext.service... Jul 10 00:43:34.692229 systemd[1]: boot.automount: Got automount request for /boot, triggered by 1055 (bootctl) Jul 10 00:43:34.693251 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service... Jul 10 00:43:34.698250 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-OEM.service. Jul 10 00:43:34.697000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-OEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:43:34.705465 systemd[1]: Unmounting usr-share-oem.mount... Jul 10 00:43:34.711225 systemd[1]: usr-share-oem.mount: Deactivated successfully. Jul 10 00:43:34.711425 systemd[1]: Unmounted usr-share-oem.mount. Jul 10 00:43:34.723888 kernel: loop0: detected capacity change from 0 to 229808 Jul 10 00:43:34.795285 systemd-fsck[1063]: fsck.fat 4.2 (2021-01-31) Jul 10 00:43:34.795285 systemd-fsck[1063]: /dev/vda1: 790 files, 120731/258078 clusters Jul 10 00:43:34.796683 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service. Jul 10 00:43:34.797000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:43:34.799129 systemd[1]: Mounting boot.mount... Jul 10 00:43:35.679177 systemd-networkd[1027]: eth0: Gained IPv6LL Jul 10 00:43:35.703566 systemd[1]: Mounted boot.mount. Jul 10 00:43:35.711882 kernel: squashfs: version 4.0 (2009/01/31) Phillip Lougher Jul 10 00:43:35.717042 systemd[1]: Finished systemd-boot-update.service. Jul 10 00:43:35.717000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-boot-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:43:35.722906 systemd[1]: etc-machine\x2did.mount: Deactivated successfully. Jul 10 00:43:35.723512 systemd[1]: Finished systemd-machine-id-commit.service. Jul 10 00:43:35.723000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-machine-id-commit comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:43:35.728879 kernel: loop1: detected capacity change from 0 to 229808 Jul 10 00:43:35.733961 (sd-sysext)[1069]: Using extensions 'kubernetes'. Jul 10 00:43:35.734583 (sd-sysext)[1069]: Merged extensions into '/usr'. Jul 10 00:43:35.750868 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 10 00:43:35.752267 systemd[1]: Mounting usr-share-oem.mount... Jul 10 00:43:35.753345 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Jul 10 00:43:35.754495 systemd[1]: Starting modprobe@dm_mod.service... Jul 10 00:43:35.757326 systemd[1]: Starting modprobe@efi_pstore.service... Jul 10 00:43:35.862798 ldconfig[1054]: /sbin/ldconfig: /lib/ld.so.conf is not an ELF file - it has the wrong magic bytes at the start. Jul 10 00:43:35.863591 systemd[1]: Starting modprobe@loop.service... Jul 10 00:43:35.864665 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 10 00:43:35.864898 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 10 00:43:35.865023 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 10 00:43:35.867645 systemd[1]: Mounted usr-share-oem.mount. Jul 10 00:43:35.868923 systemd[1]: Finished ldconfig.service. Jul 10 00:43:35.868000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=ldconfig comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:43:35.870074 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Jul 10 00:43:35.870189 systemd[1]: Finished modprobe@dm_mod.service. Jul 10 00:43:35.870000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:43:35.870000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:43:35.871433 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Jul 10 00:43:35.871542 systemd[1]: Finished modprobe@efi_pstore.service. Jul 10 00:43:35.871000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:43:35.871000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:43:35.872862 systemd[1]: modprobe@loop.service: Deactivated successfully. Jul 10 00:43:35.872969 systemd[1]: Finished modprobe@loop.service. Jul 10 00:43:35.873000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:43:35.873000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:43:35.874456 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Jul 10 00:43:35.874580 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Jul 10 00:43:35.875679 systemd[1]: Finished systemd-sysext.service. Jul 10 00:43:35.875000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysext comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:43:35.878141 systemd[1]: Starting ensure-sysext.service... Jul 10 00:43:35.880285 systemd[1]: Starting systemd-tmpfiles-setup.service... Jul 10 00:43:35.885943 systemd[1]: Reloading. Jul 10 00:43:35.891695 systemd-tmpfiles[1076]: /usr/lib/tmpfiles.d/legacy.conf:13: Duplicate line for path "/run/lock", ignoring. Jul 10 00:43:35.892936 systemd-tmpfiles[1076]: /usr/lib/tmpfiles.d/provision.conf:20: Duplicate line for path "/root", ignoring. Jul 10 00:43:35.894406 systemd-tmpfiles[1076]: /usr/lib/tmpfiles.d/systemd.conf:29: Duplicate line for path "/var/lib/systemd", ignoring. Jul 10 00:43:35.944645 /usr/lib/systemd/system-generators/torcx-generator[1096]: time="2025-07-10T00:43:35Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.7 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.7 /var/lib/torcx/store]" Jul 10 00:43:35.944689 /usr/lib/systemd/system-generators/torcx-generator[1096]: time="2025-07-10T00:43:35Z" level=info msg="torcx already run" Jul 10 00:43:36.013692 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Jul 10 00:43:36.013710 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Jul 10 00:43:36.031008 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Jul 10 00:43:36.093000 audit: BPF prog-id=24 op=LOAD Jul 10 00:43:36.093000 audit: BPF prog-id=20 op=UNLOAD Jul 10 00:43:36.094000 audit: BPF prog-id=25 op=LOAD Jul 10 00:43:36.094000 audit: BPF prog-id=21 op=UNLOAD Jul 10 00:43:36.094000 audit: BPF prog-id=26 op=LOAD Jul 10 00:43:36.094000 audit: BPF prog-id=27 op=LOAD Jul 10 00:43:36.094000 audit: BPF prog-id=22 op=UNLOAD Jul 10 00:43:36.094000 audit: BPF prog-id=23 op=UNLOAD Jul 10 00:43:36.094000 audit: BPF prog-id=28 op=LOAD Jul 10 00:43:36.094000 audit: BPF prog-id=29 op=LOAD Jul 10 00:43:36.094000 audit: BPF prog-id=18 op=UNLOAD Jul 10 00:43:36.094000 audit: BPF prog-id=19 op=UNLOAD Jul 10 00:43:36.096000 audit: BPF prog-id=30 op=LOAD Jul 10 00:43:36.096000 audit: BPF prog-id=15 op=UNLOAD Jul 10 00:43:36.096000 audit: BPF prog-id=31 op=LOAD Jul 10 00:43:36.096000 audit: BPF prog-id=32 op=LOAD Jul 10 00:43:36.096000 audit: BPF prog-id=16 op=UNLOAD Jul 10 00:43:36.096000 audit: BPF prog-id=17 op=UNLOAD Jul 10 00:43:36.100358 systemd[1]: Finished systemd-tmpfiles-setup.service. Jul 10 00:43:36.100000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:43:36.105699 systemd[1]: Starting audit-rules.service... Jul 10 00:43:36.107454 systemd[1]: Starting clean-ca-certificates.service... Jul 10 00:43:36.109652 systemd[1]: Starting systemd-journal-catalog-update.service... Jul 10 00:43:36.110000 audit: BPF prog-id=33 op=LOAD Jul 10 00:43:36.114000 audit: BPF prog-id=34 op=LOAD Jul 10 00:43:36.113209 systemd[1]: Starting systemd-resolved.service... Jul 10 00:43:36.115710 systemd[1]: Starting systemd-timesyncd.service... Jul 10 00:43:36.117525 systemd[1]: Starting systemd-update-utmp.service... Jul 10 00:43:36.118836 systemd[1]: Finished clean-ca-certificates.service. Jul 10 00:43:36.119000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=clean-ca-certificates comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:43:36.122000 audit[1148]: SYSTEM_BOOT pid=1148 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' Jul 10 00:43:36.121976 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Jul 10 00:43:36.126680 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 10 00:43:36.127009 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Jul 10 00:43:36.128767 systemd[1]: Starting modprobe@dm_mod.service... Jul 10 00:43:36.131077 systemd[1]: Starting modprobe@efi_pstore.service... Jul 10 00:43:36.133177 systemd[1]: Starting modprobe@loop.service... Jul 10 00:43:36.134017 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 10 00:43:36.134137 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 10 00:43:36.134231 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Jul 10 00:43:36.134299 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 10 00:43:36.135399 systemd[1]: Finished systemd-journal-catalog-update.service. Jul 10 00:43:36.135000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-catalog-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:43:36.137084 systemd[1]: Finished systemd-update-utmp.service. Jul 10 00:43:36.137000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:43:36.138565 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Jul 10 00:43:36.138779 systemd[1]: Finished modprobe@dm_mod.service. Jul 10 00:43:36.138000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:43:36.139000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:43:36.140167 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Jul 10 00:43:36.140286 systemd[1]: Finished modprobe@efi_pstore.service. Jul 10 00:43:36.140000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:43:36.140000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:43:36.141745 systemd[1]: modprobe@loop.service: Deactivated successfully. Jul 10 00:43:36.141875 systemd[1]: Finished modprobe@loop.service. Jul 10 00:43:36.141000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:43:36.141000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:43:36.146266 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 10 00:43:36.146553 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Jul 10 00:43:36.148482 systemd[1]: Starting modprobe@dm_mod.service... Jul 10 00:43:36.149000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=add_rule key=(null) list=5 res=1 Jul 10 00:43:36.149000 audit[1161]: SYSCALL arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7fff8bd02060 a2=420 a3=0 items=0 ppid=1137 pid=1161 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:43:36.149000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 Jul 10 00:43:36.150119 augenrules[1161]: No rules Jul 10 00:43:36.151297 systemd[1]: Starting modprobe@efi_pstore.service... Jul 10 00:43:36.153945 systemd[1]: Starting modprobe@loop.service... Jul 10 00:43:36.155097 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 10 00:43:36.155256 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 10 00:43:36.157421 systemd[1]: Starting systemd-update-done.service... Jul 10 00:43:36.158618 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Jul 10 00:43:36.158744 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 10 00:43:36.160727 systemd[1]: Finished audit-rules.service. Jul 10 00:43:36.162401 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Jul 10 00:43:36.162569 systemd[1]: Finished modprobe@dm_mod.service. Jul 10 00:43:36.164297 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Jul 10 00:43:36.164457 systemd[1]: Finished modprobe@efi_pstore.service. Jul 10 00:43:36.166085 systemd[1]: modprobe@loop.service: Deactivated successfully. Jul 10 00:43:36.166242 systemd[1]: Finished modprobe@loop.service. Jul 10 00:43:36.167791 systemd[1]: Finished systemd-update-done.service. Jul 10 00:43:36.169483 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Jul 10 00:43:36.169619 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Jul 10 00:43:36.172291 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 10 00:43:36.172490 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Jul 10 00:43:36.173658 systemd[1]: Starting modprobe@dm_mod.service... Jul 10 00:43:36.176151 systemd[1]: Starting modprobe@drm.service... Jul 10 00:43:36.178601 systemd[1]: Starting modprobe@efi_pstore.service... Jul 10 00:43:36.181213 systemd[1]: Starting modprobe@loop.service... Jul 10 00:43:36.182209 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 10 00:43:36.182314 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 10 00:43:36.183695 systemd[1]: Starting systemd-networkd-wait-online.service... Jul 10 00:43:36.184856 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Jul 10 00:43:36.184955 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 10 00:43:36.186061 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Jul 10 00:43:36.186172 systemd[1]: Finished modprobe@dm_mod.service. Jul 10 00:43:36.187483 systemd[1]: modprobe@drm.service: Deactivated successfully. Jul 10 00:43:36.187586 systemd[1]: Finished modprobe@drm.service. Jul 10 00:43:36.188789 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Jul 10 00:43:36.188906 systemd[1]: Finished modprobe@efi_pstore.service. Jul 10 00:43:36.190206 systemd[1]: modprobe@loop.service: Deactivated successfully. Jul 10 00:43:36.190305 systemd[1]: Finished modprobe@loop.service. Jul 10 00:43:36.191438 systemd-timesyncd[1144]: Contacted time server 10.0.0.1:123 (10.0.0.1). Jul 10 00:43:36.191486 systemd-timesyncd[1144]: Initial clock synchronization to Thu 2025-07-10 00:43:35.949282 UTC. Jul 10 00:43:36.191645 systemd[1]: Started systemd-timesyncd.service. Jul 10 00:43:36.192970 systemd-resolved[1143]: Positive Trust Anchors: Jul 10 00:43:36.192985 systemd-resolved[1143]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Jul 10 00:43:36.193019 systemd-resolved[1143]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Jul 10 00:43:36.193313 systemd[1]: Finished systemd-networkd-wait-online.service. Jul 10 00:43:36.195079 systemd[1]: Reached target time-set.target. Jul 10 00:43:36.196092 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Jul 10 00:43:36.196128 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Jul 10 00:43:36.196395 systemd[1]: Finished ensure-sysext.service. Jul 10 00:43:36.202000 systemd-resolved[1143]: Defaulting to hostname 'linux'. Jul 10 00:43:36.203601 systemd[1]: Started systemd-resolved.service. Jul 10 00:43:36.204485 systemd[1]: Reached target network.target. Jul 10 00:43:36.205280 systemd[1]: Reached target network-online.target. Jul 10 00:43:36.206149 systemd[1]: Reached target nss-lookup.target. Jul 10 00:43:36.206990 systemd[1]: Reached target sysinit.target. Jul 10 00:43:36.207866 systemd[1]: Started motdgen.path. Jul 10 00:43:36.208590 systemd[1]: Started user-cloudinit@var-lib-flatcar\x2dinstall-user_data.path. Jul 10 00:43:36.209857 systemd[1]: Started logrotate.timer. Jul 10 00:43:36.210652 systemd[1]: Started mdadm.timer. Jul 10 00:43:36.211366 systemd[1]: Started systemd-tmpfiles-clean.timer. Jul 10 00:43:36.212265 systemd[1]: update-engine-stub.timer was skipped because of an unmet condition check (ConditionPathExists=/usr/.noupdate). Jul 10 00:43:36.212285 systemd[1]: Reached target paths.target. Jul 10 00:43:36.213061 systemd[1]: Reached target timers.target. Jul 10 00:43:36.214122 systemd[1]: Listening on dbus.socket. Jul 10 00:43:36.215900 systemd[1]: Starting docker.socket... Jul 10 00:43:36.218494 systemd[1]: Listening on sshd.socket. Jul 10 00:43:36.219489 systemd[1]: systemd-pcrphase-sysinit.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 10 00:43:36.219819 systemd[1]: Listening on docker.socket. Jul 10 00:43:36.220649 systemd[1]: Reached target sockets.target. Jul 10 00:43:36.221480 systemd[1]: Reached target basic.target. Jul 10 00:43:36.222439 systemd[1]: addon-config@usr-share-oem.service was skipped because no trigger condition checks were met. Jul 10 00:43:36.222461 systemd[1]: addon-run@usr-share-oem.service was skipped because no trigger condition checks were met. Jul 10 00:43:36.223392 systemd[1]: Starting containerd.service... Jul 10 00:43:36.225129 systemd[1]: Starting dbus.service... Jul 10 00:43:36.226976 systemd[1]: Starting enable-oem-cloudinit.service... Jul 10 00:43:36.229199 systemd[1]: Starting extend-filesystems.service... Jul 10 00:43:36.230231 systemd[1]: flatcar-setup-environment.service was skipped because of an unmet condition check (ConditionPathExists=/usr/share/oem/bin/flatcar-setup-environment). Jul 10 00:43:36.231230 systemd[1]: Starting kubelet.service... Jul 10 00:43:36.232679 jq[1179]: false Jul 10 00:43:36.232923 systemd[1]: Starting motdgen.service... Jul 10 00:43:36.235107 systemd[1]: Starting prepare-helm.service... Jul 10 00:43:36.237141 systemd[1]: Starting ssh-key-proc-cmdline.service... Jul 10 00:43:36.238970 systemd[1]: Starting sshd-keygen.service... Jul 10 00:43:36.243641 systemd[1]: Starting systemd-logind.service... Jul 10 00:43:36.244658 systemd[1]: systemd-pcrphase.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 10 00:43:36.244774 systemd[1]: tcsd.service was skipped because of an unmet condition check (ConditionPathExists=/dev/tpm0). Jul 10 00:43:36.245263 systemd[1]: cgroup compatibility translation between legacy and unified hierarchy settings activated. See cgroup-compat debug messages for details. Jul 10 00:43:36.246548 systemd[1]: Starting update-engine.service... Jul 10 00:43:36.247380 extend-filesystems[1180]: Found loop1 Jul 10 00:43:36.249034 extend-filesystems[1180]: Found sr0 Jul 10 00:43:36.248715 dbus-daemon[1178]: [system] SELinux support is enabled Jul 10 00:43:36.249969 systemd[1]: Starting update-ssh-keys-after-ignition.service... Jul 10 00:43:36.250195 extend-filesystems[1180]: Found vda Jul 10 00:43:36.250195 extend-filesystems[1180]: Found vda1 Jul 10 00:43:36.250195 extend-filesystems[1180]: Found vda2 Jul 10 00:43:36.250195 extend-filesystems[1180]: Found vda3 Jul 10 00:43:36.250195 extend-filesystems[1180]: Found usr Jul 10 00:43:36.250195 extend-filesystems[1180]: Found vda4 Jul 10 00:43:36.263473 extend-filesystems[1180]: Found vda6 Jul 10 00:43:36.263473 extend-filesystems[1180]: Found vda7 Jul 10 00:43:36.263473 extend-filesystems[1180]: Found vda9 Jul 10 00:43:36.263473 extend-filesystems[1180]: Checking size of /dev/vda9 Jul 10 00:43:36.263473 extend-filesystems[1180]: Resized partition /dev/vda9 Jul 10 00:43:36.254608 systemd[1]: Started dbus.service. Jul 10 00:43:36.267307 jq[1199]: true Jul 10 00:43:36.270035 systemd[1]: enable-oem-cloudinit.service: Skipped due to 'exec-condition'. Jul 10 00:43:36.273102 systemd[1]: Condition check resulted in enable-oem-cloudinit.service being skipped. Jul 10 00:43:36.299564 systemd[1]: motdgen.service: Deactivated successfully. Jul 10 00:43:36.299795 systemd[1]: Finished motdgen.service. Jul 10 00:43:36.302537 systemd[1]: ssh-key-proc-cmdline.service: Deactivated successfully. Jul 10 00:43:36.302740 systemd[1]: Finished ssh-key-proc-cmdline.service. Jul 10 00:43:36.307865 extend-filesystems[1204]: resize2fs 1.46.5 (30-Dec-2021) Jul 10 00:43:36.315865 kernel: EXT4-fs (vda9): resizing filesystem from 553472 to 1864699 blocks Jul 10 00:43:36.311179 systemd[1]: system-cloudinit@usr-share-oem-cloud\x2dconfig.yml.service was skipped because of an unmet condition check (ConditionFileNotEmpty=/usr/share/oem/cloud-config.yml). Jul 10 00:43:36.315986 jq[1209]: true Jul 10 00:43:36.311215 systemd[1]: Reached target system-config.target. Jul 10 00:43:36.312510 systemd[1]: user-cloudinit-proc-cmdline.service was skipped because of an unmet condition check (ConditionKernelCommandLine=cloud-config-url). Jul 10 00:43:36.312523 systemd[1]: Reached target user-config.target. Jul 10 00:43:36.355932 update_engine[1197]: I0710 00:43:36.355747 1197 main.cc:92] Flatcar Update Engine starting Jul 10 00:43:36.359471 update_engine[1197]: I0710 00:43:36.359439 1197 update_check_scheduler.cc:74] Next update check in 7m24s Jul 10 00:43:36.359470 systemd[1]: Started update-engine.service. Jul 10 00:43:36.363517 systemd[1]: Started locksmithd.service. Jul 10 00:43:36.366103 tar[1208]: linux-amd64/LICENSE Jul 10 00:43:36.396274 kernel: EXT4-fs (vda9): resized filesystem to 1864699 Jul 10 00:43:36.396441 tar[1208]: linux-amd64/helm Jul 10 00:43:36.396896 systemd-logind[1194]: Watching system buttons on /dev/input/event1 (Power Button) Jul 10 00:43:36.397162 systemd-logind[1194]: Watching system buttons on /dev/input/event0 (AT Translated Set 2 keyboard) Jul 10 00:43:36.398689 systemd-logind[1194]: New seat seat0. Jul 10 00:43:36.399252 extend-filesystems[1204]: Filesystem at /dev/vda9 is mounted on /; on-line resizing required Jul 10 00:43:36.399252 extend-filesystems[1204]: old_desc_blocks = 1, new_desc_blocks = 1 Jul 10 00:43:36.399252 extend-filesystems[1204]: The filesystem on /dev/vda9 is now 1864699 (4k) blocks long. Jul 10 00:43:36.411412 extend-filesystems[1180]: Resized filesystem in /dev/vda9 Jul 10 00:43:36.421539 bash[1232]: Updated "/home/core/.ssh/authorized_keys" Jul 10 00:43:36.400227 systemd[1]: extend-filesystems.service: Deactivated successfully. Jul 10 00:43:36.421727 env[1210]: time="2025-07-10T00:43:36.415642386Z" level=info msg="starting containerd" revision=92b3a9d6f1b3bcc6dc74875cfdea653fe39f09c2 version=1.6.16 Jul 10 00:43:36.400383 systemd[1]: Finished extend-filesystems.service. Jul 10 00:43:36.412233 systemd[1]: Finished update-ssh-keys-after-ignition.service. Jul 10 00:43:36.471213 systemd[1]: Started systemd-logind.service. Jul 10 00:43:36.510563 env[1210]: time="2025-07-10T00:43:36.509163191Z" level=info msg="loading plugin \"io.containerd.content.v1.content\"..." type=io.containerd.content.v1 Jul 10 00:43:36.510563 env[1210]: time="2025-07-10T00:43:36.509387061Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.aufs\"..." type=io.containerd.snapshotter.v1 Jul 10 00:43:36.512699 env[1210]: time="2025-07-10T00:43:36.512440047Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.aufs\"..." error="aufs is not supported (modprobe aufs failed: exit status 1 \"modprobe: FATAL: Module aufs not found in directory /lib/modules/5.15.186-flatcar\\n\"): skip plugin" type=io.containerd.snapshotter.v1 Jul 10 00:43:36.512699 env[1210]: time="2025-07-10T00:43:36.512494128Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." type=io.containerd.snapshotter.v1 Jul 10 00:43:36.513041 env[1210]: time="2025-07-10T00:43:36.513000367Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.btrfs (ext4) must be a btrfs filesystem to be used with the btrfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Jul 10 00:43:36.513041 env[1210]: time="2025-07-10T00:43:36.513032307Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.devmapper\"..." type=io.containerd.snapshotter.v1 Jul 10 00:43:36.513148 env[1210]: time="2025-07-10T00:43:36.513049309Z" level=warning msg="failed to load plugin io.containerd.snapshotter.v1.devmapper" error="devmapper not configured" Jul 10 00:43:36.513148 env[1210]: time="2025-07-10T00:43:36.513065149Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.native\"..." type=io.containerd.snapshotter.v1 Jul 10 00:43:36.513204 env[1210]: time="2025-07-10T00:43:36.513176758Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.overlayfs\"..." type=io.containerd.snapshotter.v1 Jul 10 00:43:36.513584 env[1210]: time="2025-07-10T00:43:36.513544568Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.zfs\"..." type=io.containerd.snapshotter.v1 Jul 10 00:43:36.513810 env[1210]: time="2025-07-10T00:43:36.513768227Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.zfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.zfs must be a zfs filesystem to be used with the zfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Jul 10 00:43:36.513810 env[1210]: time="2025-07-10T00:43:36.513806790Z" level=info msg="loading plugin \"io.containerd.metadata.v1.bolt\"..." type=io.containerd.metadata.v1 Jul 10 00:43:36.513990 env[1210]: time="2025-07-10T00:43:36.513922246Z" level=warning msg="could not use snapshotter devmapper in metadata plugin" error="devmapper not configured" Jul 10 00:43:36.513990 env[1210]: time="2025-07-10T00:43:36.513972761Z" level=info msg="metadata content store policy set" policy=shared Jul 10 00:43:36.520442 env[1210]: time="2025-07-10T00:43:36.520396117Z" level=info msg="loading plugin \"io.containerd.differ.v1.walking\"..." type=io.containerd.differ.v1 Jul 10 00:43:36.520442 env[1210]: time="2025-07-10T00:43:36.520442264Z" level=info msg="loading plugin \"io.containerd.event.v1.exchange\"..." type=io.containerd.event.v1 Jul 10 00:43:36.520516 env[1210]: time="2025-07-10T00:43:36.520454957Z" level=info msg="loading plugin \"io.containerd.gc.v1.scheduler\"..." type=io.containerd.gc.v1 Jul 10 00:43:36.520516 env[1210]: time="2025-07-10T00:43:36.520501745Z" level=info msg="loading plugin \"io.containerd.service.v1.introspection-service\"..." type=io.containerd.service.v1 Jul 10 00:43:36.520587 env[1210]: time="2025-07-10T00:43:36.520519208Z" level=info msg="loading plugin \"io.containerd.service.v1.containers-service\"..." type=io.containerd.service.v1 Jul 10 00:43:36.520587 env[1210]: time="2025-07-10T00:43:36.520532883Z" level=info msg="loading plugin \"io.containerd.service.v1.content-service\"..." type=io.containerd.service.v1 Jul 10 00:43:36.520633 env[1210]: time="2025-07-10T00:43:36.520599188Z" level=info msg="loading plugin \"io.containerd.service.v1.diff-service\"..." type=io.containerd.service.v1 Jul 10 00:43:36.520633 env[1210]: time="2025-07-10T00:43:36.520616500Z" level=info msg="loading plugin \"io.containerd.service.v1.images-service\"..." type=io.containerd.service.v1 Jul 10 00:43:36.520633 env[1210]: time="2025-07-10T00:43:36.520629054Z" level=info msg="loading plugin \"io.containerd.service.v1.leases-service\"..." type=io.containerd.service.v1 Jul 10 00:43:36.520740 env[1210]: time="2025-07-10T00:43:36.520643591Z" level=info msg="loading plugin \"io.containerd.service.v1.namespaces-service\"..." type=io.containerd.service.v1 Jul 10 00:43:36.520740 env[1210]: time="2025-07-10T00:43:36.520665492Z" level=info msg="loading plugin \"io.containerd.service.v1.snapshots-service\"..." type=io.containerd.service.v1 Jul 10 00:43:36.520740 env[1210]: time="2025-07-10T00:43:36.520677445Z" level=info msg="loading plugin \"io.containerd.runtime.v1.linux\"..." type=io.containerd.runtime.v1 Jul 10 00:43:36.521572 env[1210]: time="2025-07-10T00:43:36.520803701Z" level=info msg="loading plugin \"io.containerd.runtime.v2.task\"..." type=io.containerd.runtime.v2 Jul 10 00:43:36.521572 env[1210]: time="2025-07-10T00:43:36.521037400Z" level=info msg="loading plugin \"io.containerd.monitor.v1.cgroups\"..." type=io.containerd.monitor.v1 Jul 10 00:43:36.523141 env[1210]: time="2025-07-10T00:43:36.521730279Z" level=info msg="loading plugin \"io.containerd.service.v1.tasks-service\"..." type=io.containerd.service.v1 Jul 10 00:43:36.523141 env[1210]: time="2025-07-10T00:43:36.521798477Z" level=info msg="loading plugin \"io.containerd.grpc.v1.introspection\"..." type=io.containerd.grpc.v1 Jul 10 00:43:36.523141 env[1210]: time="2025-07-10T00:43:36.521840656Z" level=info msg="loading plugin \"io.containerd.internal.v1.restart\"..." type=io.containerd.internal.v1 Jul 10 00:43:36.523141 env[1210]: time="2025-07-10T00:43:36.522040581Z" level=info msg="loading plugin \"io.containerd.grpc.v1.containers\"..." type=io.containerd.grpc.v1 Jul 10 00:43:36.523141 env[1210]: time="2025-07-10T00:43:36.522179001Z" level=info msg="loading plugin \"io.containerd.grpc.v1.content\"..." type=io.containerd.grpc.v1 Jul 10 00:43:36.523141 env[1210]: time="2025-07-10T00:43:36.522194560Z" level=info msg="loading plugin \"io.containerd.grpc.v1.diff\"..." type=io.containerd.grpc.v1 Jul 10 00:43:36.523141 env[1210]: time="2025-07-10T00:43:36.522215569Z" level=info msg="loading plugin \"io.containerd.grpc.v1.events\"..." type=io.containerd.grpc.v1 Jul 10 00:43:36.523141 env[1210]: time="2025-07-10T00:43:36.522230096Z" level=info msg="loading plugin \"io.containerd.grpc.v1.healthcheck\"..." type=io.containerd.grpc.v1 Jul 10 00:43:36.523141 env[1210]: time="2025-07-10T00:43:36.522255043Z" level=info msg="loading plugin \"io.containerd.grpc.v1.images\"..." type=io.containerd.grpc.v1 Jul 10 00:43:36.523141 env[1210]: time="2025-07-10T00:43:36.522269200Z" level=info msg="loading plugin \"io.containerd.grpc.v1.leases\"..." type=io.containerd.grpc.v1 Jul 10 00:43:36.523141 env[1210]: time="2025-07-10T00:43:36.522283296Z" level=info msg="loading plugin \"io.containerd.grpc.v1.namespaces\"..." type=io.containerd.grpc.v1 Jul 10 00:43:36.523141 env[1210]: time="2025-07-10T00:43:36.522296431Z" level=info msg="loading plugin \"io.containerd.internal.v1.opt\"..." type=io.containerd.internal.v1 Jul 10 00:43:36.523141 env[1210]: time="2025-07-10T00:43:36.522591284Z" level=info msg="loading plugin \"io.containerd.grpc.v1.snapshots\"..." type=io.containerd.grpc.v1 Jul 10 00:43:36.523141 env[1210]: time="2025-07-10T00:43:36.522624957Z" level=info msg="loading plugin \"io.containerd.grpc.v1.tasks\"..." type=io.containerd.grpc.v1 Jul 10 00:43:36.523141 env[1210]: time="2025-07-10T00:43:36.522642249Z" level=info msg="loading plugin \"io.containerd.grpc.v1.version\"..." type=io.containerd.grpc.v1 Jul 10 00:43:36.523625 env[1210]: time="2025-07-10T00:43:36.522672466Z" level=info msg="loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." type=io.containerd.tracing.processor.v1 Jul 10 00:43:36.523625 env[1210]: time="2025-07-10T00:43:36.522713012Z" level=info msg="skip loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." error="no OpenTelemetry endpoint: skip plugin" type=io.containerd.tracing.processor.v1 Jul 10 00:43:36.523625 env[1210]: time="2025-07-10T00:43:36.522729202Z" level=info msg="loading plugin \"io.containerd.internal.v1.tracing\"..." type=io.containerd.internal.v1 Jul 10 00:43:36.523625 env[1210]: time="2025-07-10T00:43:36.522814853Z" level=error msg="failed to initialize a tracing processor \"otlp\"" error="no OpenTelemetry endpoint: skip plugin" Jul 10 00:43:36.523625 env[1210]: time="2025-07-10T00:43:36.522924408Z" level=info msg="loading plugin \"io.containerd.grpc.v1.cri\"..." type=io.containerd.grpc.v1 Jul 10 00:43:36.523740 env[1210]: time="2025-07-10T00:43:36.523440957Z" level=info msg="Start cri plugin with config {PluginConfig:{ContainerdConfig:{Snapshotter:overlayfs DefaultRuntimeName:runc DefaultRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} UntrustedWorkloadRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} Runtimes:map[runc:{Type:io.containerd.runc.v2 Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[SystemdCgroup:true] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0}] NoPivot:false DisableSnapshotAnnotations:true DiscardUnpackedLayers:false IgnoreRdtNotEnabledErrors:false} CniConfig:{NetworkPluginBinDir:/opt/cni/bin NetworkPluginConfDir:/etc/cni/net.d NetworkPluginMaxConfNum:1 NetworkPluginConfTemplate: IPPreference:} Registry:{ConfigPath: Mirrors:map[] Configs:map[] Auths:map[] Headers:map[]} ImageDecryption:{KeyModel:node} DisableTCPService:true StreamServerAddress:127.0.0.1 StreamServerPort:0 StreamIdleTimeout:4h0m0s EnableSelinux:true SelinuxCategoryRange:1024 SandboxImage:registry.k8s.io/pause:3.6 StatsCollectPeriod:10 SystemdCgroup:false EnableTLSStreaming:false X509KeyPairStreaming:{TLSCertFile: TLSKeyFile:} MaxContainerLogLineSize:16384 DisableCgroup:false DisableApparmor:false RestrictOOMScoreAdj:false MaxConcurrentDownloads:3 DisableProcMount:false UnsetSeccompProfile: TolerateMissingHugetlbController:true DisableHugetlbController:true DeviceOwnershipFromSecurityContext:false IgnoreImageDefinedVolumes:false NetNSMountsUnderStateDir:false EnableUnprivilegedPorts:false EnableUnprivilegedICMP:false} ContainerdRootDir:/var/lib/containerd ContainerdEndpoint:/run/containerd/containerd.sock RootDir:/var/lib/containerd/io.containerd.grpc.v1.cri StateDir:/run/containerd/io.containerd.grpc.v1.cri}" Jul 10 00:43:36.523740 env[1210]: time="2025-07-10T00:43:36.523499347Z" level=info msg="Connect containerd service" Jul 10 00:43:36.523740 env[1210]: time="2025-07-10T00:43:36.523543169Z" level=info msg="Get image filesystem path \"/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs\"" Jul 10 00:43:36.570681 env[1210]: time="2025-07-10T00:43:36.570619824Z" level=error msg="failed to load cni during init, please check CRI plugin status before setting up network for pods" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Jul 10 00:43:36.570933 env[1210]: time="2025-07-10T00:43:36.570885463Z" level=info msg="Start subscribing containerd event" Jul 10 00:43:36.571065 env[1210]: time="2025-07-10T00:43:36.571047697Z" level=info msg="Start recovering state" Jul 10 00:43:36.571292 env[1210]: time="2025-07-10T00:43:36.571275023Z" level=info msg="Start event monitor" Jul 10 00:43:36.571381 env[1210]: time="2025-07-10T00:43:36.571361525Z" level=info msg="Start snapshots syncer" Jul 10 00:43:36.571486 env[1210]: time="2025-07-10T00:43:36.571458587Z" level=info msg="Start cni network conf syncer for default" Jul 10 00:43:36.571590 env[1210]: time="2025-07-10T00:43:36.571541583Z" level=info msg="Start streaming server" Jul 10 00:43:36.572156 env[1210]: time="2025-07-10T00:43:36.572138462Z" level=info msg=serving... address=/run/containerd/containerd.sock.ttrpc Jul 10 00:43:36.572288 env[1210]: time="2025-07-10T00:43:36.572269999Z" level=info msg=serving... address=/run/containerd/containerd.sock Jul 10 00:43:36.572489 systemd[1]: Started containerd.service. Jul 10 00:43:36.572935 env[1210]: time="2025-07-10T00:43:36.572916261Z" level=info msg="containerd successfully booted in 0.175080s" Jul 10 00:43:36.590533 locksmithd[1223]: locksmithd starting currentOperation="UPDATE_STATUS_IDLE" strategy="reboot" Jul 10 00:43:36.684345 systemd[1]: Created slice system-sshd.slice. Jul 10 00:43:37.197767 sshd_keygen[1198]: ssh-keygen: generating new host keys: RSA ECDSA ED25519 Jul 10 00:43:37.219059 systemd[1]: Finished sshd-keygen.service. Jul 10 00:43:37.221421 systemd[1]: Starting issuegen.service... Jul 10 00:43:37.223112 systemd[1]: Started sshd@0-10.0.0.116:22-10.0.0.1:50722.service. Jul 10 00:43:37.228454 systemd[1]: issuegen.service: Deactivated successfully. Jul 10 00:43:37.228657 systemd[1]: Finished issuegen.service. Jul 10 00:43:37.231273 systemd[1]: Starting systemd-user-sessions.service... Jul 10 00:43:37.241368 systemd[1]: Finished systemd-user-sessions.service. Jul 10 00:43:37.243647 systemd[1]: Started getty@tty1.service. Jul 10 00:43:37.246765 systemd[1]: Started serial-getty@ttyS0.service. Jul 10 00:43:37.248015 systemd[1]: Reached target getty.target. Jul 10 00:43:37.327451 tar[1208]: linux-amd64/README.md Jul 10 00:43:37.332985 systemd[1]: Finished prepare-helm.service. Jul 10 00:43:37.355356 sshd[1253]: Accepted publickey for core from 10.0.0.1 port 50722 ssh2: RSA SHA256:suUhWV759MqU0C+Dl6JG8TPW8PqnqlsB4qushdi9Ejw Jul 10 00:43:37.388362 sshd[1253]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 00:43:37.398316 systemd[1]: Created slice user-500.slice. Jul 10 00:43:37.400348 systemd[1]: Starting user-runtime-dir@500.service... Jul 10 00:43:37.403188 systemd-logind[1194]: New session 1 of user core. Jul 10 00:43:37.411324 systemd[1]: Finished user-runtime-dir@500.service. Jul 10 00:43:37.413981 systemd[1]: Starting user@500.service... Jul 10 00:43:37.419360 (systemd)[1262]: pam_unix(systemd-user:session): session opened for user core(uid=500) by (uid=0) Jul 10 00:43:37.498323 systemd[1262]: Queued start job for default target default.target. Jul 10 00:43:37.499226 systemd[1262]: Reached target paths.target. Jul 10 00:43:37.499247 systemd[1262]: Reached target sockets.target. Jul 10 00:43:37.499259 systemd[1262]: Reached target timers.target. Jul 10 00:43:37.499270 systemd[1262]: Reached target basic.target. Jul 10 00:43:37.499305 systemd[1262]: Reached target default.target. Jul 10 00:43:37.499326 systemd[1262]: Startup finished in 73ms. Jul 10 00:43:37.499434 systemd[1]: Started user@500.service. Jul 10 00:43:37.501712 systemd[1]: Started session-1.scope. Jul 10 00:43:37.554394 systemd[1]: Started sshd@1-10.0.0.116:22-10.0.0.1:50738.service. Jul 10 00:43:37.590496 sshd[1271]: Accepted publickey for core from 10.0.0.1 port 50738 ssh2: RSA SHA256:suUhWV759MqU0C+Dl6JG8TPW8PqnqlsB4qushdi9Ejw Jul 10 00:43:37.592296 sshd[1271]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 00:43:37.598256 systemd-logind[1194]: New session 2 of user core. Jul 10 00:43:37.599236 systemd[1]: Started session-2.scope. Jul 10 00:43:37.657622 sshd[1271]: pam_unix(sshd:session): session closed for user core Jul 10 00:43:37.661915 systemd-logind[1194]: Session 2 logged out. Waiting for processes to exit. Jul 10 00:43:37.663275 systemd[1]: Started sshd@2-10.0.0.116:22-10.0.0.1:50754.service. Jul 10 00:43:37.665488 systemd[1]: sshd@1-10.0.0.116:22-10.0.0.1:50738.service: Deactivated successfully. Jul 10 00:43:37.666407 systemd[1]: session-2.scope: Deactivated successfully. Jul 10 00:43:37.668363 systemd-logind[1194]: Removed session 2. Jul 10 00:43:37.742942 sshd[1276]: Accepted publickey for core from 10.0.0.1 port 50754 ssh2: RSA SHA256:suUhWV759MqU0C+Dl6JG8TPW8PqnqlsB4qushdi9Ejw Jul 10 00:43:37.744860 sshd[1276]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 00:43:37.748353 systemd-logind[1194]: New session 3 of user core. Jul 10 00:43:37.749116 systemd[1]: Started session-3.scope. Jul 10 00:43:37.818852 sshd[1276]: pam_unix(sshd:session): session closed for user core Jul 10 00:43:37.821265 systemd[1]: sshd@2-10.0.0.116:22-10.0.0.1:50754.service: Deactivated successfully. Jul 10 00:43:37.822820 systemd[1]: session-3.scope: Deactivated successfully. Jul 10 00:43:37.823311 systemd-logind[1194]: Session 3 logged out. Waiting for processes to exit. Jul 10 00:43:37.824125 systemd-logind[1194]: Removed session 3. Jul 10 00:43:38.183565 systemd[1]: Started kubelet.service. Jul 10 00:43:38.185352 systemd[1]: Reached target multi-user.target. Jul 10 00:43:38.187799 systemd[1]: Starting systemd-update-utmp-runlevel.service... Jul 10 00:43:38.194047 systemd[1]: systemd-update-utmp-runlevel.service: Deactivated successfully. Jul 10 00:43:38.194189 systemd[1]: Finished systemd-update-utmp-runlevel.service. Jul 10 00:43:38.195280 systemd[1]: Startup finished in 896ms (kernel) + 6.090s (initrd) + 9.165s (userspace) = 16.152s. Jul 10 00:43:38.906256 kubelet[1284]: E0710 00:43:38.906174 1284 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Jul 10 00:43:38.908222 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Jul 10 00:43:38.908361 systemd[1]: kubelet.service: Failed with result 'exit-code'. Jul 10 00:43:38.908664 systemd[1]: kubelet.service: Consumed 2.304s CPU time. Jul 10 00:43:47.644607 systemd[1]: Started sshd@3-10.0.0.116:22-10.0.0.1:55934.service. Jul 10 00:43:47.676670 sshd[1293]: Accepted publickey for core from 10.0.0.1 port 55934 ssh2: RSA SHA256:suUhWV759MqU0C+Dl6JG8TPW8PqnqlsB4qushdi9Ejw Jul 10 00:43:47.678124 sshd[1293]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 00:43:47.681620 systemd-logind[1194]: New session 4 of user core. Jul 10 00:43:47.682415 systemd[1]: Started session-4.scope. Jul 10 00:43:47.735183 sshd[1293]: pam_unix(sshd:session): session closed for user core Jul 10 00:43:47.738471 systemd[1]: Started sshd@4-10.0.0.116:22-10.0.0.1:55944.service. Jul 10 00:43:47.738943 systemd[1]: sshd@3-10.0.0.116:22-10.0.0.1:55934.service: Deactivated successfully. Jul 10 00:43:47.739488 systemd[1]: session-4.scope: Deactivated successfully. Jul 10 00:43:47.739911 systemd-logind[1194]: Session 4 logged out. Waiting for processes to exit. Jul 10 00:43:47.740654 systemd-logind[1194]: Removed session 4. Jul 10 00:43:47.771061 sshd[1298]: Accepted publickey for core from 10.0.0.1 port 55944 ssh2: RSA SHA256:suUhWV759MqU0C+Dl6JG8TPW8PqnqlsB4qushdi9Ejw Jul 10 00:43:47.772238 sshd[1298]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 00:43:47.775209 systemd-logind[1194]: New session 5 of user core. Jul 10 00:43:47.775957 systemd[1]: Started session-5.scope. Jul 10 00:43:47.824765 sshd[1298]: pam_unix(sshd:session): session closed for user core Jul 10 00:43:47.827745 systemd[1]: sshd@4-10.0.0.116:22-10.0.0.1:55944.service: Deactivated successfully. Jul 10 00:43:47.828327 systemd[1]: session-5.scope: Deactivated successfully. Jul 10 00:43:47.828817 systemd-logind[1194]: Session 5 logged out. Waiting for processes to exit. Jul 10 00:43:47.830059 systemd[1]: Started sshd@5-10.0.0.116:22-10.0.0.1:55956.service. Jul 10 00:43:47.831099 systemd-logind[1194]: Removed session 5. Jul 10 00:43:47.859389 sshd[1305]: Accepted publickey for core from 10.0.0.1 port 55956 ssh2: RSA SHA256:suUhWV759MqU0C+Dl6JG8TPW8PqnqlsB4qushdi9Ejw Jul 10 00:43:47.860369 sshd[1305]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 00:43:47.863544 systemd-logind[1194]: New session 6 of user core. Jul 10 00:43:47.864311 systemd[1]: Started session-6.scope. Jul 10 00:43:47.917142 sshd[1305]: pam_unix(sshd:session): session closed for user core Jul 10 00:43:47.919542 systemd[1]: sshd@5-10.0.0.116:22-10.0.0.1:55956.service: Deactivated successfully. Jul 10 00:43:47.920048 systemd[1]: session-6.scope: Deactivated successfully. Jul 10 00:43:47.920485 systemd-logind[1194]: Session 6 logged out. Waiting for processes to exit. Jul 10 00:43:47.921487 systemd[1]: Started sshd@6-10.0.0.116:22-10.0.0.1:55958.service. Jul 10 00:43:47.922171 systemd-logind[1194]: Removed session 6. Jul 10 00:43:47.951770 sshd[1311]: Accepted publickey for core from 10.0.0.1 port 55958 ssh2: RSA SHA256:suUhWV759MqU0C+Dl6JG8TPW8PqnqlsB4qushdi9Ejw Jul 10 00:43:47.952947 sshd[1311]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 00:43:47.956382 systemd-logind[1194]: New session 7 of user core. Jul 10 00:43:47.957149 systemd[1]: Started session-7.scope. Jul 10 00:43:48.011483 sudo[1314]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/setenforce 1 Jul 10 00:43:48.011679 sudo[1314]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Jul 10 00:43:48.021076 dbus-daemon[1178]: \xd0}ǮnU: received setenforce notice (enforcing=-67883760) Jul 10 00:43:48.023040 sudo[1314]: pam_unix(sudo:session): session closed for user root Jul 10 00:43:48.024500 sshd[1311]: pam_unix(sshd:session): session closed for user core Jul 10 00:43:48.027258 systemd[1]: sshd@6-10.0.0.116:22-10.0.0.1:55958.service: Deactivated successfully. Jul 10 00:43:48.027745 systemd[1]: session-7.scope: Deactivated successfully. Jul 10 00:43:48.028209 systemd-logind[1194]: Session 7 logged out. Waiting for processes to exit. Jul 10 00:43:48.029193 systemd[1]: Started sshd@7-10.0.0.116:22-10.0.0.1:55962.service. Jul 10 00:43:48.029797 systemd-logind[1194]: Removed session 7. Jul 10 00:43:48.062019 sshd[1318]: Accepted publickey for core from 10.0.0.1 port 55962 ssh2: RSA SHA256:suUhWV759MqU0C+Dl6JG8TPW8PqnqlsB4qushdi9Ejw Jul 10 00:43:48.063286 sshd[1318]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 00:43:48.067354 systemd-logind[1194]: New session 8 of user core. Jul 10 00:43:48.068441 systemd[1]: Started session-8.scope. Jul 10 00:43:48.120945 sudo[1322]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/rm -rf /etc/audit/rules.d/80-selinux.rules /etc/audit/rules.d/99-default.rules Jul 10 00:43:48.121135 sudo[1322]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Jul 10 00:43:48.123491 sudo[1322]: pam_unix(sudo:session): session closed for user root Jul 10 00:43:48.128375 sudo[1321]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/systemctl restart audit-rules Jul 10 00:43:48.128580 sudo[1321]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Jul 10 00:43:48.136706 systemd[1]: Stopping audit-rules.service... Jul 10 00:43:48.136000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Jul 10 00:43:48.137962 auditctl[1325]: No rules Jul 10 00:43:48.138173 systemd[1]: audit-rules.service: Deactivated successfully. Jul 10 00:43:48.138295 systemd[1]: Stopped audit-rules.service. Jul 10 00:43:48.138664 kernel: kauditd_printk_skb: 168 callbacks suppressed Jul 10 00:43:48.138717 kernel: audit: type=1305 audit(1752108228.136:190): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Jul 10 00:43:48.136000 audit[1325]: SYSCALL arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffe349c1070 a2=420 a3=0 items=0 ppid=1 pid=1325 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:43:48.139455 systemd[1]: Starting audit-rules.service... Jul 10 00:43:48.144793 kernel: audit: type=1300 audit(1752108228.136:190): arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffe349c1070 a2=420 a3=0 items=0 ppid=1 pid=1325 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:43:48.136000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D44 Jul 10 00:43:48.136000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:43:48.149390 kernel: audit: type=1327 audit(1752108228.136:190): proctitle=2F7362696E2F617564697463746C002D44 Jul 10 00:43:48.149435 kernel: audit: type=1131 audit(1752108228.136:191): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:43:48.157372 augenrules[1342]: No rules Jul 10 00:43:48.157938 systemd[1]: Finished audit-rules.service. Jul 10 00:43:48.165873 kernel: audit: type=1130 audit(1752108228.157:192): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:43:48.165962 kernel: audit: type=1106 audit(1752108228.157:193): pid=1321 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 10 00:43:48.165983 kernel: audit: type=1104 audit(1752108228.157:194): pid=1321 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 10 00:43:48.157000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:43:48.157000 audit[1321]: USER_END pid=1321 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 10 00:43:48.157000 audit[1321]: CRED_DISP pid=1321 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 10 00:43:48.162853 systemd[1]: Started sshd@8-10.0.0.116:22-10.0.0.1:55970.service. Jul 10 00:43:48.158801 sudo[1321]: pam_unix(sudo:session): session closed for user root Jul 10 00:43:48.163239 systemd[1]: sshd@7-10.0.0.116:22-10.0.0.1:55962.service: Deactivated successfully. Jul 10 00:43:48.160159 sshd[1318]: pam_unix(sshd:session): session closed for user core Jul 10 00:43:48.163705 systemd[1]: session-8.scope: Deactivated successfully. Jul 10 00:43:48.164661 systemd-logind[1194]: Session 8 logged out. Waiting for processes to exit. Jul 10 00:43:48.165479 systemd-logind[1194]: Removed session 8. Jul 10 00:43:48.167917 kernel: audit: type=1106 audit(1752108228.157:195): pid=1318 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:43:48.157000 audit[1318]: USER_END pid=1318 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:43:48.157000 audit[1318]: CRED_DISP pid=1318 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:43:48.176057 kernel: audit: type=1104 audit(1752108228.157:196): pid=1318 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:43:48.176100 kernel: audit: type=1130 audit(1752108228.160:197): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.0.0.116:22-10.0.0.1:55970 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:43:48.160000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.0.0.116:22-10.0.0.1:55970 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:43:48.160000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.0.0.116:22-10.0.0.1:55962 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:43:48.193000 audit[1347]: USER_ACCT pid=1347 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:43:48.194204 sshd[1347]: Accepted publickey for core from 10.0.0.1 port 55970 ssh2: RSA SHA256:suUhWV759MqU0C+Dl6JG8TPW8PqnqlsB4qushdi9Ejw Jul 10 00:43:48.193000 audit[1347]: CRED_ACQ pid=1347 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:43:48.194000 audit[1347]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc3ebf7380 a2=3 a3=0 items=0 ppid=1 pid=1347 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:43:48.194000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 10 00:43:48.195117 sshd[1347]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 00:43:48.198046 systemd-logind[1194]: New session 9 of user core. Jul 10 00:43:48.198721 systemd[1]: Started session-9.scope. Jul 10 00:43:48.200000 audit[1347]: USER_START pid=1347 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:43:48.201000 audit[1350]: CRED_ACQ pid=1350 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:43:48.247000 audit[1351]: USER_ACCT pid=1351 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 10 00:43:48.247000 audit[1351]: CRED_REFR pid=1351 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 10 00:43:48.248732 sudo[1351]: core : PWD=/home/core ; USER=root ; COMMAND=/home/core/install.sh Jul 10 00:43:48.248939 sudo[1351]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Jul 10 00:43:48.249000 audit[1351]: USER_START pid=1351 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 10 00:43:48.276249 systemd[1]: Starting docker.service... Jul 10 00:43:48.316139 env[1363]: time="2025-07-10T00:43:48.316067523Z" level=info msg="Starting up" Jul 10 00:43:48.317257 env[1363]: time="2025-07-10T00:43:48.317240101Z" level=info msg="parsed scheme: \"unix\"" module=grpc Jul 10 00:43:48.317257 env[1363]: time="2025-07-10T00:43:48.317255304Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Jul 10 00:43:48.317349 env[1363]: time="2025-07-10T00:43:48.317277808Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Jul 10 00:43:48.317349 env[1363]: time="2025-07-10T00:43:48.317325723Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Jul 10 00:43:48.321461 env[1363]: time="2025-07-10T00:43:48.320033463Z" level=info msg="parsed scheme: \"unix\"" module=grpc Jul 10 00:43:48.321461 env[1363]: time="2025-07-10T00:43:48.320045810Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Jul 10 00:43:48.321461 env[1363]: time="2025-07-10T00:43:48.320055977Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Jul 10 00:43:48.321461 env[1363]: time="2025-07-10T00:43:48.320062961Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Jul 10 00:43:49.098814 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 1. Jul 10 00:43:49.097000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:43:49.097000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:43:49.099074 systemd[1]: Stopped kubelet.service. Jul 10 00:43:49.099147 systemd[1]: kubelet.service: Consumed 2.304s CPU time. Jul 10 00:43:49.100661 systemd[1]: Starting kubelet.service... Jul 10 00:43:49.270312 systemd[1]: Started kubelet.service. Jul 10 00:43:49.269000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:43:49.333869 kubelet[1378]: E0710 00:43:49.333768 1378 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Jul 10 00:43:49.338214 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Jul 10 00:43:49.338367 systemd[1]: kubelet.service: Failed with result 'exit-code'. Jul 10 00:43:49.337000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Jul 10 00:43:50.673322 env[1363]: time="2025-07-10T00:43:50.673243652Z" level=info msg="Loading containers: start." Jul 10 00:43:50.723000 audit[1410]: NETFILTER_CFG table=nat:2 family=2 entries=2 op=nft_register_chain pid=1410 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:43:50.723000 audit[1410]: SYSCALL arch=c000003e syscall=46 success=yes exit=116 a0=3 a1=7ffc61550870 a2=0 a3=7ffc6155085c items=0 ppid=1363 pid=1410 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:43:50.723000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4E00444F434B4552 Jul 10 00:43:50.724000 audit[1412]: NETFILTER_CFG table=filter:3 family=2 entries=2 op=nft_register_chain pid=1412 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:43:50.724000 audit[1412]: SYSCALL arch=c000003e syscall=46 success=yes exit=124 a0=3 a1=7ffff02a9940 a2=0 a3=7ffff02a992c items=0 ppid=1363 pid=1412 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:43:50.724000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B4552 Jul 10 00:43:50.726000 audit[1414]: NETFILTER_CFG table=filter:4 family=2 entries=1 op=nft_register_chain pid=1414 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:43:50.726000 audit[1414]: SYSCALL arch=c000003e syscall=46 success=yes exit=112 a0=3 a1=7fff83e31c90 a2=0 a3=7fff83e31c7c items=0 ppid=1363 pid=1414 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:43:50.726000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D31 Jul 10 00:43:50.727000 audit[1416]: NETFILTER_CFG table=filter:5 family=2 entries=1 op=nft_register_chain pid=1416 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:43:50.727000 audit[1416]: SYSCALL arch=c000003e syscall=46 success=yes exit=112 a0=3 a1=7ffda5b92c80 a2=0 a3=7ffda5b92c6c items=0 ppid=1363 pid=1416 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:43:50.727000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D32 Jul 10 00:43:50.729000 audit[1418]: NETFILTER_CFG table=filter:6 family=2 entries=1 op=nft_register_rule pid=1418 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:43:50.729000 audit[1418]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7fffdf376670 a2=0 a3=7fffdf37665c items=0 ppid=1363 pid=1418 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:43:50.729000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D31002D6A0052455455524E Jul 10 00:43:50.746000 audit[1423]: NETFILTER_CFG table=filter:7 family=2 entries=1 op=nft_register_rule pid=1423 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:43:50.746000 audit[1423]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffd85188cf0 a2=0 a3=7ffd85188cdc items=0 ppid=1363 pid=1423 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:43:50.746000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D32002D6A0052455455524E Jul 10 00:43:51.339000 audit[1425]: NETFILTER_CFG table=filter:8 family=2 entries=1 op=nft_register_chain pid=1425 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:43:51.339000 audit[1425]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffc0a124b60 a2=0 a3=7ffc0a124b4c items=0 ppid=1363 pid=1425 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:43:51.339000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D55534552 Jul 10 00:43:51.341000 audit[1427]: NETFILTER_CFG table=filter:9 family=2 entries=1 op=nft_register_rule pid=1427 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:43:51.341000 audit[1427]: SYSCALL arch=c000003e syscall=46 success=yes exit=212 a0=3 a1=7fff4e310fa0 a2=0 a3=7fff4e310f8c items=0 ppid=1363 pid=1427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:43:51.341000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D55534552002D6A0052455455524E Jul 10 00:43:51.343000 audit[1429]: NETFILTER_CFG table=filter:10 family=2 entries=2 op=nft_register_chain pid=1429 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:43:51.343000 audit[1429]: SYSCALL arch=c000003e syscall=46 success=yes exit=308 a0=3 a1=7ffdc13487a0 a2=0 a3=7ffdc134878c items=0 ppid=1363 pid=1429 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:43:51.343000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Jul 10 00:43:51.476000 audit[1433]: NETFILTER_CFG table=filter:11 family=2 entries=1 op=nft_unregister_rule pid=1433 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:43:51.476000 audit[1433]: SYSCALL arch=c000003e syscall=46 success=yes exit=216 a0=3 a1=7ffd8b9e4950 a2=0 a3=7ffd8b9e493c items=0 ppid=1363 pid=1433 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:43:51.476000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Jul 10 00:43:51.486000 audit[1434]: NETFILTER_CFG table=filter:12 family=2 entries=1 op=nft_register_rule pid=1434 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:43:51.486000 audit[1434]: SYSCALL arch=c000003e syscall=46 success=yes exit=224 a0=3 a1=7ffe01304ac0 a2=0 a3=7ffe01304aac items=0 ppid=1363 pid=1434 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:43:51.486000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Jul 10 00:43:51.495863 kernel: Initializing XFRM netlink socket Jul 10 00:43:51.527173 env[1363]: time="2025-07-10T00:43:51.527117568Z" level=info msg="Default bridge (docker0) is assigned with an IP address 172.17.0.0/16. Daemon option --bip can be used to set a preferred IP address" Jul 10 00:43:51.545000 audit[1442]: NETFILTER_CFG table=nat:13 family=2 entries=2 op=nft_register_chain pid=1442 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:43:51.545000 audit[1442]: SYSCALL arch=c000003e syscall=46 success=yes exit=492 a0=3 a1=7ffcd43a0700 a2=0 a3=7ffcd43a06ec items=0 ppid=1363 pid=1442 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:43:51.545000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900504F5354524F5554494E47002D73003137322E31372E302E302F31360000002D6F00646F636B657230002D6A004D415351554552414445 Jul 10 00:43:51.558000 audit[1445]: NETFILTER_CFG table=nat:14 family=2 entries=1 op=nft_register_rule pid=1445 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:43:51.558000 audit[1445]: SYSCALL arch=c000003e syscall=46 success=yes exit=288 a0=3 a1=7ffd86881430 a2=0 a3=7ffd8688141c items=0 ppid=1363 pid=1445 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:43:51.558000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900444F434B4552002D6900646F636B657230002D6A0052455455524E Jul 10 00:43:51.562000 audit[1448]: NETFILTER_CFG table=filter:15 family=2 entries=1 op=nft_register_rule pid=1448 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:43:51.562000 audit[1448]: SYSCALL arch=c000003e syscall=46 success=yes exit=376 a0=3 a1=7ffcdc25d200 a2=0 a3=7ffcdc25d1ec items=0 ppid=1363 pid=1448 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:43:51.562000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B657230002D6F00646F636B657230002D6A00414343455054 Jul 10 00:43:51.564000 audit[1450]: NETFILTER_CFG table=filter:16 family=2 entries=1 op=nft_register_rule pid=1450 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:43:51.564000 audit[1450]: SYSCALL arch=c000003e syscall=46 success=yes exit=376 a0=3 a1=7ffe65816ec0 a2=0 a3=7ffe65816eac items=0 ppid=1363 pid=1450 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:43:51.564000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B6572300000002D6F00646F636B657230002D6A00414343455054 Jul 10 00:43:51.566000 audit[1452]: NETFILTER_CFG table=nat:17 family=2 entries=2 op=nft_register_chain pid=1452 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:43:51.566000 audit[1452]: SYSCALL arch=c000003e syscall=46 success=yes exit=356 a0=3 a1=7ffefc235fe0 a2=0 a3=7ffefc235fcc items=0 ppid=1363 pid=1452 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:43:51.566000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4100505245524F5554494E47002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B4552 Jul 10 00:43:51.568000 audit[1454]: NETFILTER_CFG table=nat:18 family=2 entries=2 op=nft_register_chain pid=1454 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:43:51.568000 audit[1454]: SYSCALL arch=c000003e syscall=46 success=yes exit=444 a0=3 a1=7fffe026a770 a2=0 a3=7fffe026a75c items=0 ppid=1363 pid=1454 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:43:51.568000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D41004F5554505554002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B45520000002D2D647374003132372E302E302E302F38 Jul 10 00:43:51.570000 audit[1456]: NETFILTER_CFG table=filter:19 family=2 entries=1 op=nft_register_rule pid=1456 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:43:51.570000 audit[1456]: SYSCALL arch=c000003e syscall=46 success=yes exit=304 a0=3 a1=7ffddf9c82c0 a2=0 a3=7ffddf9c82ac items=0 ppid=1363 pid=1456 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:43:51.570000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6A00444F434B4552 Jul 10 00:43:51.578000 audit[1459]: NETFILTER_CFG table=filter:20 family=2 entries=1 op=nft_register_rule pid=1459 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:43:51.578000 audit[1459]: SYSCALL arch=c000003e syscall=46 success=yes exit=508 a0=3 a1=7ffedbd62bc0 a2=0 a3=7ffedbd62bac items=0 ppid=1363 pid=1459 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:43:51.578000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6D00636F6E6E747261636B002D2D637473746174650052454C415445442C45535441424C4953484544002D6A00414343455054 Jul 10 00:43:51.580000 audit[1461]: NETFILTER_CFG table=filter:21 family=2 entries=1 op=nft_register_rule pid=1461 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:43:51.580000 audit[1461]: SYSCALL arch=c000003e syscall=46 success=yes exit=240 a0=3 a1=7ffddc9eada0 a2=0 a3=7ffddc9ead8c items=0 ppid=1363 pid=1461 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:43:51.580000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D31 Jul 10 00:43:51.582000 audit[1463]: NETFILTER_CFG table=filter:22 family=2 entries=1 op=nft_register_rule pid=1463 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:43:51.582000 audit[1463]: SYSCALL arch=c000003e syscall=46 success=yes exit=428 a0=3 a1=7ffcaf3e82c0 a2=0 a3=7ffcaf3e82ac items=0 ppid=1363 pid=1463 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:43:51.582000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D31002D6900646F636B6572300000002D6F00646F636B657230002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D32 Jul 10 00:43:51.584000 audit[1465]: NETFILTER_CFG table=filter:23 family=2 entries=1 op=nft_register_rule pid=1465 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:43:51.584000 audit[1465]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7fff7546e2f0 a2=0 a3=7fff7546e2dc items=0 ppid=1363 pid=1465 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:43:51.584000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D32002D6F00646F636B657230002D6A0044524F50 Jul 10 00:43:51.585931 systemd-networkd[1027]: docker0: Link UP Jul 10 00:43:51.847000 audit[1469]: NETFILTER_CFG table=filter:24 family=2 entries=1 op=nft_unregister_rule pid=1469 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:43:51.847000 audit[1469]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffc0d702690 a2=0 a3=7ffc0d70267c items=0 ppid=1363 pid=1469 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:43:51.847000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Jul 10 00:43:51.853000 audit[1470]: NETFILTER_CFG table=filter:25 family=2 entries=1 op=nft_register_rule pid=1470 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:43:51.853000 audit[1470]: SYSCALL arch=c000003e syscall=46 success=yes exit=224 a0=3 a1=7fff54fe1800 a2=0 a3=7fff54fe17ec items=0 ppid=1363 pid=1470 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:43:51.853000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Jul 10 00:43:51.856067 env[1363]: time="2025-07-10T00:43:51.855314985Z" level=info msg="Loading containers: done." Jul 10 00:43:51.873469 env[1363]: time="2025-07-10T00:43:51.873393599Z" level=warning msg="Not using native diff for overlay2, this may cause degraded performance for building images: kernel has CONFIG_OVERLAY_FS_REDIRECT_DIR enabled" storage-driver=overlay2 Jul 10 00:43:51.873647 env[1363]: time="2025-07-10T00:43:51.873618579Z" level=info msg="Docker daemon" commit=112bdf3343 graphdriver(s)=overlay2 version=20.10.23 Jul 10 00:43:51.873804 env[1363]: time="2025-07-10T00:43:51.873758406Z" level=info msg="Daemon has completed initialization" Jul 10 00:43:51.897531 systemd[1]: Started docker.service. Jul 10 00:43:51.896000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=docker comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:43:51.901294 env[1363]: time="2025-07-10T00:43:51.901211922Z" level=info msg="API listen on /run/docker.sock" Jul 10 00:43:52.413080 env[1210]: time="2025-07-10T00:43:52.413014870Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.33.2\"" Jul 10 00:43:53.845987 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3636698185.mount: Deactivated successfully. Jul 10 00:43:55.765532 env[1210]: time="2025-07-10T00:43:55.765439319Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver:v1.33.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:43:55.768962 env[1210]: time="2025-07-10T00:43:55.768909097Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:ee794efa53d856b7e291320be3cd6390fa2e113c3f258a21290bc27fc214233e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:43:55.771974 env[1210]: time="2025-07-10T00:43:55.771919441Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-apiserver:v1.33.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:43:55.774240 env[1210]: time="2025-07-10T00:43:55.774205649Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver@sha256:e8ae58675899e946fabe38425f2b3bfd33120b7930d05b5898de97c81a7f6137,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:43:55.775205 env[1210]: time="2025-07-10T00:43:55.775132930Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.33.2\" returns image reference \"sha256:ee794efa53d856b7e291320be3cd6390fa2e113c3f258a21290bc27fc214233e\"" Jul 10 00:43:55.775940 env[1210]: time="2025-07-10T00:43:55.775908681Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.33.2\"" Jul 10 00:43:57.777688 env[1210]: time="2025-07-10T00:43:57.777613033Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager:v1.33.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:43:57.779564 env[1210]: time="2025-07-10T00:43:57.779518935Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:ff4f56c76b82d6cda0555115a0fe479d5dd612264b85efb9cc14b1b4b937bdf2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:43:57.783133 env[1210]: time="2025-07-10T00:43:57.783083363Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-controller-manager:v1.33.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:43:57.784871 env[1210]: time="2025-07-10T00:43:57.784834539Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager@sha256:2236e72a4be5dcc9c04600353ff8849db1557f5364947c520ff05471ae719081,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:43:57.785663 env[1210]: time="2025-07-10T00:43:57.785637643Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.33.2\" returns image reference \"sha256:ff4f56c76b82d6cda0555115a0fe479d5dd612264b85efb9cc14b1b4b937bdf2\"" Jul 10 00:43:57.786117 env[1210]: time="2025-07-10T00:43:57.786092103Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.33.2\"" Jul 10 00:43:59.348666 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 2. Jul 10 00:43:59.348896 systemd[1]: Stopped kubelet.service. Jul 10 00:43:59.348000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:43:59.350345 systemd[1]: Starting kubelet.service... Jul 10 00:43:59.351360 kernel: kauditd_printk_skb: 88 callbacks suppressed Jul 10 00:43:59.351415 kernel: audit: type=1130 audit(1752108239.348:236): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:43:59.348000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:43:59.357751 kernel: audit: type=1131 audit(1752108239.348:237): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:43:59.450605 systemd[1]: Started kubelet.service. Jul 10 00:43:59.454937 kernel: audit: type=1130 audit(1752108239.450:238): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:43:59.450000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:43:59.495315 kubelet[1511]: E0710 00:43:59.495236 1511 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Jul 10 00:43:59.497517 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Jul 10 00:43:59.497690 systemd[1]: kubelet.service: Failed with result 'exit-code'. Jul 10 00:43:59.497000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Jul 10 00:43:59.501867 kernel: audit: type=1131 audit(1752108239.497:239): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Jul 10 00:44:01.700009 env[1210]: time="2025-07-10T00:44:01.699928674Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler:v1.33.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:44:01.704646 env[1210]: time="2025-07-10T00:44:01.704572446Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:cfed1ff7489289d4e8d796b0d95fd251990403510563cf843912f42ab9718a7b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:44:01.707597 env[1210]: time="2025-07-10T00:44:01.707543892Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-scheduler:v1.33.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:44:01.709771 env[1210]: time="2025-07-10T00:44:01.709727169Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler@sha256:304c28303133be7d927973bc9bd6c83945b3735c59d283c25b63d5b9ed53bca3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:44:01.710508 env[1210]: time="2025-07-10T00:44:01.710469640Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.33.2\" returns image reference \"sha256:cfed1ff7489289d4e8d796b0d95fd251990403510563cf843912f42ab9718a7b\"" Jul 10 00:44:01.710984 env[1210]: time="2025-07-10T00:44:01.710957606Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.33.2\"" Jul 10 00:44:03.039730 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2013831314.mount: Deactivated successfully. Jul 10 00:44:04.034703 env[1210]: time="2025-07-10T00:44:04.034616765Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy:v1.33.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:44:04.036211 env[1210]: time="2025-07-10T00:44:04.036169782Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:661d404f36f01cd854403fd3540f18dcf0342d22bd9c6516bb9de234ac183b19,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:44:04.037457 env[1210]: time="2025-07-10T00:44:04.037416707Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-proxy:v1.33.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:44:04.039119 env[1210]: time="2025-07-10T00:44:04.039061480Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy@sha256:4796ef3e43efa5ed2a5b015c18f81d3c2fe3aea36f555ea643cc01827eb65e51,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:44:04.039519 env[1210]: time="2025-07-10T00:44:04.039474845Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.33.2\" returns image reference \"sha256:661d404f36f01cd854403fd3540f18dcf0342d22bd9c6516bb9de234ac183b19\"" Jul 10 00:44:04.040246 env[1210]: time="2025-07-10T00:44:04.040189048Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.12.0\"" Jul 10 00:44:04.501688 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1164985948.mount: Deactivated successfully. Jul 10 00:44:06.726433 env[1210]: time="2025-07-10T00:44:06.726366297Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns:v1.12.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:44:06.728078 env[1210]: time="2025-07-10T00:44:06.728022271Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:1cf5f116067c67da67f97bff78c4bbc76913f59057c18627b96facaced73ea0b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:44:06.729598 env[1210]: time="2025-07-10T00:44:06.729567096Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/coredns/coredns:v1.12.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:44:06.732067 env[1210]: time="2025-07-10T00:44:06.732041841Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns@sha256:40384aa1f5ea6bfdc77997d243aec73da05f27aed0c5e9d65bfa98933c519d97,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:44:06.732747 env[1210]: time="2025-07-10T00:44:06.732713469Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.12.0\" returns image reference \"sha256:1cf5f116067c67da67f97bff78c4bbc76913f59057c18627b96facaced73ea0b\"" Jul 10 00:44:06.733183 env[1210]: time="2025-07-10T00:44:06.733151775Z" level=info msg="PullImage \"registry.k8s.io/pause:3.10\"" Jul 10 00:44:07.475087 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount605611445.mount: Deactivated successfully. Jul 10 00:44:07.480601 env[1210]: time="2025-07-10T00:44:07.480552955Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:44:07.482329 env[1210]: time="2025-07-10T00:44:07.482284240Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:873ed75102791e5b0b8a7fcd41606c92fcec98d56d05ead4ac5131650004c136,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:44:07.483802 env[1210]: time="2025-07-10T00:44:07.483764130Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:44:07.485167 env[1210]: time="2025-07-10T00:44:07.485112747Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:ee6521f290b2168b6e0935a181d4cff9be1ac3f505666ef0e3c98fae8199917a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:44:07.485675 env[1210]: time="2025-07-10T00:44:07.485637132Z" level=info msg="PullImage \"registry.k8s.io/pause:3.10\" returns image reference \"sha256:873ed75102791e5b0b8a7fcd41606c92fcec98d56d05ead4ac5131650004c136\"" Jul 10 00:44:07.486218 env[1210]: time="2025-07-10T00:44:07.486191547Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.21-0\"" Jul 10 00:44:07.924775 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3329450421.mount: Deactivated successfully. Jul 10 00:44:09.598696 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 3. Jul 10 00:44:09.607502 kernel: audit: type=1130 audit(1752108249.597:240): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:44:09.607744 kernel: audit: type=1131 audit(1752108249.597:241): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:44:09.597000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:44:09.597000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:44:09.598927 systemd[1]: Stopped kubelet.service. Jul 10 00:44:09.600341 systemd[1]: Starting kubelet.service... Jul 10 00:44:09.740730 systemd[1]: Started kubelet.service. Jul 10 00:44:09.736000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:44:09.744875 kernel: audit: type=1130 audit(1752108249.736:242): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:44:09.910125 kubelet[1522]: E0710 00:44:09.909996 1522 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Jul 10 00:44:09.912057 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Jul 10 00:44:09.912177 systemd[1]: kubelet.service: Failed with result 'exit-code'. Jul 10 00:44:09.910000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Jul 10 00:44:09.915874 kernel: audit: type=1131 audit(1752108249.910:243): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Jul 10 00:44:12.233729 env[1210]: time="2025-07-10T00:44:12.233650753Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd:3.5.21-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:44:12.235442 env[1210]: time="2025-07-10T00:44:12.235382570Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:499038711c0816eda03a1ad96a8eb0440c005baa6949698223c6176b7f5077e1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:44:12.237986 env[1210]: time="2025-07-10T00:44:12.237923715Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/etcd:3.5.21-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:44:12.240001 env[1210]: time="2025-07-10T00:44:12.239968603Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd@sha256:d58c035df557080a27387d687092e3fc2b64c6d0e3162dc51453a115f847d121,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:44:12.240992 env[1210]: time="2025-07-10T00:44:12.240962151Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.21-0\" returns image reference \"sha256:499038711c0816eda03a1ad96a8eb0440c005baa6949698223c6176b7f5077e1\"" Jul 10 00:44:14.579957 systemd[1]: Stopped kubelet.service. Jul 10 00:44:14.579000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:44:14.582404 systemd[1]: Starting kubelet.service... Jul 10 00:44:14.586520 kernel: audit: type=1130 audit(1752108254.579:244): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:44:14.586670 kernel: audit: type=1131 audit(1752108254.579:245): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:44:14.579000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:44:14.607624 systemd[1]: Reloading. Jul 10 00:44:14.669370 /usr/lib/systemd/system-generators/torcx-generator[1579]: time="2025-07-10T00:44:14Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.7 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.7 /var/lib/torcx/store]" Jul 10 00:44:14.669738 /usr/lib/systemd/system-generators/torcx-generator[1579]: time="2025-07-10T00:44:14Z" level=info msg="torcx already run" Jul 10 00:44:15.248643 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Jul 10 00:44:15.248660 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Jul 10 00:44:15.265477 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Jul 10 00:44:15.326000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:15.326000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:15.334047 kernel: audit: type=1400 audit(1752108255.326:246): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:15.334113 kernel: audit: type=1400 audit(1752108255.326:247): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:15.334142 kernel: audit: type=1400 audit(1752108255.326:248): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:15.326000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:15.326000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:15.326000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:15.342493 kernel: audit: type=1400 audit(1752108255.326:249): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:15.342534 kernel: audit: type=1400 audit(1752108255.326:250): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:15.342554 kernel: audit: type=1400 audit(1752108255.326:251): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:15.326000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:15.345289 kernel: audit: type=1400 audit(1752108255.326:252): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:15.326000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:15.348204 kernel: audit: type=1400 audit(1752108255.326:253): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:15.326000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:15.350959 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Jul 10 00:44:15.350998 kernel: audit: type=1400 audit(1752108255.326:254): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:15.326000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:15.333000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:15.333000 audit: BPF prog-id=40 op=LOAD Jul 10 00:44:15.333000 audit: BPF prog-id=34 op=UNLOAD Jul 10 00:44:15.333000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:15.333000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:15.333000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:15.333000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:15.333000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:15.333000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:15.333000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:15.333000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:15.333000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:15.336000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:15.336000 audit: BPF prog-id=41 op=LOAD Jul 10 00:44:15.336000 audit: BPF prog-id=33 op=UNLOAD Jul 10 00:44:15.336000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:15.336000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:15.336000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:15.336000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:15.336000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:15.336000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:15.336000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:15.336000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:15.336000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:15.338000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:15.338000 audit: BPF prog-id=42 op=LOAD Jul 10 00:44:15.338000 audit: BPF prog-id=24 op=UNLOAD Jul 10 00:44:15.339000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:15.339000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:15.339000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:15.339000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:15.339000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:15.339000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:15.339000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:15.339000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:15.339000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:15.341000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:15.341000 audit: BPF prog-id=43 op=LOAD Jul 10 00:44:15.341000 audit: BPF prog-id=25 op=UNLOAD Jul 10 00:44:15.341000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:15.341000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:15.341000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:15.341000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:15.341000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:15.341000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:15.341000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:15.341000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:15.344000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:15.344000 audit: BPF prog-id=44 op=LOAD Jul 10 00:44:15.344000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:15.344000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:15.344000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:15.344000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:15.344000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:15.344000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:15.344000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:15.344000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:15.347000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:15.347000 audit: BPF prog-id=45 op=LOAD Jul 10 00:44:15.347000 audit: BPF prog-id=26 op=UNLOAD Jul 10 00:44:15.347000 audit: BPF prog-id=27 op=UNLOAD Jul 10 00:44:15.347000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:15.347000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:15.347000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:15.350000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:15.353000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:15.353000 audit: BPF prog-id=46 op=LOAD Jul 10 00:44:15.353000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:15.353000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:15.353000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:15.353000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:15.353000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:15.353000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:15.353000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:15.353000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:15.353000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:15.353000 audit: BPF prog-id=47 op=LOAD Jul 10 00:44:15.353000 audit: BPF prog-id=28 op=UNLOAD Jul 10 00:44:15.353000 audit: BPF prog-id=29 op=UNLOAD Jul 10 00:44:15.355000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:15.355000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:15.355000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:15.355000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:15.355000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:15.355000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:15.355000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:15.355000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:15.355000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:15.356000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:15.356000 audit: BPF prog-id=48 op=LOAD Jul 10 00:44:15.356000 audit: BPF prog-id=35 op=UNLOAD Jul 10 00:44:15.356000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:15.356000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:15.356000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:15.356000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:15.356000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:15.356000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:15.356000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:15.356000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:15.356000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:15.356000 audit: BPF prog-id=49 op=LOAD Jul 10 00:44:15.356000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:15.356000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:15.356000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:15.356000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:15.356000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:15.356000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:15.356000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:15.356000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:15.356000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:15.356000 audit: BPF prog-id=50 op=LOAD Jul 10 00:44:15.356000 audit: BPF prog-id=36 op=UNLOAD Jul 10 00:44:15.356000 audit: BPF prog-id=37 op=UNLOAD Jul 10 00:44:15.356000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:15.356000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:15.356000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:15.356000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:15.356000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:15.356000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:15.356000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:15.356000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:15.356000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:15.356000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:15.356000 audit: BPF prog-id=51 op=LOAD Jul 10 00:44:15.357000 audit: BPF prog-id=30 op=UNLOAD Jul 10 00:44:15.357000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:15.357000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:15.357000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:15.357000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:15.357000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:15.357000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:15.357000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:15.357000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:15.357000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:15.357000 audit: BPF prog-id=52 op=LOAD Jul 10 00:44:15.357000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:15.357000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:15.357000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:15.357000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:15.357000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:15.357000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:15.357000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:15.357000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:15.357000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:15.357000 audit: BPF prog-id=53 op=LOAD Jul 10 00:44:15.357000 audit: BPF prog-id=31 op=UNLOAD Jul 10 00:44:15.357000 audit: BPF prog-id=32 op=UNLOAD Jul 10 00:44:15.357000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:15.357000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:15.357000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:15.357000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:15.357000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:15.357000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:15.357000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:15.357000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:15.357000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:15.357000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:15.357000 audit: BPF prog-id=54 op=LOAD Jul 10 00:44:15.357000 audit: BPF prog-id=38 op=UNLOAD Jul 10 00:44:15.370344 systemd[1]: Started kubelet.service. Jul 10 00:44:15.369000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:44:15.371891 systemd[1]: Stopping kubelet.service... Jul 10 00:44:15.372147 systemd[1]: kubelet.service: Deactivated successfully. Jul 10 00:44:15.372305 systemd[1]: Stopped kubelet.service. Jul 10 00:44:15.371000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:44:15.373631 systemd[1]: Starting kubelet.service... Jul 10 00:44:15.462722 systemd[1]: Started kubelet.service. Jul 10 00:44:15.462000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:44:15.499556 kubelet[1627]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Jul 10 00:44:15.499556 kubelet[1627]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.35. Image garbage collector will get sandbox image information from CRI. Jul 10 00:44:15.499556 kubelet[1627]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Jul 10 00:44:15.499556 kubelet[1627]: I0710 00:44:15.499540 1627 server.go:212] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Jul 10 00:44:15.776276 kubelet[1627]: I0710 00:44:15.776143 1627 server.go:530] "Kubelet version" kubeletVersion="v1.33.0" Jul 10 00:44:15.776276 kubelet[1627]: I0710 00:44:15.776175 1627 server.go:532] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Jul 10 00:44:15.776472 kubelet[1627]: I0710 00:44:15.776454 1627 server.go:956] "Client rotation is on, will bootstrap in background" Jul 10 00:44:15.813820 kubelet[1627]: E0710 00:44:15.813743 1627 certificate_manager.go:596] "Failed while requesting a signed certificate from the control plane" err="cannot create certificate signing request: Post \"https://10.0.0.116:6443/apis/certificates.k8s.io/v1/certificatesigningrequests\": dial tcp 10.0.0.116:6443: connect: connection refused" logger="kubernetes.io/kube-apiserver-client-kubelet.UnhandledError" Jul 10 00:44:15.814012 kubelet[1627]: I0710 00:44:15.813987 1627 dynamic_cafile_content.go:161] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Jul 10 00:44:15.821532 kubelet[1627]: E0710 00:44:15.821492 1627 log.go:32] "RuntimeConfig from runtime service failed" err="rpc error: code = Unimplemented desc = unknown method RuntimeConfig for service runtime.v1.RuntimeService" Jul 10 00:44:15.821532 kubelet[1627]: I0710 00:44:15.821525 1627 server.go:1423] "CRI implementation should be updated to support RuntimeConfig when KubeletCgroupDriverFromCRI feature gate has been enabled. Falling back to using cgroupDriver from kubelet config." Jul 10 00:44:15.829101 kubelet[1627]: I0710 00:44:15.829046 1627 server.go:782] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Jul 10 00:44:15.829394 kubelet[1627]: I0710 00:44:15.829355 1627 container_manager_linux.go:267] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Jul 10 00:44:15.829583 kubelet[1627]: I0710 00:44:15.829382 1627 container_manager_linux.go:272] "Creating Container Manager object based on Node Config" nodeConfig={"NodeName":"localhost","RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"MemoryManagerPolicy":"None","MemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null,"CgroupVersion":2} Jul 10 00:44:15.829759 kubelet[1627]: I0710 00:44:15.829596 1627 topology_manager.go:138] "Creating topology manager with none policy" Jul 10 00:44:15.829759 kubelet[1627]: I0710 00:44:15.829606 1627 container_manager_linux.go:303] "Creating device plugin manager" Jul 10 00:44:15.830547 kubelet[1627]: I0710 00:44:15.830516 1627 state_mem.go:36] "Initialized new in-memory state store" Jul 10 00:44:15.833458 kubelet[1627]: I0710 00:44:15.833431 1627 kubelet.go:480] "Attempting to sync node with API server" Jul 10 00:44:15.833516 kubelet[1627]: I0710 00:44:15.833461 1627 kubelet.go:375] "Adding static pod path" path="/etc/kubernetes/manifests" Jul 10 00:44:15.833516 kubelet[1627]: I0710 00:44:15.833497 1627 kubelet.go:386] "Adding apiserver pod source" Jul 10 00:44:15.833574 kubelet[1627]: I0710 00:44:15.833519 1627 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Jul 10 00:44:15.853587 kubelet[1627]: E0710 00:44:15.853507 1627 reflector.go:200] "Failed to watch" err="failed to list *v1.Service: Get \"https://10.0.0.116:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0\": dial tcp 10.0.0.116:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.Service" Jul 10 00:44:15.861634 kubelet[1627]: E0710 00:44:15.861582 1627 reflector.go:200] "Failed to watch" err="failed to list *v1.Node: Get \"https://10.0.0.116:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0\": dial tcp 10.0.0.116:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.Node" Jul 10 00:44:15.865163 kubelet[1627]: I0710 00:44:15.865128 1627 kuberuntime_manager.go:279] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Jul 10 00:44:15.865931 kubelet[1627]: I0710 00:44:15.865908 1627 kubelet.go:935] "Not starting ClusterTrustBundle informer because we are in static kubelet mode or the ClusterTrustBundleProjection featuregate is disabled" Jul 10 00:44:15.866977 kubelet[1627]: W0710 00:44:15.866949 1627 probe.go:272] Flexvolume plugin directory at /opt/libexec/kubernetes/kubelet-plugins/volume/exec/ does not exist. Recreating. Jul 10 00:44:15.869745 kubelet[1627]: I0710 00:44:15.869719 1627 watchdog_linux.go:99] "Systemd watchdog is not enabled" Jul 10 00:44:15.869797 kubelet[1627]: I0710 00:44:15.869768 1627 server.go:1289] "Started kubelet" Jul 10 00:44:15.870036 kubelet[1627]: I0710 00:44:15.869964 1627 ratelimit.go:55] "Setting rate limiting for endpoint" service="podresources" qps=100 burstTokens=10 Jul 10 00:44:15.870000 audit[1627]: AVC avc: denied { mac_admin } for pid=1627 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:15.870000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 10 00:44:15.870000 audit[1627]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000cbf200 a1=c000203d70 a2=c000cbf1d0 a3=25 items=0 ppid=1 pid=1627 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:44:15.870000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 10 00:44:15.870000 audit[1627]: AVC avc: denied { mac_admin } for pid=1627 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:15.870000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 10 00:44:15.870000 audit[1627]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000cd03a0 a1=c000203d88 a2=c000cbf290 a3=25 items=0 ppid=1 pid=1627 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:44:15.870000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 10 00:44:15.871532 kubelet[1627]: I0710 00:44:15.870965 1627 kubelet.go:1552] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins_registry: invalid argument" Jul 10 00:44:15.871532 kubelet[1627]: I0710 00:44:15.871014 1627 kubelet.go:1556] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins: invalid argument" Jul 10 00:44:15.872940 kubelet[1627]: I0710 00:44:15.872912 1627 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Jul 10 00:44:15.873674 kubelet[1627]: I0710 00:44:15.873636 1627 server.go:180] "Starting to listen" address="0.0.0.0" port=10250 Jul 10 00:44:15.875038 kubelet[1627]: I0710 00:44:15.875011 1627 server.go:317] "Adding debug handlers to kubelet server" Jul 10 00:44:15.875919 kubelet[1627]: I0710 00:44:15.875887 1627 server.go:255] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Jul 10 00:44:15.876415 kubelet[1627]: I0710 00:44:15.876389 1627 dynamic_serving_content.go:135] "Starting controller" name="kubelet-server-cert-files::/var/lib/kubelet/pki/kubelet.crt::/var/lib/kubelet/pki/kubelet.key" Jul 10 00:44:15.876712 kubelet[1627]: E0710 00:44:15.876695 1627 kubelet.go:1600] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Jul 10 00:44:15.876832 kubelet[1627]: E0710 00:44:15.876818 1627 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 10 00:44:15.876959 kubelet[1627]: I0710 00:44:15.876943 1627 volume_manager.go:297] "Starting Kubelet Volume Manager" Jul 10 00:44:15.877227 kubelet[1627]: I0710 00:44:15.877210 1627 desired_state_of_world_populator.go:150] "Desired state populator starts to run" Jul 10 00:44:15.877364 kubelet[1627]: I0710 00:44:15.877350 1627 reconciler.go:26] "Reconciler: start to sync state" Jul 10 00:44:15.877768 kubelet[1627]: E0710 00:44:15.877749 1627 reflector.go:200] "Failed to watch" err="failed to list *v1.CSIDriver: Get \"https://10.0.0.116:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0\": dial tcp 10.0.0.116:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.CSIDriver" Jul 10 00:44:15.887805 kubelet[1627]: E0710 00:44:15.887732 1627 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.116:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.116:6443: connect: connection refused" interval="200ms" Jul 10 00:44:15.887805 kubelet[1627]: E0710 00:44:15.875903 1627 event.go:368] "Unable to write event (may retry after sleeping)" err="Post \"https://10.0.0.116:6443/api/v1/namespaces/default/events\": dial tcp 10.0.0.116:6443: connect: connection refused" event="&Event{ObjectMeta:{localhost.1850bd2cf7251fa2 default 0 0001-01-01 00:00:00 +0000 UTC map[] map[] [] [] []},InvolvedObject:ObjectReference{Kind:Node,Namespace:,Name:localhost,UID:localhost,APIVersion:,ResourceVersion:,FieldPath:,},Reason:Starting,Message:Starting kubelet.,Source:EventSource{Component:kubelet,Host:localhost,},FirstTimestamp:2025-07-10 00:44:15.869738914 +0000 UTC m=+0.402708357,LastTimestamp:2025-07-10 00:44:15.869738914 +0000 UTC m=+0.402708357,Count:1,Type:Normal,EventTime:0001-01-01 00:00:00 +0000 UTC,Series:nil,Action:,Related:nil,ReportingController:kubelet,ReportingInstance:localhost,}" Jul 10 00:44:15.888108 kubelet[1627]: I0710 00:44:15.888066 1627 factory.go:223] Registration of the systemd container factory successfully Jul 10 00:44:15.888193 kubelet[1627]: I0710 00:44:15.888164 1627 factory.go:221] Registration of the crio container factory failed: Get "http://%2Fvar%2Frun%2Fcrio%2Fcrio.sock/info": dial unix /var/run/crio/crio.sock: connect: no such file or directory Jul 10 00:44:15.889029 kubelet[1627]: I0710 00:44:15.889011 1627 factory.go:223] Registration of the containerd container factory successfully Jul 10 00:44:15.892000 audit[1644]: NETFILTER_CFG table=mangle:26 family=2 entries=2 op=nft_register_chain pid=1644 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:44:15.892000 audit[1644]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7fffa5c40520 a2=0 a3=7fffa5c4050c items=0 ppid=1627 pid=1644 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:44:15.892000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Jul 10 00:44:15.894000 audit[1645]: NETFILTER_CFG table=filter:27 family=2 entries=1 op=nft_register_chain pid=1645 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:44:15.894000 audit[1645]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffe8e9efe10 a2=0 a3=7ffe8e9efdfc items=0 ppid=1627 pid=1645 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:44:15.894000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Jul 10 00:44:15.896000 audit[1647]: NETFILTER_CFG table=filter:28 family=2 entries=2 op=nft_register_chain pid=1647 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:44:15.896000 audit[1647]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7fff0a5ca990 a2=0 a3=7fff0a5ca97c items=0 ppid=1627 pid=1647 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:44:15.896000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Jul 10 00:44:15.903000 audit[1649]: NETFILTER_CFG table=filter:29 family=2 entries=2 op=nft_register_chain pid=1649 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:44:15.903000 audit[1649]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7fffb20176d0 a2=0 a3=7fffb20176bc items=0 ppid=1627 pid=1649 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:44:15.903000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Jul 10 00:44:15.908460 kubelet[1627]: I0710 00:44:15.908418 1627 cpu_manager.go:221] "Starting CPU manager" policy="none" Jul 10 00:44:15.908460 kubelet[1627]: I0710 00:44:15.908454 1627 cpu_manager.go:222] "Reconciling" reconcilePeriod="10s" Jul 10 00:44:15.908596 kubelet[1627]: I0710 00:44:15.908496 1627 state_mem.go:36] "Initialized new in-memory state store" Jul 10 00:44:15.917000 audit[1657]: NETFILTER_CFG table=filter:30 family=2 entries=1 op=nft_register_rule pid=1657 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:44:15.917000 audit[1657]: SYSCALL arch=c000003e syscall=46 success=yes exit=924 a0=3 a1=7fff3848a8f0 a2=0 a3=7fff3848a8dc items=0 ppid=1627 pid=1657 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:44:15.917000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E7400626C6F636B20696E636F6D696E67206C6F63616C6E657420636F6E6E656374696F6E73002D2D647374003132372E302E302E302F38 Jul 10 00:44:15.919518 kubelet[1627]: I0710 00:44:15.919151 1627 kubelet_network_linux.go:49] "Initialized iptables rules." protocol="IPv4" Jul 10 00:44:15.920000 audit[1660]: NETFILTER_CFG table=mangle:31 family=2 entries=1 op=nft_register_chain pid=1660 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:44:15.920000 audit[1660]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fff76443840 a2=0 a3=7fff7644382c items=0 ppid=1627 pid=1660 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:44:15.920000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Jul 10 00:44:15.920000 audit[1659]: NETFILTER_CFG table=mangle:32 family=10 entries=2 op=nft_register_chain pid=1659 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:44:15.920000 audit[1659]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7ffefbb78010 a2=0 a3=7ffefbb77ffc items=0 ppid=1627 pid=1659 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:44:15.920000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Jul 10 00:44:15.921877 kubelet[1627]: I0710 00:44:15.921797 1627 kubelet_network_linux.go:49] "Initialized iptables rules." protocol="IPv6" Jul 10 00:44:15.921968 kubelet[1627]: I0710 00:44:15.921886 1627 status_manager.go:230] "Starting to sync pod status with apiserver" Jul 10 00:44:15.921968 kubelet[1627]: I0710 00:44:15.921943 1627 watchdog_linux.go:127] "Systemd watchdog is not enabled or the interval is invalid, so health checking will not be started." Jul 10 00:44:15.921968 kubelet[1627]: I0710 00:44:15.921957 1627 kubelet.go:2436] "Starting kubelet main sync loop" Jul 10 00:44:15.922152 kubelet[1627]: E0710 00:44:15.922004 1627 kubelet.go:2460] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Jul 10 00:44:15.922000 audit[1661]: NETFILTER_CFG table=nat:33 family=2 entries=1 op=nft_register_chain pid=1661 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:44:15.922000 audit[1661]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffd831bd460 a2=0 a3=7ffd831bd44c items=0 ppid=1627 pid=1661 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:44:15.922000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Jul 10 00:44:15.923000 audit[1664]: NETFILTER_CFG table=filter:34 family=2 entries=1 op=nft_register_chain pid=1664 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:44:15.923000 audit[1664]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffd48abf190 a2=0 a3=7ffd48abf17c items=0 ppid=1627 pid=1664 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:44:15.923000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Jul 10 00:44:15.923000 audit[1662]: NETFILTER_CFG table=mangle:35 family=10 entries=1 op=nft_register_chain pid=1662 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:44:15.923000 audit[1662]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fff0ce8a6d0 a2=0 a3=10e3 items=0 ppid=1627 pid=1662 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:44:15.923000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Jul 10 00:44:15.925000 audit[1666]: NETFILTER_CFG table=nat:36 family=10 entries=2 op=nft_register_chain pid=1666 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:44:15.925000 audit[1666]: SYSCALL arch=c000003e syscall=46 success=yes exit=128 a0=3 a1=7fffd5977040 a2=0 a3=7fffd597702c items=0 ppid=1627 pid=1666 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:44:15.925000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Jul 10 00:44:15.926000 audit[1667]: NETFILTER_CFG table=filter:37 family=10 entries=2 op=nft_register_chain pid=1667 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:44:15.926000 audit[1667]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7ffdb2fe3050 a2=0 a3=7ffdb2fe303c items=0 ppid=1627 pid=1667 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:44:15.926000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Jul 10 00:44:15.977346 kubelet[1627]: E0710 00:44:15.977267 1627 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 10 00:44:16.022829 kubelet[1627]: E0710 00:44:16.022748 1627 kubelet.go:2460] "Skipping pod synchronization" err="container runtime status check may not have completed yet" Jul 10 00:44:16.078340 kubelet[1627]: E0710 00:44:16.078132 1627 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 10 00:44:16.089446 kubelet[1627]: E0710 00:44:16.089352 1627 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.116:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.116:6443: connect: connection refused" interval="400ms" Jul 10 00:44:16.178576 kubelet[1627]: E0710 00:44:16.178513 1627 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 10 00:44:16.223017 kubelet[1627]: E0710 00:44:16.222979 1627 kubelet.go:2460] "Skipping pod synchronization" err="container runtime status check may not have completed yet" Jul 10 00:44:16.279279 kubelet[1627]: E0710 00:44:16.279248 1627 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 10 00:44:16.380431 kubelet[1627]: E0710 00:44:16.380368 1627 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 10 00:44:16.481019 kubelet[1627]: E0710 00:44:16.480962 1627 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 10 00:44:16.490777 kubelet[1627]: E0710 00:44:16.490742 1627 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.116:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.116:6443: connect: connection refused" interval="800ms" Jul 10 00:44:16.581977 kubelet[1627]: E0710 00:44:16.581930 1627 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 10 00:44:16.623367 kubelet[1627]: E0710 00:44:16.623297 1627 kubelet.go:2460] "Skipping pod synchronization" err="container runtime status check may not have completed yet" Jul 10 00:44:16.682804 kubelet[1627]: E0710 00:44:16.682646 1627 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 10 00:44:16.783297 kubelet[1627]: E0710 00:44:16.783238 1627 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 10 00:44:16.884113 kubelet[1627]: E0710 00:44:16.884054 1627 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 10 00:44:16.899998 kubelet[1627]: E0710 00:44:16.899949 1627 reflector.go:200] "Failed to watch" err="failed to list *v1.Node: Get \"https://10.0.0.116:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0\": dial tcp 10.0.0.116:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.Node" Jul 10 00:44:16.984878 kubelet[1627]: E0710 00:44:16.984720 1627 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 10 00:44:17.078585 kubelet[1627]: E0710 00:44:17.078520 1627 reflector.go:200] "Failed to watch" err="failed to list *v1.Service: Get \"https://10.0.0.116:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0\": dial tcp 10.0.0.116:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.Service" Jul 10 00:44:17.085088 kubelet[1627]: E0710 00:44:17.085059 1627 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 10 00:44:17.100038 kubelet[1627]: E0710 00:44:17.099983 1627 reflector.go:200] "Failed to watch" err="failed to list *v1.CSIDriver: Get \"https://10.0.0.116:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0\": dial tcp 10.0.0.116:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.CSIDriver" Jul 10 00:44:17.185635 kubelet[1627]: E0710 00:44:17.185553 1627 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 10 00:44:17.208654 kubelet[1627]: E0710 00:44:17.208604 1627 reflector.go:200] "Failed to watch" err="failed to list *v1.RuntimeClass: Get \"https://10.0.0.116:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0\": dial tcp 10.0.0.116:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.RuntimeClass" Jul 10 00:44:17.208654 kubelet[1627]: I0710 00:44:17.208665 1627 policy_none.go:49] "None policy: Start" Jul 10 00:44:17.208857 kubelet[1627]: I0710 00:44:17.208697 1627 memory_manager.go:186] "Starting memorymanager" policy="None" Jul 10 00:44:17.208857 kubelet[1627]: I0710 00:44:17.208728 1627 state_mem.go:35] "Initializing new in-memory state store" Jul 10 00:44:17.214331 systemd[1]: Created slice kubepods.slice. Jul 10 00:44:17.218323 systemd[1]: Created slice kubepods-burstable.slice. Jul 10 00:44:17.220774 systemd[1]: Created slice kubepods-besteffort.slice. Jul 10 00:44:17.233788 kubelet[1627]: E0710 00:44:17.233731 1627 manager.go:517] "Failed to read data from checkpoint" err="checkpoint is not found" checkpoint="kubelet_internal_checkpoint" Jul 10 00:44:17.232000 audit[1627]: AVC avc: denied { mac_admin } for pid=1627 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:17.232000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 10 00:44:17.232000 audit[1627]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000dc9110 a1=c000ecd5d8 a2=c000dc90e0 a3=25 items=0 ppid=1 pid=1627 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:44:17.232000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 10 00:44:17.235345 kubelet[1627]: E0710 00:44:17.233805 1627 server.go:94] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/device-plugins/: invalid argument" path="/var/lib/kubelet/device-plugins/" Jul 10 00:44:17.235345 kubelet[1627]: I0710 00:44:17.233937 1627 eviction_manager.go:189] "Eviction manager: starting control loop" Jul 10 00:44:17.235345 kubelet[1627]: I0710 00:44:17.233951 1627 container_log_manager.go:189] "Initializing container log rotate workers" workers=1 monitorPeriod="10s" Jul 10 00:44:17.235345 kubelet[1627]: I0710 00:44:17.234195 1627 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Jul 10 00:44:17.235345 kubelet[1627]: E0710 00:44:17.235105 1627 eviction_manager.go:267] "eviction manager: failed to check if we have separate container filesystem. Ignoring." err="no imagefs label for configured runtime" Jul 10 00:44:17.235345 kubelet[1627]: E0710 00:44:17.235183 1627 eviction_manager.go:292] "Eviction manager: failed to get summary stats" err="failed to get node info: node \"localhost\" not found" Jul 10 00:44:17.293065 kubelet[1627]: E0710 00:44:17.293012 1627 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.116:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.116:6443: connect: connection refused" interval="1.6s" Jul 10 00:44:17.335899 kubelet[1627]: I0710 00:44:17.335841 1627 kubelet_node_status.go:75] "Attempting to register node" node="localhost" Jul 10 00:44:17.336242 kubelet[1627]: E0710 00:44:17.336217 1627 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://10.0.0.116:6443/api/v1/nodes\": dial tcp 10.0.0.116:6443: connect: connection refused" node="localhost" Jul 10 00:44:17.435062 systemd[1]: Created slice kubepods-burstable-pod0838d61c368fcc2d78902cc10ca0ff75.slice. Jul 10 00:44:17.440634 kubelet[1627]: E0710 00:44:17.440579 1627 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Jul 10 00:44:17.443979 systemd[1]: Created slice kubepods-burstable-pod84b858ec27c8b2738b1d9ff9927e0dcb.slice. Jul 10 00:44:17.445539 kubelet[1627]: E0710 00:44:17.445498 1627 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Jul 10 00:44:17.447391 systemd[1]: Created slice kubepods-burstable-pod834ee54f1daa06092e339273649eb5ea.slice. Jul 10 00:44:17.448868 kubelet[1627]: E0710 00:44:17.448802 1627 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Jul 10 00:44:17.487534 kubelet[1627]: I0710 00:44:17.487371 1627 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/84b858ec27c8b2738b1d9ff9927e0dcb-kubeconfig\") pod \"kube-controller-manager-localhost\" (UID: \"84b858ec27c8b2738b1d9ff9927e0dcb\") " pod="kube-system/kube-controller-manager-localhost" Jul 10 00:44:17.487534 kubelet[1627]: I0710 00:44:17.487436 1627 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/84b858ec27c8b2738b1d9ff9927e0dcb-usr-share-ca-certificates\") pod \"kube-controller-manager-localhost\" (UID: \"84b858ec27c8b2738b1d9ff9927e0dcb\") " pod="kube-system/kube-controller-manager-localhost" Jul 10 00:44:17.487534 kubelet[1627]: I0710 00:44:17.487464 1627 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/0838d61c368fcc2d78902cc10ca0ff75-k8s-certs\") pod \"kube-apiserver-localhost\" (UID: \"0838d61c368fcc2d78902cc10ca0ff75\") " pod="kube-system/kube-apiserver-localhost" Jul 10 00:44:17.487534 kubelet[1627]: I0710 00:44:17.487485 1627 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/0838d61c368fcc2d78902cc10ca0ff75-usr-share-ca-certificates\") pod \"kube-apiserver-localhost\" (UID: \"0838d61c368fcc2d78902cc10ca0ff75\") " pod="kube-system/kube-apiserver-localhost" Jul 10 00:44:17.487780 kubelet[1627]: I0710 00:44:17.487593 1627 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/84b858ec27c8b2738b1d9ff9927e0dcb-flexvolume-dir\") pod \"kube-controller-manager-localhost\" (UID: \"84b858ec27c8b2738b1d9ff9927e0dcb\") " pod="kube-system/kube-controller-manager-localhost" Jul 10 00:44:17.487780 kubelet[1627]: I0710 00:44:17.487651 1627 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/84b858ec27c8b2738b1d9ff9927e0dcb-k8s-certs\") pod \"kube-controller-manager-localhost\" (UID: \"84b858ec27c8b2738b1d9ff9927e0dcb\") " pod="kube-system/kube-controller-manager-localhost" Jul 10 00:44:17.487780 kubelet[1627]: I0710 00:44:17.487676 1627 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/834ee54f1daa06092e339273649eb5ea-kubeconfig\") pod \"kube-scheduler-localhost\" (UID: \"834ee54f1daa06092e339273649eb5ea\") " pod="kube-system/kube-scheduler-localhost" Jul 10 00:44:17.487780 kubelet[1627]: I0710 00:44:17.487745 1627 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/0838d61c368fcc2d78902cc10ca0ff75-ca-certs\") pod \"kube-apiserver-localhost\" (UID: \"0838d61c368fcc2d78902cc10ca0ff75\") " pod="kube-system/kube-apiserver-localhost" Jul 10 00:44:17.487780 kubelet[1627]: I0710 00:44:17.487778 1627 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/84b858ec27c8b2738b1d9ff9927e0dcb-ca-certs\") pod \"kube-controller-manager-localhost\" (UID: \"84b858ec27c8b2738b1d9ff9927e0dcb\") " pod="kube-system/kube-controller-manager-localhost" Jul 10 00:44:17.537954 kubelet[1627]: I0710 00:44:17.537905 1627 kubelet_node_status.go:75] "Attempting to register node" node="localhost" Jul 10 00:44:17.538357 kubelet[1627]: E0710 00:44:17.538308 1627 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://10.0.0.116:6443/api/v1/nodes\": dial tcp 10.0.0.116:6443: connect: connection refused" node="localhost" Jul 10 00:44:17.742239 kubelet[1627]: E0710 00:44:17.742065 1627 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:44:17.743079 env[1210]: time="2025-07-10T00:44:17.743039613Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-localhost,Uid:0838d61c368fcc2d78902cc10ca0ff75,Namespace:kube-system,Attempt:0,}" Jul 10 00:44:17.746229 kubelet[1627]: E0710 00:44:17.746193 1627 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:44:17.746807 env[1210]: time="2025-07-10T00:44:17.746720135Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-localhost,Uid:84b858ec27c8b2738b1d9ff9927e0dcb,Namespace:kube-system,Attempt:0,}" Jul 10 00:44:17.749935 kubelet[1627]: E0710 00:44:17.749898 1627 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:44:17.750226 env[1210]: time="2025-07-10T00:44:17.750200199Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-localhost,Uid:834ee54f1daa06092e339273649eb5ea,Namespace:kube-system,Attempt:0,}" Jul 10 00:44:17.816288 kubelet[1627]: E0710 00:44:17.816238 1627 certificate_manager.go:596] "Failed while requesting a signed certificate from the control plane" err="cannot create certificate signing request: Post \"https://10.0.0.116:6443/apis/certificates.k8s.io/v1/certificatesigningrequests\": dial tcp 10.0.0.116:6443: connect: connection refused" logger="kubernetes.io/kube-apiserver-client-kubelet.UnhandledError" Jul 10 00:44:17.939664 kubelet[1627]: I0710 00:44:17.939604 1627 kubelet_node_status.go:75] "Attempting to register node" node="localhost" Jul 10 00:44:17.940037 kubelet[1627]: E0710 00:44:17.940001 1627 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://10.0.0.116:6443/api/v1/nodes\": dial tcp 10.0.0.116:6443: connect: connection refused" node="localhost" Jul 10 00:44:18.040610 kubelet[1627]: E0710 00:44:18.040438 1627 reflector.go:200] "Failed to watch" err="failed to list *v1.RuntimeClass: Get \"https://10.0.0.116:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0\": dial tcp 10.0.0.116:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.RuntimeClass" Jul 10 00:44:18.237839 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2780570889.mount: Deactivated successfully. Jul 10 00:44:18.245231 env[1210]: time="2025-07-10T00:44:18.245153979Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:44:18.247239 env[1210]: time="2025-07-10T00:44:18.247179957Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:44:18.249111 env[1210]: time="2025-07-10T00:44:18.249085384Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:44:18.250249 env[1210]: time="2025-07-10T00:44:18.250220695Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:44:18.252065 env[1210]: time="2025-07-10T00:44:18.252026839Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:44:18.253219 env[1210]: time="2025-07-10T00:44:18.253172719Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:44:18.254184 env[1210]: time="2025-07-10T00:44:18.254132060Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:44:18.255824 env[1210]: time="2025-07-10T00:44:18.255787504Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:44:18.256974 env[1210]: time="2025-07-10T00:44:18.256946480Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:44:18.258503 env[1210]: time="2025-07-10T00:44:18.258478226Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:44:18.260606 env[1210]: time="2025-07-10T00:44:18.260550904Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:44:18.261831 env[1210]: time="2025-07-10T00:44:18.261799623Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:44:18.295019 env[1210]: time="2025-07-10T00:44:18.294512164Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 10 00:44:18.299895 env[1210]: time="2025-07-10T00:44:18.299041533Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 10 00:44:18.299895 env[1210]: time="2025-07-10T00:44:18.299099345Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 10 00:44:18.301540 env[1210]: time="2025-07-10T00:44:18.301475979Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/05d7c099a618d77f31229724bcb4207f3bcb960b7d72b723618069bb12ad69e2 pid=1675 runtime=io.containerd.runc.v2 Jul 10 00:44:18.315030 env[1210]: time="2025-07-10T00:44:18.314946518Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 10 00:44:18.315030 env[1210]: time="2025-07-10T00:44:18.315031492Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 10 00:44:18.315234 env[1210]: time="2025-07-10T00:44:18.315055208Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 10 00:44:18.316116 env[1210]: time="2025-07-10T00:44:18.315610720Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/5f07cbdaf24d5e9f75c2891c12419e0fa257cad5c20515c1939a3c9accfab9f0 pid=1694 runtime=io.containerd.runc.v2 Jul 10 00:44:18.326699 systemd[1]: Started cri-containerd-05d7c099a618d77f31229724bcb4207f3bcb960b7d72b723618069bb12ad69e2.scope. Jul 10 00:44:18.328957 env[1210]: time="2025-07-10T00:44:18.327025172Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 10 00:44:18.328957 env[1210]: time="2025-07-10T00:44:18.327074847Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 10 00:44:18.328957 env[1210]: time="2025-07-10T00:44:18.327087431Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 10 00:44:18.328957 env[1210]: time="2025-07-10T00:44:18.327292717Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/1445beaddc4267fd205bffd7fa62347a9aca40eeeb65ed6f01846a891993804f pid=1714 runtime=io.containerd.runc.v2 Jul 10 00:44:18.360411 systemd[1]: Started cri-containerd-1445beaddc4267fd205bffd7fa62347a9aca40eeeb65ed6f01846a891993804f.scope. Jul 10 00:44:18.399291 systemd[1]: Started cri-containerd-5f07cbdaf24d5e9f75c2891c12419e0fa257cad5c20515c1939a3c9accfab9f0.scope. Jul 10 00:44:18.555000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.555000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.555000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.555000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.555000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.555000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.555000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.555000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.555000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.565000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.565000 audit: BPF prog-id=55 op=LOAD Jul 10 00:44:18.565000 audit[1690]: AVC avc: denied { bpf } for pid=1690 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.565000 audit[1690]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=1675 pid=1690 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:44:18.565000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3035643763303939613631386437376633313232393732346263623432 Jul 10 00:44:18.565000 audit[1690]: AVC avc: denied { perfmon } for pid=1690 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.565000 audit[1690]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=c items=0 ppid=1675 pid=1690 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:44:18.565000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3035643763303939613631386437376633313232393732346263623432 Jul 10 00:44:18.565000 audit[1690]: AVC avc: denied { bpf } for pid=1690 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.565000 audit[1690]: AVC avc: denied { bpf } for pid=1690 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.565000 audit[1690]: AVC avc: denied { bpf } for pid=1690 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.565000 audit[1690]: AVC avc: denied { perfmon } for pid=1690 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.565000 audit[1690]: AVC avc: denied { perfmon } for pid=1690 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.565000 audit[1690]: AVC avc: denied { perfmon } for pid=1690 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.565000 audit[1690]: AVC avc: denied { perfmon } for pid=1690 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.565000 audit[1690]: AVC avc: denied { perfmon } for pid=1690 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.565000 audit[1690]: AVC avc: denied { bpf } for pid=1690 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.565000 audit[1690]: AVC avc: denied { bpf } for pid=1690 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.565000 audit: BPF prog-id=56 op=LOAD Jul 10 00:44:18.565000 audit[1690]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c0003dae20 items=0 ppid=1675 pid=1690 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:44:18.565000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3035643763303939613631386437376633313232393732346263623432 Jul 10 00:44:18.565000 audit[1690]: AVC avc: denied { bpf } for pid=1690 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.565000 audit[1690]: AVC avc: denied { bpf } for pid=1690 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.565000 audit[1690]: AVC avc: denied { perfmon } for pid=1690 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.565000 audit[1690]: AVC avc: denied { perfmon } for pid=1690 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.565000 audit[1690]: AVC avc: denied { perfmon } for pid=1690 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.565000 audit[1690]: AVC avc: denied { perfmon } for pid=1690 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.565000 audit[1690]: AVC avc: denied { perfmon } for pid=1690 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.565000 audit[1690]: AVC avc: denied { bpf } for pid=1690 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.565000 audit[1690]: AVC avc: denied { bpf } for pid=1690 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.565000 audit: BPF prog-id=57 op=LOAD Jul 10 00:44:18.565000 audit[1690]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c0003dae68 items=0 ppid=1675 pid=1690 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:44:18.565000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3035643763303939613631386437376633313232393732346263623432 Jul 10 00:44:18.565000 audit: BPF prog-id=57 op=UNLOAD Jul 10 00:44:18.565000 audit: BPF prog-id=56 op=UNLOAD Jul 10 00:44:18.566000 audit[1690]: AVC avc: denied { bpf } for pid=1690 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.566000 audit[1690]: AVC avc: denied { bpf } for pid=1690 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.566000 audit[1690]: AVC avc: denied { bpf } for pid=1690 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.566000 audit[1690]: AVC avc: denied { perfmon } for pid=1690 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.566000 audit[1690]: AVC avc: denied { perfmon } for pid=1690 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.566000 audit[1690]: AVC avc: denied { perfmon } for pid=1690 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.566000 audit[1690]: AVC avc: denied { perfmon } for pid=1690 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.566000 audit[1690]: AVC avc: denied { perfmon } for pid=1690 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.566000 audit[1690]: AVC avc: denied { bpf } for pid=1690 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.566000 audit[1690]: AVC avc: denied { bpf } for pid=1690 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.566000 audit: BPF prog-id=58 op=LOAD Jul 10 00:44:18.566000 audit[1690]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c0003db278 items=0 ppid=1675 pid=1690 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:44:18.566000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3035643763303939613631386437376633313232393732346263623432 Jul 10 00:44:18.595000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.595000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.595000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.595000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.595000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.595000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.595000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.595000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.595000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.596000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.596000 audit: BPF prog-id=59 op=LOAD Jul 10 00:44:18.597000 audit[1722]: AVC avc: denied { bpf } for pid=1722 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.597000 audit[1722]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00014dc48 a2=10 a3=1c items=0 ppid=1694 pid=1722 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:44:18.597000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3566303763626461663234643565396637356332383931633132343139 Jul 10 00:44:18.597000 audit[1722]: AVC avc: denied { perfmon } for pid=1722 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.597000 audit[1722]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00014d6b0 a2=3c a3=c items=0 ppid=1694 pid=1722 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:44:18.597000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3566303763626461663234643565396637356332383931633132343139 Jul 10 00:44:18.597000 audit[1722]: AVC avc: denied { bpf } for pid=1722 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.597000 audit[1722]: AVC avc: denied { bpf } for pid=1722 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.597000 audit[1722]: AVC avc: denied { bpf } for pid=1722 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.597000 audit[1722]: AVC avc: denied { perfmon } for pid=1722 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.597000 audit[1722]: AVC avc: denied { perfmon } for pid=1722 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.597000 audit[1722]: AVC avc: denied { perfmon } for pid=1722 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.597000 audit[1722]: AVC avc: denied { perfmon } for pid=1722 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.597000 audit[1722]: AVC avc: denied { perfmon } for pid=1722 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.597000 audit[1722]: AVC avc: denied { bpf } for pid=1722 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.597000 audit[1722]: AVC avc: denied { bpf } for pid=1722 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.597000 audit: BPF prog-id=60 op=LOAD Jul 10 00:44:18.597000 audit[1722]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014d9d8 a2=78 a3=c00028e370 items=0 ppid=1694 pid=1722 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:44:18.597000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3566303763626461663234643565396637356332383931633132343139 Jul 10 00:44:18.599000 audit[1722]: AVC avc: denied { bpf } for pid=1722 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.599000 audit[1722]: AVC avc: denied { bpf } for pid=1722 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.599000 audit[1722]: AVC avc: denied { perfmon } for pid=1722 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.599000 audit[1722]: AVC avc: denied { perfmon } for pid=1722 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.599000 audit[1722]: AVC avc: denied { perfmon } for pid=1722 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.599000 audit[1722]: AVC avc: denied { perfmon } for pid=1722 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.599000 audit[1722]: AVC avc: denied { perfmon } for pid=1722 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.599000 audit[1722]: AVC avc: denied { bpf } for pid=1722 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.599000 audit[1722]: AVC avc: denied { bpf } for pid=1722 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.599000 audit: BPF prog-id=61 op=LOAD Jul 10 00:44:18.599000 audit[1722]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00014d770 a2=78 a3=c00028e3b8 items=0 ppid=1694 pid=1722 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:44:18.599000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3566303763626461663234643565396637356332383931633132343139 Jul 10 00:44:18.600000 audit: BPF prog-id=61 op=UNLOAD Jul 10 00:44:18.600000 audit: BPF prog-id=60 op=UNLOAD Jul 10 00:44:18.600000 audit[1722]: AVC avc: denied { bpf } for pid=1722 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.600000 audit[1722]: AVC avc: denied { bpf } for pid=1722 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.600000 audit[1722]: AVC avc: denied { bpf } for pid=1722 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.600000 audit[1722]: AVC avc: denied { perfmon } for pid=1722 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.600000 audit[1722]: AVC avc: denied { perfmon } for pid=1722 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.600000 audit[1722]: AVC avc: denied { perfmon } for pid=1722 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.600000 audit[1722]: AVC avc: denied { perfmon } for pid=1722 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.600000 audit[1722]: AVC avc: denied { perfmon } for pid=1722 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.600000 audit[1722]: AVC avc: denied { bpf } for pid=1722 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.600000 audit[1722]: AVC avc: denied { bpf } for pid=1722 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.600000 audit: BPF prog-id=62 op=LOAD Jul 10 00:44:18.600000 audit[1722]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014dc30 a2=78 a3=c00028e7c8 items=0 ppid=1694 pid=1722 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:44:18.600000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3566303763626461663234643565396637356332383931633132343139 Jul 10 00:44:18.604000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.604000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.604000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.604000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.604000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.604000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.604000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.604000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.604000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.604000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.604000 audit: BPF prog-id=63 op=LOAD Jul 10 00:44:18.606000 audit[1735]: AVC avc: denied { bpf } for pid=1735 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.606000 audit[1735]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=1714 pid=1735 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:44:18.606000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3134343562656164646334323637666432303562666664376661363233 Jul 10 00:44:18.606000 audit[1735]: AVC avc: denied { perfmon } for pid=1735 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.606000 audit[1735]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=1714 pid=1735 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:44:18.606000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3134343562656164646334323637666432303562666664376661363233 Jul 10 00:44:18.606000 audit[1735]: AVC avc: denied { bpf } for pid=1735 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.606000 audit[1735]: AVC avc: denied { bpf } for pid=1735 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.606000 audit[1735]: AVC avc: denied { bpf } for pid=1735 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.606000 audit[1735]: AVC avc: denied { perfmon } for pid=1735 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.606000 audit[1735]: AVC avc: denied { perfmon } for pid=1735 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.606000 audit[1735]: AVC avc: denied { perfmon } for pid=1735 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.606000 audit[1735]: AVC avc: denied { perfmon } for pid=1735 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.606000 audit[1735]: AVC avc: denied { perfmon } for pid=1735 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.606000 audit[1735]: AVC avc: denied { bpf } for pid=1735 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.606000 audit[1735]: AVC avc: denied { bpf } for pid=1735 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.606000 audit: BPF prog-id=64 op=LOAD Jul 10 00:44:18.606000 audit[1735]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c000388350 items=0 ppid=1714 pid=1735 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:44:18.606000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3134343562656164646334323637666432303562666664376661363233 Jul 10 00:44:18.606000 audit[1735]: AVC avc: denied { bpf } for pid=1735 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.606000 audit[1735]: AVC avc: denied { bpf } for pid=1735 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.606000 audit[1735]: AVC avc: denied { perfmon } for pid=1735 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.606000 audit[1735]: AVC avc: denied { perfmon } for pid=1735 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.606000 audit[1735]: AVC avc: denied { perfmon } for pid=1735 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.606000 audit[1735]: AVC avc: denied { perfmon } for pid=1735 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.606000 audit[1735]: AVC avc: denied { perfmon } for pid=1735 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.606000 audit[1735]: AVC avc: denied { bpf } for pid=1735 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.606000 audit[1735]: AVC avc: denied { bpf } for pid=1735 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.606000 audit: BPF prog-id=65 op=LOAD Jul 10 00:44:18.606000 audit[1735]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c000388398 items=0 ppid=1714 pid=1735 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:44:18.606000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3134343562656164646334323637666432303562666664376661363233 Jul 10 00:44:18.607000 audit: BPF prog-id=65 op=UNLOAD Jul 10 00:44:18.607000 audit: BPF prog-id=64 op=UNLOAD Jul 10 00:44:18.607000 audit[1735]: AVC avc: denied { bpf } for pid=1735 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.607000 audit[1735]: AVC avc: denied { bpf } for pid=1735 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.607000 audit[1735]: AVC avc: denied { bpf } for pid=1735 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.607000 audit[1735]: AVC avc: denied { perfmon } for pid=1735 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.607000 audit[1735]: AVC avc: denied { perfmon } for pid=1735 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.607000 audit[1735]: AVC avc: denied { perfmon } for pid=1735 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.607000 audit[1735]: AVC avc: denied { perfmon } for pid=1735 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.607000 audit[1735]: AVC avc: denied { perfmon } for pid=1735 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.607000 audit[1735]: AVC avc: denied { bpf } for pid=1735 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.607000 audit[1735]: AVC avc: denied { bpf } for pid=1735 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.607000 audit: BPF prog-id=66 op=LOAD Jul 10 00:44:18.607000 audit[1735]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0003887a8 items=0 ppid=1714 pid=1735 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:44:18.607000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3134343562656164646334323637666432303562666664376661363233 Jul 10 00:44:18.670916 env[1210]: time="2025-07-10T00:44:18.654138713Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-localhost,Uid:84b858ec27c8b2738b1d9ff9927e0dcb,Namespace:kube-system,Attempt:0,} returns sandbox id \"05d7c099a618d77f31229724bcb4207f3bcb960b7d72b723618069bb12ad69e2\"" Jul 10 00:44:18.671118 kubelet[1627]: E0710 00:44:18.656060 1627 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:44:18.716619 env[1210]: time="2025-07-10T00:44:18.716560081Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-localhost,Uid:0838d61c368fcc2d78902cc10ca0ff75,Namespace:kube-system,Attempt:0,} returns sandbox id \"1445beaddc4267fd205bffd7fa62347a9aca40eeeb65ed6f01846a891993804f\"" Jul 10 00:44:18.717168 kubelet[1627]: E0710 00:44:18.717143 1627 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:44:18.724702 env[1210]: time="2025-07-10T00:44:18.724664557Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-localhost,Uid:834ee54f1daa06092e339273649eb5ea,Namespace:kube-system,Attempt:0,} returns sandbox id \"5f07cbdaf24d5e9f75c2891c12419e0fa257cad5c20515c1939a3c9accfab9f0\"" Jul 10 00:44:18.725232 kubelet[1627]: E0710 00:44:18.725184 1627 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:44:18.741607 kubelet[1627]: I0710 00:44:18.741565 1627 kubelet_node_status.go:75] "Attempting to register node" node="localhost" Jul 10 00:44:18.741945 kubelet[1627]: E0710 00:44:18.741913 1627 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://10.0.0.116:6443/api/v1/nodes\": dial tcp 10.0.0.116:6443: connect: connection refused" node="localhost" Jul 10 00:44:18.755437 env[1210]: time="2025-07-10T00:44:18.755404583Z" level=info msg="CreateContainer within sandbox \"05d7c099a618d77f31229724bcb4207f3bcb960b7d72b723618069bb12ad69e2\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:0,}" Jul 10 00:44:18.758538 env[1210]: time="2025-07-10T00:44:18.758503021Z" level=info msg="CreateContainer within sandbox \"1445beaddc4267fd205bffd7fa62347a9aca40eeeb65ed6f01846a891993804f\" for container &ContainerMetadata{Name:kube-apiserver,Attempt:0,}" Jul 10 00:44:18.762618 env[1210]: time="2025-07-10T00:44:18.762571230Z" level=info msg="CreateContainer within sandbox \"5f07cbdaf24d5e9f75c2891c12419e0fa257cad5c20515c1939a3c9accfab9f0\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:0,}" Jul 10 00:44:18.823385 env[1210]: time="2025-07-10T00:44:18.823251648Z" level=info msg="CreateContainer within sandbox \"05d7c099a618d77f31229724bcb4207f3bcb960b7d72b723618069bb12ad69e2\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:0,} returns container id \"10925724e6eec723962ae6899022aafe2e34c0cff27d73d8e018b52aa01e6ff9\"" Jul 10 00:44:18.824023 env[1210]: time="2025-07-10T00:44:18.823999622Z" level=info msg="StartContainer for \"10925724e6eec723962ae6899022aafe2e34c0cff27d73d8e018b52aa01e6ff9\"" Jul 10 00:44:18.838550 systemd[1]: Started cri-containerd-10925724e6eec723962ae6899022aafe2e34c0cff27d73d8e018b52aa01e6ff9.scope. Jul 10 00:44:18.859000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.859000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.859000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.859000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.859000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.859000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.859000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.859000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.859000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.859000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.859000 audit: BPF prog-id=67 op=LOAD Jul 10 00:44:18.859000 audit[1804]: AVC avc: denied { bpf } for pid=1804 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.859000 audit[1804]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=1675 pid=1804 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:44:18.859000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3130393235373234653665656337323339363261653638393930323261 Jul 10 00:44:18.859000 audit[1804]: AVC avc: denied { perfmon } for pid=1804 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.859000 audit[1804]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=1675 pid=1804 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:44:18.859000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3130393235373234653665656337323339363261653638393930323261 Jul 10 00:44:18.859000 audit[1804]: AVC avc: denied { bpf } for pid=1804 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.859000 audit[1804]: AVC avc: denied { bpf } for pid=1804 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.859000 audit[1804]: AVC avc: denied { bpf } for pid=1804 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.859000 audit[1804]: AVC avc: denied { perfmon } for pid=1804 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.859000 audit[1804]: AVC avc: denied { perfmon } for pid=1804 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.859000 audit[1804]: AVC avc: denied { perfmon } for pid=1804 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.859000 audit[1804]: AVC avc: denied { perfmon } for pid=1804 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.859000 audit[1804]: AVC avc: denied { perfmon } for pid=1804 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.859000 audit[1804]: AVC avc: denied { bpf } for pid=1804 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.859000 audit[1804]: AVC avc: denied { bpf } for pid=1804 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.859000 audit: BPF prog-id=68 op=LOAD Jul 10 00:44:18.859000 audit[1804]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c000024b50 items=0 ppid=1675 pid=1804 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:44:18.859000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3130393235373234653665656337323339363261653638393930323261 Jul 10 00:44:18.859000 audit[1804]: AVC avc: denied { bpf } for pid=1804 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.859000 audit[1804]: AVC avc: denied { bpf } for pid=1804 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.859000 audit[1804]: AVC avc: denied { perfmon } for pid=1804 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.859000 audit[1804]: AVC avc: denied { perfmon } for pid=1804 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.859000 audit[1804]: AVC avc: denied { perfmon } for pid=1804 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.859000 audit[1804]: AVC avc: denied { perfmon } for pid=1804 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.859000 audit[1804]: AVC avc: denied { perfmon } for pid=1804 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.859000 audit[1804]: AVC avc: denied { bpf } for pid=1804 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.859000 audit[1804]: AVC avc: denied { bpf } for pid=1804 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.859000 audit: BPF prog-id=69 op=LOAD Jul 10 00:44:18.859000 audit[1804]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c000024b98 items=0 ppid=1675 pid=1804 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:44:18.859000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3130393235373234653665656337323339363261653638393930323261 Jul 10 00:44:18.860000 audit: BPF prog-id=69 op=UNLOAD Jul 10 00:44:18.860000 audit: BPF prog-id=68 op=UNLOAD Jul 10 00:44:18.860000 audit[1804]: AVC avc: denied { bpf } for pid=1804 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.860000 audit[1804]: AVC avc: denied { bpf } for pid=1804 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.860000 audit[1804]: AVC avc: denied { bpf } for pid=1804 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.860000 audit[1804]: AVC avc: denied { perfmon } for pid=1804 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.860000 audit[1804]: AVC avc: denied { perfmon } for pid=1804 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.860000 audit[1804]: AVC avc: denied { perfmon } for pid=1804 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.860000 audit[1804]: AVC avc: denied { perfmon } for pid=1804 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.860000 audit[1804]: AVC avc: denied { perfmon } for pid=1804 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.860000 audit[1804]: AVC avc: denied { bpf } for pid=1804 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.860000 audit[1804]: AVC avc: denied { bpf } for pid=1804 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.860000 audit: BPF prog-id=70 op=LOAD Jul 10 00:44:18.860000 audit[1804]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c000024fa8 items=0 ppid=1675 pid=1804 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:44:18.860000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3130393235373234653665656337323339363261653638393930323261 Jul 10 00:44:18.893911 kubelet[1627]: E0710 00:44:18.893834 1627 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.116:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.116:6443: connect: connection refused" interval="3.2s" Jul 10 00:44:18.918072 env[1210]: time="2025-07-10T00:44:18.918001587Z" level=info msg="StartContainer for \"10925724e6eec723962ae6899022aafe2e34c0cff27d73d8e018b52aa01e6ff9\" returns successfully" Jul 10 00:44:18.923257 env[1210]: time="2025-07-10T00:44:18.923183304Z" level=info msg="CreateContainer within sandbox \"1445beaddc4267fd205bffd7fa62347a9aca40eeeb65ed6f01846a891993804f\" for &ContainerMetadata{Name:kube-apiserver,Attempt:0,} returns container id \"2cff05d8fa9fd9e61142faf14d79aaaadb43ff7ea21ba9eb1486c55e7831cedc\"" Jul 10 00:44:18.923941 env[1210]: time="2025-07-10T00:44:18.923895318Z" level=info msg="StartContainer for \"2cff05d8fa9fd9e61142faf14d79aaaadb43ff7ea21ba9eb1486c55e7831cedc\"" Jul 10 00:44:18.924402 env[1210]: time="2025-07-10T00:44:18.924366878Z" level=info msg="CreateContainer within sandbox \"5f07cbdaf24d5e9f75c2891c12419e0fa257cad5c20515c1939a3c9accfab9f0\" for &ContainerMetadata{Name:kube-scheduler,Attempt:0,} returns container id \"6decc878e9803f8aaa43e14d8db8e8303776340f5575230269b2f223ab5035a7\"" Jul 10 00:44:18.924865 env[1210]: time="2025-07-10T00:44:18.924816886Z" level=info msg="StartContainer for \"6decc878e9803f8aaa43e14d8db8e8303776340f5575230269b2f223ab5035a7\"" Jul 10 00:44:18.935384 kubelet[1627]: E0710 00:44:18.935335 1627 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Jul 10 00:44:18.935546 kubelet[1627]: E0710 00:44:18.935473 1627 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:44:18.942562 systemd[1]: Started cri-containerd-2cff05d8fa9fd9e61142faf14d79aaaadb43ff7ea21ba9eb1486c55e7831cedc.scope. Jul 10 00:44:18.956833 systemd[1]: Started cri-containerd-6decc878e9803f8aaa43e14d8db8e8303776340f5575230269b2f223ab5035a7.scope. Jul 10 00:44:18.966000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.966000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.966000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.966000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.966000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.966000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.966000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.966000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.966000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.967000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.967000 audit: BPF prog-id=71 op=LOAD Jul 10 00:44:18.968000 audit[1846]: AVC avc: denied { bpf } for pid=1846 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.968000 audit[1846]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=1714 pid=1846 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:44:18.968000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3263666630356438666139666439653631313432666166313464373961 Jul 10 00:44:18.968000 audit[1846]: AVC avc: denied { perfmon } for pid=1846 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.968000 audit[1846]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=8 items=0 ppid=1714 pid=1846 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:44:18.968000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3263666630356438666139666439653631313432666166313464373961 Jul 10 00:44:18.968000 audit[1846]: AVC avc: denied { bpf } for pid=1846 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.968000 audit[1846]: AVC avc: denied { bpf } for pid=1846 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.968000 audit[1846]: AVC avc: denied { bpf } for pid=1846 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.968000 audit[1846]: AVC avc: denied { perfmon } for pid=1846 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.968000 audit[1846]: AVC avc: denied { perfmon } for pid=1846 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.968000 audit[1846]: AVC avc: denied { perfmon } for pid=1846 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.968000 audit[1846]: AVC avc: denied { perfmon } for pid=1846 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.968000 audit[1846]: AVC avc: denied { perfmon } for pid=1846 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.968000 audit[1846]: AVC avc: denied { bpf } for pid=1846 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.968000 audit[1846]: AVC avc: denied { bpf } for pid=1846 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.968000 audit: BPF prog-id=72 op=LOAD Jul 10 00:44:18.968000 audit[1846]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c000193330 items=0 ppid=1714 pid=1846 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:44:18.968000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3263666630356438666139666439653631313432666166313464373961 Jul 10 00:44:18.969000 audit[1846]: AVC avc: denied { bpf } for pid=1846 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.969000 audit[1846]: AVC avc: denied { bpf } for pid=1846 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.969000 audit[1846]: AVC avc: denied { perfmon } for pid=1846 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.969000 audit[1846]: AVC avc: denied { perfmon } for pid=1846 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.969000 audit[1846]: AVC avc: denied { perfmon } for pid=1846 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.969000 audit[1846]: AVC avc: denied { perfmon } for pid=1846 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.969000 audit[1846]: AVC avc: denied { perfmon } for pid=1846 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.969000 audit[1846]: AVC avc: denied { bpf } for pid=1846 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.969000 audit[1846]: AVC avc: denied { bpf } for pid=1846 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.969000 audit: BPF prog-id=73 op=LOAD Jul 10 00:44:18.969000 audit[1846]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c000193378 items=0 ppid=1714 pid=1846 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:44:18.969000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3263666630356438666139666439653631313432666166313464373961 Jul 10 00:44:18.970000 audit: BPF prog-id=73 op=UNLOAD Jul 10 00:44:18.970000 audit: BPF prog-id=72 op=UNLOAD Jul 10 00:44:18.971000 audit[1846]: AVC avc: denied { bpf } for pid=1846 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.971000 audit[1846]: AVC avc: denied { bpf } for pid=1846 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.971000 audit[1846]: AVC avc: denied { bpf } for pid=1846 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.971000 audit[1846]: AVC avc: denied { perfmon } for pid=1846 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.971000 audit[1846]: AVC avc: denied { perfmon } for pid=1846 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.971000 audit[1846]: AVC avc: denied { perfmon } for pid=1846 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.971000 audit[1846]: AVC avc: denied { perfmon } for pid=1846 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.971000 audit[1846]: AVC avc: denied { perfmon } for pid=1846 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.971000 audit[1846]: AVC avc: denied { bpf } for pid=1846 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.971000 audit[1846]: AVC avc: denied { bpf } for pid=1846 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.971000 audit: BPF prog-id=74 op=LOAD Jul 10 00:44:18.971000 audit[1846]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c000193788 items=0 ppid=1714 pid=1846 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:44:18.971000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3263666630356438666139666439653631313432666166313464373961 Jul 10 00:44:18.977000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.977000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.977000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.977000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.977000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.977000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.977000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.977000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.977000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.978000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.978000 audit: BPF prog-id=75 op=LOAD Jul 10 00:44:18.979000 audit[1860]: AVC avc: denied { bpf } for pid=1860 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.979000 audit[1860]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00019fc48 a2=10 a3=1c items=0 ppid=1694 pid=1860 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:44:18.979000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3664656363383738653938303366386161613433653134643864623865 Jul 10 00:44:18.979000 audit[1860]: AVC avc: denied { perfmon } for pid=1860 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.979000 audit[1860]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00019f6b0 a2=3c a3=8 items=0 ppid=1694 pid=1860 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:44:18.979000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3664656363383738653938303366386161613433653134643864623865 Jul 10 00:44:18.979000 audit[1860]: AVC avc: denied { bpf } for pid=1860 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.979000 audit[1860]: AVC avc: denied { bpf } for pid=1860 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.979000 audit[1860]: AVC avc: denied { bpf } for pid=1860 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.979000 audit[1860]: AVC avc: denied { perfmon } for pid=1860 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.979000 audit[1860]: AVC avc: denied { perfmon } for pid=1860 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.979000 audit[1860]: AVC avc: denied { perfmon } for pid=1860 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.979000 audit[1860]: AVC avc: denied { perfmon } for pid=1860 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.979000 audit[1860]: AVC avc: denied { perfmon } for pid=1860 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.979000 audit[1860]: AVC avc: denied { bpf } for pid=1860 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.979000 audit[1860]: AVC avc: denied { bpf } for pid=1860 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.979000 audit: BPF prog-id=76 op=LOAD Jul 10 00:44:18.979000 audit[1860]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00019f9d8 a2=78 a3=c0002a97b0 items=0 ppid=1694 pid=1860 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:44:18.979000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3664656363383738653938303366386161613433653134643864623865 Jul 10 00:44:18.980000 audit[1860]: AVC avc: denied { bpf } for pid=1860 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.980000 audit[1860]: AVC avc: denied { bpf } for pid=1860 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.980000 audit[1860]: AVC avc: denied { perfmon } for pid=1860 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.980000 audit[1860]: AVC avc: denied { perfmon } for pid=1860 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.980000 audit[1860]: AVC avc: denied { perfmon } for pid=1860 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.980000 audit[1860]: AVC avc: denied { perfmon } for pid=1860 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.980000 audit[1860]: AVC avc: denied { perfmon } for pid=1860 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.980000 audit[1860]: AVC avc: denied { bpf } for pid=1860 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.980000 audit[1860]: AVC avc: denied { bpf } for pid=1860 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.980000 audit: BPF prog-id=77 op=LOAD Jul 10 00:44:18.980000 audit[1860]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00019f770 a2=78 a3=c0002a97f8 items=0 ppid=1694 pid=1860 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:44:18.980000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3664656363383738653938303366386161613433653134643864623865 Jul 10 00:44:18.981000 audit: BPF prog-id=77 op=UNLOAD Jul 10 00:44:18.981000 audit: BPF prog-id=76 op=UNLOAD Jul 10 00:44:18.981000 audit[1860]: AVC avc: denied { bpf } for pid=1860 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.981000 audit[1860]: AVC avc: denied { bpf } for pid=1860 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.981000 audit[1860]: AVC avc: denied { bpf } for pid=1860 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.981000 audit[1860]: AVC avc: denied { perfmon } for pid=1860 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.981000 audit[1860]: AVC avc: denied { perfmon } for pid=1860 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.981000 audit[1860]: AVC avc: denied { perfmon } for pid=1860 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.981000 audit[1860]: AVC avc: denied { perfmon } for pid=1860 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.981000 audit[1860]: AVC avc: denied { perfmon } for pid=1860 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.981000 audit[1860]: AVC avc: denied { bpf } for pid=1860 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.981000 audit[1860]: AVC avc: denied { bpf } for pid=1860 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:18.981000 audit: BPF prog-id=78 op=LOAD Jul 10 00:44:18.981000 audit[1860]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00019fc30 a2=78 a3=c0002a9c08 items=0 ppid=1694 pid=1860 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:44:18.981000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3664656363383738653938303366386161613433653134643864623865 Jul 10 00:44:19.013022 env[1210]: time="2025-07-10T00:44:19.012952030Z" level=info msg="StartContainer for \"2cff05d8fa9fd9e61142faf14d79aaaadb43ff7ea21ba9eb1486c55e7831cedc\" returns successfully" Jul 10 00:44:19.023315 env[1210]: time="2025-07-10T00:44:19.023260699Z" level=info msg="StartContainer for \"6decc878e9803f8aaa43e14d8db8e8303776340f5575230269b2f223ab5035a7\" returns successfully" Jul 10 00:44:19.947617 kubelet[1627]: E0710 00:44:19.947571 1627 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Jul 10 00:44:19.948041 kubelet[1627]: E0710 00:44:19.947698 1627 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:44:19.949179 kubelet[1627]: E0710 00:44:19.949154 1627 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Jul 10 00:44:19.949271 kubelet[1627]: E0710 00:44:19.949247 1627 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:44:20.019000 audit[1815]: AVC avc: denied { watch } for pid=1815 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6719 scontext=system_u:system_r:svirt_lxc_net_t:s0:c504,c577 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:44:20.019000 audit[1815]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c00041fde0 a2=fc6 a3=0 items=0 ppid=1675 pid=1815 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c504,c577 key=(null) Jul 10 00:44:20.019000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 00:44:20.022000 audit[1815]: AVC avc: denied { watch } for pid=1815 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=6725 scontext=system_u:system_r:svirt_lxc_net_t:s0:c504,c577 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:44:20.022000 audit[1815]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c000d14000 a2=fc6 a3=0 items=0 ppid=1675 pid=1815 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c504,c577 key=(null) Jul 10 00:44:20.022000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 00:44:20.343858 kubelet[1627]: I0710 00:44:20.343697 1627 kubelet_node_status.go:75] "Attempting to register node" node="localhost" Jul 10 00:44:20.372000 audit[1868]: AVC avc: denied { watch } for pid=1868 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=6725 scontext=system_u:system_r:svirt_lxc_net_t:s0:c341,c345 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:44:20.374121 kernel: kauditd_printk_skb: 569 callbacks suppressed Jul 10 00:44:20.374168 kernel: audit: type=1400 audit(1752108260.372:542): avc: denied { watch } for pid=1868 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=6725 scontext=system_u:system_r:svirt_lxc_net_t:s0:c341,c345 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:44:20.372000 audit[1868]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=41 a1=c003d85b60 a2=fc6 a3=0 items=0 ppid=1714 pid=1868 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c341,c345 key=(null) Jul 10 00:44:20.382425 kernel: audit: type=1300 audit(1752108260.372:542): arch=c000003e syscall=254 success=no exit=-13 a0=41 a1=c003d85b60 a2=fc6 a3=0 items=0 ppid=1714 pid=1868 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c341,c345 key=(null) Jul 10 00:44:20.372000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313136002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Jul 10 00:44:20.396317 kernel: audit: type=1327 audit(1752108260.372:542): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313136002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Jul 10 00:44:20.396488 kernel: audit: type=1400 audit(1752108260.372:543): avc: denied { watch } for pid=1868 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=6721 scontext=system_u:system_r:svirt_lxc_net_t:s0:c341,c345 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:44:20.372000 audit[1868]: AVC avc: denied { watch } for pid=1868 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=6721 scontext=system_u:system_r:svirt_lxc_net_t:s0:c341,c345 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:44:20.401190 kernel: audit: type=1300 audit(1752108260.372:543): arch=c000003e syscall=254 success=no exit=-13 a0=41 a1=c003d85bc0 a2=fc6 a3=0 items=0 ppid=1714 pid=1868 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c341,c345 key=(null) Jul 10 00:44:20.372000 audit[1868]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=41 a1=c003d85bc0 a2=fc6 a3=0 items=0 ppid=1714 pid=1868 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c341,c345 key=(null) Jul 10 00:44:20.405476 kernel: audit: type=1327 audit(1752108260.372:543): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313136002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Jul 10 00:44:20.372000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313136002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Jul 10 00:44:20.409168 kernel: audit: type=1400 audit(1752108260.378:544): avc: denied { watch } for pid=1868 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c341,c345 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:44:20.378000 audit[1868]: AVC avc: denied { watch } for pid=1868 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c341,c345 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:44:20.414101 kernel: audit: type=1300 audit(1752108260.378:544): arch=c000003e syscall=254 success=no exit=-13 a0=4b a1=c003a58540 a2=fc6 a3=0 items=0 ppid=1714 pid=1868 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c341,c345 key=(null) Jul 10 00:44:20.378000 audit[1868]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4b a1=c003a58540 a2=fc6 a3=0 items=0 ppid=1714 pid=1868 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c341,c345 key=(null) Jul 10 00:44:20.378000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313136002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Jul 10 00:44:20.418790 kernel: audit: type=1327 audit(1752108260.378:544): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313136002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Jul 10 00:44:20.418838 kernel: audit: type=1400 audit(1752108260.378:545): avc: denied { watch } for pid=1868 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6719 scontext=system_u:system_r:svirt_lxc_net_t:s0:c341,c345 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:44:20.378000 audit[1868]: AVC avc: denied { watch } for pid=1868 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6719 scontext=system_u:system_r:svirt_lxc_net_t:s0:c341,c345 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:44:20.378000 audit[1868]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4b a1=c0060ca8a0 a2=fc6 a3=0 items=0 ppid=1714 pid=1868 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c341,c345 key=(null) Jul 10 00:44:20.378000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313136002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Jul 10 00:44:20.391000 audit[1868]: AVC avc: denied { watch } for pid=1868 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6719 scontext=system_u:system_r:svirt_lxc_net_t:s0:c341,c345 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:44:20.391000 audit[1868]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4a a1=c004330260 a2=fc6 a3=0 items=0 ppid=1714 pid=1868 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c341,c345 key=(null) Jul 10 00:44:20.391000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313136002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Jul 10 00:44:20.391000 audit[1868]: AVC avc: denied { watch } for pid=1868 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=6725 scontext=system_u:system_r:svirt_lxc_net_t:s0:c341,c345 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:44:20.391000 audit[1868]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4a a1=c006116150 a2=fc6 a3=0 items=0 ppid=1714 pid=1868 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c341,c345 key=(null) Jul 10 00:44:20.391000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313136002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Jul 10 00:44:20.506633 kubelet[1627]: I0710 00:44:20.506569 1627 kubelet_node_status.go:78] "Successfully registered node" node="localhost" Jul 10 00:44:20.506633 kubelet[1627]: E0710 00:44:20.506609 1627 kubelet_node_status.go:548] "Error updating node status, will retry" err="error getting node \"localhost\": node \"localhost\" not found" Jul 10 00:44:20.588353 kubelet[1627]: I0710 00:44:20.588285 1627 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-apiserver-localhost" Jul 10 00:44:20.837516 kubelet[1627]: I0710 00:44:20.837470 1627 apiserver.go:52] "Watching apiserver" Jul 10 00:44:20.878437 kubelet[1627]: I0710 00:44:20.878394 1627 desired_state_of_world_populator.go:158] "Finished populating initial desired state of world" Jul 10 00:44:20.888157 kubelet[1627]: E0710 00:44:20.888112 1627 kubelet.go:3311] "Failed creating a mirror pod" err="pods \"kube-apiserver-localhost\" is forbidden: no PriorityClass with name system-node-critical was found" pod="kube-system/kube-apiserver-localhost" Jul 10 00:44:20.888157 kubelet[1627]: I0710 00:44:20.888137 1627 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-controller-manager-localhost" Jul 10 00:44:20.889816 kubelet[1627]: E0710 00:44:20.889777 1627 kubelet.go:3311] "Failed creating a mirror pod" err="pods \"kube-controller-manager-localhost\" is forbidden: no PriorityClass with name system-node-critical was found" pod="kube-system/kube-controller-manager-localhost" Jul 10 00:44:20.889816 kubelet[1627]: I0710 00:44:20.889807 1627 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-scheduler-localhost" Jul 10 00:44:20.890947 kubelet[1627]: E0710 00:44:20.890926 1627 kubelet.go:3311] "Failed creating a mirror pod" err="pods \"kube-scheduler-localhost\" is forbidden: no PriorityClass with name system-node-critical was found" pod="kube-system/kube-scheduler-localhost" Jul 10 00:44:20.951125 kubelet[1627]: I0710 00:44:20.951094 1627 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-scheduler-localhost" Jul 10 00:44:20.951733 kubelet[1627]: I0710 00:44:20.951305 1627 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-apiserver-localhost" Jul 10 00:44:20.953620 kubelet[1627]: E0710 00:44:20.953593 1627 kubelet.go:3311] "Failed creating a mirror pod" err="pods \"kube-scheduler-localhost\" is forbidden: no PriorityClass with name system-node-critical was found" pod="kube-system/kube-scheduler-localhost" Jul 10 00:44:20.953719 kubelet[1627]: E0710 00:44:20.953693 1627 kubelet.go:3311] "Failed creating a mirror pod" err="pods \"kube-apiserver-localhost\" is forbidden: no PriorityClass with name system-node-critical was found" pod="kube-system/kube-apiserver-localhost" Jul 10 00:44:20.953772 kubelet[1627]: E0710 00:44:20.953754 1627 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:44:20.953919 kubelet[1627]: E0710 00:44:20.953897 1627 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:44:21.952784 kubelet[1627]: I0710 00:44:21.952749 1627 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-apiserver-localhost" Jul 10 00:44:21.953194 kubelet[1627]: I0710 00:44:21.952880 1627 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-scheduler-localhost" Jul 10 00:44:21.958733 kubelet[1627]: E0710 00:44:21.958707 1627 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:44:21.960147 kubelet[1627]: E0710 00:44:21.960090 1627 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:44:22.043505 update_engine[1197]: I0710 00:44:22.043439 1197 update_attempter.cc:509] Updating boot flags... Jul 10 00:44:22.148763 kubelet[1627]: I0710 00:44:22.148729 1627 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-controller-manager-localhost" Jul 10 00:44:22.153823 kubelet[1627]: E0710 00:44:22.153742 1627 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:44:22.907978 systemd[1]: Reloading. Jul 10 00:44:22.957642 kubelet[1627]: E0710 00:44:22.957600 1627 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:44:22.958037 kubelet[1627]: E0710 00:44:22.957897 1627 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:44:22.958141 kubelet[1627]: E0710 00:44:22.958113 1627 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:44:22.972240 /usr/lib/systemd/system-generators/torcx-generator[1955]: time="2025-07-10T00:44:22Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.7 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.7 /var/lib/torcx/store]" Jul 10 00:44:22.972265 /usr/lib/systemd/system-generators/torcx-generator[1955]: time="2025-07-10T00:44:22Z" level=info msg="torcx already run" Jul 10 00:44:23.273000 audit[1815]: AVC avc: denied { watch } for pid=1815 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="vda9" ino=6752 scontext=system_u:system_r:svirt_lxc_net_t:s0:c504,c577 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Jul 10 00:44:23.273000 audit[1815]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6 a1=c000ac3080 a2=fc6 a3=0 items=0 ppid=1675 pid=1815 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c504,c577 key=(null) Jul 10 00:44:23.273000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 00:44:23.341695 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Jul 10 00:44:23.341713 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Jul 10 00:44:23.360040 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Jul 10 00:44:23.429000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:23.429000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:23.429000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:23.429000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:23.429000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:23.429000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:23.429000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:23.429000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:23.429000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:23.429000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:23.429000 audit: BPF prog-id=79 op=LOAD Jul 10 00:44:23.429000 audit: BPF prog-id=55 op=UNLOAD Jul 10 00:44:23.430000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:23.430000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:23.430000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:23.430000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:23.430000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:23.430000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:23.430000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:23.430000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:23.430000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:23.430000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:23.430000 audit: BPF prog-id=80 op=LOAD Jul 10 00:44:23.430000 audit: BPF prog-id=63 op=UNLOAD Jul 10 00:44:23.432000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:23.432000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:23.432000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:23.432000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:23.432000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:23.432000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:23.432000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:23.432000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:23.432000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:23.432000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:23.432000 audit: BPF prog-id=81 op=LOAD Jul 10 00:44:23.432000 audit: BPF prog-id=40 op=UNLOAD Jul 10 00:44:23.433000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:23.433000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:23.433000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:23.433000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:23.433000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:23.433000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:23.433000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:23.433000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:23.433000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:23.433000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:23.433000 audit: BPF prog-id=82 op=LOAD Jul 10 00:44:23.433000 audit: BPF prog-id=41 op=UNLOAD Jul 10 00:44:23.434000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:23.434000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:23.434000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:23.434000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:23.434000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:23.434000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:23.434000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:23.434000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:23.434000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:23.434000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:23.434000 audit: BPF prog-id=83 op=LOAD Jul 10 00:44:23.434000 audit: BPF prog-id=42 op=UNLOAD Jul 10 00:44:23.434000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:23.434000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:23.434000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:23.434000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:23.434000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:23.434000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:23.434000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:23.434000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:23.434000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:23.434000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:23.434000 audit: BPF prog-id=84 op=LOAD Jul 10 00:44:23.434000 audit: BPF prog-id=43 op=UNLOAD Jul 10 00:44:23.434000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:23.434000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:23.434000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:23.434000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:23.434000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:23.434000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:23.434000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:23.434000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:23.434000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:23.434000 audit: BPF prog-id=85 op=LOAD Jul 10 00:44:23.435000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:23.435000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:23.435000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:23.435000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:23.435000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:23.435000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:23.435000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:23.435000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:23.435000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:23.435000 audit: BPF prog-id=86 op=LOAD Jul 10 00:44:23.435000 audit: BPF prog-id=44 op=UNLOAD Jul 10 00:44:23.435000 audit: BPF prog-id=45 op=UNLOAD Jul 10 00:44:23.435000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:23.435000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:23.435000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:23.435000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:23.435000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:23.435000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:23.435000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:23.435000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:23.435000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:23.435000 audit: BPF prog-id=87 op=LOAD Jul 10 00:44:23.435000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:23.435000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:23.435000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:23.435000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:23.435000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:23.435000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:23.435000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:23.435000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:23.435000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:23.435000 audit: BPF prog-id=88 op=LOAD Jul 10 00:44:23.435000 audit: BPF prog-id=46 op=UNLOAD Jul 10 00:44:23.435000 audit: BPF prog-id=47 op=UNLOAD Jul 10 00:44:23.436000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:23.436000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:23.436000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:23.436000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:23.436000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:23.436000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:23.436000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:23.436000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:23.436000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:23.436000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:23.436000 audit: BPF prog-id=89 op=LOAD Jul 10 00:44:23.436000 audit: BPF prog-id=75 op=UNLOAD Jul 10 00:44:23.436000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:23.436000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:23.436000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:23.436000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:23.436000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:23.436000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:23.436000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:23.436000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:23.436000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:23.437000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:23.437000 audit: BPF prog-id=90 op=LOAD Jul 10 00:44:23.437000 audit: BPF prog-id=59 op=UNLOAD Jul 10 00:44:23.437000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:23.437000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:23.437000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:23.437000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:23.437000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:23.437000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:23.437000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:23.437000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:23.437000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:23.437000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:23.437000 audit: BPF prog-id=91 op=LOAD Jul 10 00:44:23.437000 audit: BPF prog-id=67 op=UNLOAD Jul 10 00:44:23.438000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:23.438000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:23.438000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:23.438000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:23.438000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:23.438000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:23.438000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:23.438000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:23.438000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:23.438000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:23.438000 audit: BPF prog-id=92 op=LOAD Jul 10 00:44:23.438000 audit: BPF prog-id=71 op=UNLOAD Jul 10 00:44:23.439000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:23.439000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:23.439000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:23.439000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:23.439000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:23.439000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:23.439000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:23.439000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:23.439000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:23.439000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:23.439000 audit: BPF prog-id=93 op=LOAD Jul 10 00:44:23.439000 audit: BPF prog-id=48 op=UNLOAD Jul 10 00:44:23.439000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:23.439000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:23.439000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:23.439000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:23.439000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:23.439000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:23.439000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:23.439000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:23.439000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:23.439000 audit: BPF prog-id=94 op=LOAD Jul 10 00:44:23.439000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:23.439000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:23.439000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:23.439000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:23.439000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:23.439000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:23.439000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:23.439000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:23.439000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:23.439000 audit: BPF prog-id=95 op=LOAD Jul 10 00:44:23.439000 audit: BPF prog-id=49 op=UNLOAD Jul 10 00:44:23.439000 audit: BPF prog-id=50 op=UNLOAD Jul 10 00:44:23.440000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:23.440000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:23.440000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:23.440000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:23.440000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:23.440000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:23.440000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:23.440000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:23.440000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:23.440000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:23.440000 audit: BPF prog-id=96 op=LOAD Jul 10 00:44:23.440000 audit: BPF prog-id=51 op=UNLOAD Jul 10 00:44:23.440000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:23.440000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:23.440000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:23.440000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:23.440000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:23.440000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:23.440000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:23.440000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:23.440000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:23.440000 audit: BPF prog-id=97 op=LOAD Jul 10 00:44:23.440000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:23.440000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:23.440000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:23.440000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:23.440000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:23.440000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:23.440000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:23.440000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:23.440000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:23.440000 audit: BPF prog-id=98 op=LOAD Jul 10 00:44:23.440000 audit: BPF prog-id=52 op=UNLOAD Jul 10 00:44:23.440000 audit: BPF prog-id=53 op=UNLOAD Jul 10 00:44:23.441000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:23.441000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:23.441000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:23.441000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:23.441000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:23.441000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:23.441000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:23.441000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:23.441000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:23.441000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:23.441000 audit: BPF prog-id=99 op=LOAD Jul 10 00:44:23.441000 audit: BPF prog-id=54 op=UNLOAD Jul 10 00:44:23.453176 kubelet[1627]: I0710 00:44:23.453012 1627 dynamic_cafile_content.go:175] "Shutting down controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Jul 10 00:44:23.453185 systemd[1]: Stopping kubelet.service... Jul 10 00:44:23.498062 systemd[1]: kubelet.service: Deactivated successfully. Jul 10 00:44:23.497000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:44:23.498226 systemd[1]: Stopped kubelet.service. Jul 10 00:44:23.499812 systemd[1]: Starting kubelet.service... Jul 10 00:44:23.590622 systemd[1]: Started kubelet.service. Jul 10 00:44:23.590000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:44:23.624728 kubelet[2000]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Jul 10 00:44:23.624728 kubelet[2000]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.35. Image garbage collector will get sandbox image information from CRI. Jul 10 00:44:23.624728 kubelet[2000]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Jul 10 00:44:23.625207 kubelet[2000]: I0710 00:44:23.624750 2000 server.go:212] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Jul 10 00:44:23.630599 kubelet[2000]: I0710 00:44:23.630566 2000 server.go:530] "Kubelet version" kubeletVersion="v1.33.0" Jul 10 00:44:23.630599 kubelet[2000]: I0710 00:44:23.630589 2000 server.go:532] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Jul 10 00:44:23.631004 kubelet[2000]: I0710 00:44:23.630758 2000 server.go:956] "Client rotation is on, will bootstrap in background" Jul 10 00:44:23.632214 kubelet[2000]: I0710 00:44:23.632187 2000 certificate_store.go:147] "Loading cert/key pair from a file" filePath="/var/lib/kubelet/pki/kubelet-client-current.pem" Jul 10 00:44:23.634810 kubelet[2000]: I0710 00:44:23.634759 2000 dynamic_cafile_content.go:161] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Jul 10 00:44:23.637894 kubelet[2000]: E0710 00:44:23.637835 2000 log.go:32] "RuntimeConfig from runtime service failed" err="rpc error: code = Unimplemented desc = unknown method RuntimeConfig for service runtime.v1.RuntimeService" Jul 10 00:44:23.637894 kubelet[2000]: I0710 00:44:23.637895 2000 server.go:1423] "CRI implementation should be updated to support RuntimeConfig when KubeletCgroupDriverFromCRI feature gate has been enabled. Falling back to using cgroupDriver from kubelet config." Jul 10 00:44:23.641619 kubelet[2000]: I0710 00:44:23.641593 2000 server.go:782] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Jul 10 00:44:23.641838 kubelet[2000]: I0710 00:44:23.641795 2000 container_manager_linux.go:267] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Jul 10 00:44:23.641997 kubelet[2000]: I0710 00:44:23.641829 2000 container_manager_linux.go:272] "Creating Container Manager object based on Node Config" nodeConfig={"NodeName":"localhost","RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"MemoryManagerPolicy":"None","MemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null,"CgroupVersion":2} Jul 10 00:44:23.642104 kubelet[2000]: I0710 00:44:23.642002 2000 topology_manager.go:138] "Creating topology manager with none policy" Jul 10 00:44:23.642104 kubelet[2000]: I0710 00:44:23.642011 2000 container_manager_linux.go:303] "Creating device plugin manager" Jul 10 00:44:23.642104 kubelet[2000]: I0710 00:44:23.642053 2000 state_mem.go:36] "Initialized new in-memory state store" Jul 10 00:44:23.642197 kubelet[2000]: I0710 00:44:23.642183 2000 kubelet.go:480] "Attempting to sync node with API server" Jul 10 00:44:23.642223 kubelet[2000]: I0710 00:44:23.642210 2000 kubelet.go:375] "Adding static pod path" path="/etc/kubernetes/manifests" Jul 10 00:44:23.642246 kubelet[2000]: I0710 00:44:23.642231 2000 kubelet.go:386] "Adding apiserver pod source" Jul 10 00:44:23.642272 kubelet[2000]: I0710 00:44:23.642246 2000 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Jul 10 00:44:23.643520 kubelet[2000]: I0710 00:44:23.643493 2000 kuberuntime_manager.go:279] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Jul 10 00:44:23.645069 kubelet[2000]: I0710 00:44:23.645031 2000 kubelet.go:935] "Not starting ClusterTrustBundle informer because we are in static kubelet mode or the ClusterTrustBundleProjection featuregate is disabled" Jul 10 00:44:23.654875 kubelet[2000]: I0710 00:44:23.654838 2000 watchdog_linux.go:99] "Systemd watchdog is not enabled" Jul 10 00:44:23.655030 kubelet[2000]: I0710 00:44:23.655015 2000 server.go:1289] "Started kubelet" Jul 10 00:44:23.659643 kubelet[2000]: I0710 00:44:23.659463 2000 ratelimit.go:55] "Setting rate limiting for endpoint" service="podresources" qps=100 burstTokens=10 Jul 10 00:44:23.660095 kubelet[2000]: I0710 00:44:23.660048 2000 server.go:255] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Jul 10 00:44:23.659000 audit[2000]: AVC avc: denied { mac_admin } for pid=2000 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:23.659000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 10 00:44:23.659000 audit[2000]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c00068d320 a1=c000cd3368 a2=c00068d2f0 a3=25 items=0 ppid=1 pid=2000 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:44:23.659000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 10 00:44:23.660971 kubelet[2000]: I0710 00:44:23.660930 2000 kubelet.go:1552] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins_registry: invalid argument" Jul 10 00:44:23.660000 audit[2000]: AVC avc: denied { mac_admin } for pid=2000 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:23.660000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 10 00:44:23.660000 audit[2000]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000111ea0 a1=c000cd3380 a2=c00068d3b0 a3=25 items=0 ppid=1 pid=2000 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:44:23.660000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 10 00:44:23.661323 kubelet[2000]: I0710 00:44:23.661088 2000 kubelet.go:1556] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins: invalid argument" Jul 10 00:44:23.661437 kubelet[2000]: I0710 00:44:23.661420 2000 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Jul 10 00:44:23.662061 kubelet[2000]: I0710 00:44:23.661977 2000 server.go:180] "Starting to listen" address="0.0.0.0" port=10250 Jul 10 00:44:23.663047 kubelet[2000]: I0710 00:44:23.662949 2000 dynamic_serving_content.go:135] "Starting controller" name="kubelet-server-cert-files::/var/lib/kubelet/pki/kubelet.crt::/var/lib/kubelet/pki/kubelet.key" Jul 10 00:44:23.663160 kubelet[2000]: I0710 00:44:23.663135 2000 server.go:317] "Adding debug handlers to kubelet server" Jul 10 00:44:23.663553 kubelet[2000]: I0710 00:44:23.663529 2000 volume_manager.go:297] "Starting Kubelet Volume Manager" Jul 10 00:44:23.663687 kubelet[2000]: I0710 00:44:23.663666 2000 desired_state_of_world_populator.go:150] "Desired state populator starts to run" Jul 10 00:44:23.663883 kubelet[2000]: I0710 00:44:23.663857 2000 reconciler.go:26] "Reconciler: start to sync state" Jul 10 00:44:23.664676 kubelet[2000]: I0710 00:44:23.664647 2000 factory.go:221] Registration of the crio container factory failed: Get "http://%2Fvar%2Frun%2Fcrio%2Fcrio.sock/info": dial unix /var/run/crio/crio.sock: connect: no such file or directory Jul 10 00:44:23.665153 kubelet[2000]: E0710 00:44:23.665101 2000 kubelet.go:1600] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Jul 10 00:44:23.666160 kubelet[2000]: I0710 00:44:23.666122 2000 factory.go:223] Registration of the containerd container factory successfully Jul 10 00:44:23.666160 kubelet[2000]: I0710 00:44:23.666143 2000 factory.go:223] Registration of the systemd container factory successfully Jul 10 00:44:23.672700 kubelet[2000]: I0710 00:44:23.672666 2000 kubelet_network_linux.go:49] "Initialized iptables rules." protocol="IPv6" Jul 10 00:44:23.680820 kubelet[2000]: I0710 00:44:23.680786 2000 kubelet_network_linux.go:49] "Initialized iptables rules." protocol="IPv4" Jul 10 00:44:23.680820 kubelet[2000]: I0710 00:44:23.680816 2000 status_manager.go:230] "Starting to sync pod status with apiserver" Jul 10 00:44:23.680952 kubelet[2000]: I0710 00:44:23.680836 2000 watchdog_linux.go:127] "Systemd watchdog is not enabled or the interval is invalid, so health checking will not be started." Jul 10 00:44:23.680952 kubelet[2000]: I0710 00:44:23.680866 2000 kubelet.go:2436] "Starting kubelet main sync loop" Jul 10 00:44:23.680952 kubelet[2000]: E0710 00:44:23.680914 2000 kubelet.go:2460] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Jul 10 00:44:23.695522 kubelet[2000]: I0710 00:44:23.695498 2000 cpu_manager.go:221] "Starting CPU manager" policy="none" Jul 10 00:44:23.695522 kubelet[2000]: I0710 00:44:23.695515 2000 cpu_manager.go:222] "Reconciling" reconcilePeriod="10s" Jul 10 00:44:23.695634 kubelet[2000]: I0710 00:44:23.695535 2000 state_mem.go:36] "Initialized new in-memory state store" Jul 10 00:44:23.695693 kubelet[2000]: I0710 00:44:23.695667 2000 state_mem.go:88] "Updated default CPUSet" cpuSet="" Jul 10 00:44:23.695751 kubelet[2000]: I0710 00:44:23.695688 2000 state_mem.go:96] "Updated CPUSet assignments" assignments={} Jul 10 00:44:23.695751 kubelet[2000]: I0710 00:44:23.695708 2000 policy_none.go:49] "None policy: Start" Jul 10 00:44:23.695751 kubelet[2000]: I0710 00:44:23.695717 2000 memory_manager.go:186] "Starting memorymanager" policy="None" Jul 10 00:44:23.695751 kubelet[2000]: I0710 00:44:23.695725 2000 state_mem.go:35] "Initializing new in-memory state store" Jul 10 00:44:23.695858 kubelet[2000]: I0710 00:44:23.695815 2000 state_mem.go:75] "Updated machine memory state" Jul 10 00:44:23.699346 kubelet[2000]: E0710 00:44:23.699312 2000 manager.go:517] "Failed to read data from checkpoint" err="checkpoint is not found" checkpoint="kubelet_internal_checkpoint" Jul 10 00:44:23.698000 audit[2000]: AVC avc: denied { mac_admin } for pid=2000 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:23.698000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 10 00:44:23.698000 audit[2000]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c0011bd6e0 a1=c001200618 a2=c0011bd6b0 a3=25 items=0 ppid=1 pid=2000 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:44:23.698000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 10 00:44:23.699564 kubelet[2000]: E0710 00:44:23.699393 2000 server.go:94] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/device-plugins/: invalid argument" path="/var/lib/kubelet/device-plugins/" Jul 10 00:44:23.699564 kubelet[2000]: I0710 00:44:23.699525 2000 eviction_manager.go:189] "Eviction manager: starting control loop" Jul 10 00:44:23.699564 kubelet[2000]: I0710 00:44:23.699536 2000 container_log_manager.go:189] "Initializing container log rotate workers" workers=1 monitorPeriod="10s" Jul 10 00:44:23.700033 kubelet[2000]: I0710 00:44:23.699980 2000 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Jul 10 00:44:23.701477 kubelet[2000]: E0710 00:44:23.701085 2000 eviction_manager.go:267] "eviction manager: failed to check if we have separate container filesystem. Ignoring." err="no imagefs label for configured runtime" Jul 10 00:44:23.782100 kubelet[2000]: I0710 00:44:23.782033 2000 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-apiserver-localhost" Jul 10 00:44:23.782100 kubelet[2000]: I0710 00:44:23.782104 2000 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-scheduler-localhost" Jul 10 00:44:23.782396 kubelet[2000]: I0710 00:44:23.782033 2000 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-controller-manager-localhost" Jul 10 00:44:23.807707 kubelet[2000]: I0710 00:44:23.807672 2000 kubelet_node_status.go:75] "Attempting to register node" node="localhost" Jul 10 00:44:23.813000 audit[1815]: AVC avc: denied { watch } for pid=1815 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6719 scontext=system_u:system_r:svirt_lxc_net_t:s0:c504,c577 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:44:23.813000 audit[1815]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c0013b0ca0 a2=fc6 a3=0 items=0 ppid=1675 pid=1815 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c504,c577 key=(null) Jul 10 00:44:23.813000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 00:44:23.813000 audit[1815]: AVC avc: denied { watch } for pid=1815 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6719 scontext=system_u:system_r:svirt_lxc_net_t:s0:c504,c577 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:44:23.813000 audit[1815]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c0013b0ce0 a2=fc6 a3=0 items=0 ppid=1675 pid=1815 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c504,c577 key=(null) Jul 10 00:44:23.813000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 00:44:23.813000 audit[1815]: AVC avc: denied { watch } for pid=1815 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6719 scontext=system_u:system_r:svirt_lxc_net_t:s0:c504,c577 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:44:23.813000 audit[1815]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c0013b0d20 a2=fc6 a3=0 items=0 ppid=1675 pid=1815 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c504,c577 key=(null) Jul 10 00:44:23.813000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 00:44:23.813000 audit[1815]: AVC avc: denied { watch } for pid=1815 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6719 scontext=system_u:system_r:svirt_lxc_net_t:s0:c504,c577 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:44:23.813000 audit[1815]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c0013b0d60 a2=fc6 a3=0 items=0 ppid=1675 pid=1815 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c504,c577 key=(null) Jul 10 00:44:23.813000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 00:44:23.864471 kubelet[2000]: I0710 00:44:23.864411 2000 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/84b858ec27c8b2738b1d9ff9927e0dcb-ca-certs\") pod \"kube-controller-manager-localhost\" (UID: \"84b858ec27c8b2738b1d9ff9927e0dcb\") " pod="kube-system/kube-controller-manager-localhost" Jul 10 00:44:23.864471 kubelet[2000]: I0710 00:44:23.864462 2000 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/84b858ec27c8b2738b1d9ff9927e0dcb-k8s-certs\") pod \"kube-controller-manager-localhost\" (UID: \"84b858ec27c8b2738b1d9ff9927e0dcb\") " pod="kube-system/kube-controller-manager-localhost" Jul 10 00:44:23.864664 kubelet[2000]: I0710 00:44:23.864484 2000 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/84b858ec27c8b2738b1d9ff9927e0dcb-kubeconfig\") pod \"kube-controller-manager-localhost\" (UID: \"84b858ec27c8b2738b1d9ff9927e0dcb\") " pod="kube-system/kube-controller-manager-localhost" Jul 10 00:44:23.864664 kubelet[2000]: I0710 00:44:23.864508 2000 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/84b858ec27c8b2738b1d9ff9927e0dcb-usr-share-ca-certificates\") pod \"kube-controller-manager-localhost\" (UID: \"84b858ec27c8b2738b1d9ff9927e0dcb\") " pod="kube-system/kube-controller-manager-localhost" Jul 10 00:44:23.864712 kubelet[2000]: I0710 00:44:23.864661 2000 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/0838d61c368fcc2d78902cc10ca0ff75-ca-certs\") pod \"kube-apiserver-localhost\" (UID: \"0838d61c368fcc2d78902cc10ca0ff75\") " pod="kube-system/kube-apiserver-localhost" Jul 10 00:44:23.864712 kubelet[2000]: I0710 00:44:23.864685 2000 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/0838d61c368fcc2d78902cc10ca0ff75-k8s-certs\") pod \"kube-apiserver-localhost\" (UID: \"0838d61c368fcc2d78902cc10ca0ff75\") " pod="kube-system/kube-apiserver-localhost" Jul 10 00:44:23.864712 kubelet[2000]: I0710 00:44:23.864705 2000 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/84b858ec27c8b2738b1d9ff9927e0dcb-flexvolume-dir\") pod \"kube-controller-manager-localhost\" (UID: \"84b858ec27c8b2738b1d9ff9927e0dcb\") " pod="kube-system/kube-controller-manager-localhost" Jul 10 00:44:23.864817 kubelet[2000]: I0710 00:44:23.864780 2000 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/834ee54f1daa06092e339273649eb5ea-kubeconfig\") pod \"kube-scheduler-localhost\" (UID: \"834ee54f1daa06092e339273649eb5ea\") " pod="kube-system/kube-scheduler-localhost" Jul 10 00:44:23.864874 kubelet[2000]: I0710 00:44:23.864834 2000 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/0838d61c368fcc2d78902cc10ca0ff75-usr-share-ca-certificates\") pod \"kube-apiserver-localhost\" (UID: \"0838d61c368fcc2d78902cc10ca0ff75\") " pod="kube-system/kube-apiserver-localhost" Jul 10 00:44:24.024765 kubelet[2000]: E0710 00:44:24.024707 2000 kubelet.go:3311] "Failed creating a mirror pod" err="pods \"kube-scheduler-localhost\" already exists" pod="kube-system/kube-scheduler-localhost" Jul 10 00:44:24.024765 kubelet[2000]: E0710 00:44:24.024771 2000 kubelet.go:3311] "Failed creating a mirror pod" err="pods \"kube-apiserver-localhost\" already exists" pod="kube-system/kube-apiserver-localhost" Jul 10 00:44:24.025014 kubelet[2000]: E0710 00:44:24.024961 2000 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:44:24.025083 kubelet[2000]: E0710 00:44:24.025036 2000 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:44:24.025083 kubelet[2000]: E0710 00:44:24.025075 2000 kubelet.go:3311] "Failed creating a mirror pod" err="pods \"kube-controller-manager-localhost\" already exists" pod="kube-system/kube-controller-manager-localhost" Jul 10 00:44:24.025283 kubelet[2000]: E0710 00:44:24.025169 2000 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:44:24.099482 kubelet[2000]: I0710 00:44:24.099429 2000 kubelet_node_status.go:124] "Node was previously registered" node="localhost" Jul 10 00:44:24.099662 kubelet[2000]: I0710 00:44:24.099512 2000 kubelet_node_status.go:78] "Successfully registered node" node="localhost" Jul 10 00:44:24.643379 kubelet[2000]: I0710 00:44:24.643299 2000 apiserver.go:52] "Watching apiserver" Jul 10 00:44:24.664323 kubelet[2000]: I0710 00:44:24.664277 2000 desired_state_of_world_populator.go:158] "Finished populating initial desired state of world" Jul 10 00:44:24.691324 kubelet[2000]: I0710 00:44:24.691280 2000 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-apiserver-localhost" Jul 10 00:44:24.691324 kubelet[2000]: I0710 00:44:24.691300 2000 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-controller-manager-localhost" Jul 10 00:44:24.691493 kubelet[2000]: I0710 00:44:24.691446 2000 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-scheduler-localhost" Jul 10 00:44:25.143335 kubelet[2000]: E0710 00:44:25.143254 2000 kubelet.go:3311] "Failed creating a mirror pod" err="pods \"kube-apiserver-localhost\" already exists" pod="kube-system/kube-apiserver-localhost" Jul 10 00:44:25.143693 kubelet[2000]: E0710 00:44:25.143649 2000 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:44:25.144373 kubelet[2000]: I0710 00:44:25.144302 2000 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-controller-manager-localhost" podStartSLOduration=3.14427618 podStartE2EDuration="3.14427618s" podCreationTimestamp="2025-07-10 00:44:22 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-10 00:44:25.144099141 +0000 UTC m=+1.550054776" watchObservedRunningTime="2025-07-10 00:44:25.14427618 +0000 UTC m=+1.550231815" Jul 10 00:44:25.144550 kubelet[2000]: E0710 00:44:25.143994 2000 kubelet.go:3311] "Failed creating a mirror pod" err="pods \"kube-controller-manager-localhost\" already exists" pod="kube-system/kube-controller-manager-localhost" Jul 10 00:44:25.144608 kubelet[2000]: E0710 00:44:25.144558 2000 kubelet.go:3311] "Failed creating a mirror pod" err="pods \"kube-scheduler-localhost\" already exists" pod="kube-system/kube-scheduler-localhost" Jul 10 00:44:25.144714 kubelet[2000]: E0710 00:44:25.144682 2000 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:44:25.144903 kubelet[2000]: E0710 00:44:25.144865 2000 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:44:25.154829 kubelet[2000]: I0710 00:44:25.154721 2000 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-apiserver-localhost" podStartSLOduration=4.154695044 podStartE2EDuration="4.154695044s" podCreationTimestamp="2025-07-10 00:44:21 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-10 00:44:25.154125715 +0000 UTC m=+1.560081350" watchObservedRunningTime="2025-07-10 00:44:25.154695044 +0000 UTC m=+1.560650679" Jul 10 00:44:25.195679 kubelet[2000]: I0710 00:44:25.195603 2000 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-scheduler-localhost" podStartSLOduration=4.195582112 podStartE2EDuration="4.195582112s" podCreationTimestamp="2025-07-10 00:44:21 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-10 00:44:25.195252811 +0000 UTC m=+1.601208486" watchObservedRunningTime="2025-07-10 00:44:25.195582112 +0000 UTC m=+1.601537747" Jul 10 00:44:25.697271 kubelet[2000]: E0710 00:44:25.697238 2000 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:44:25.697755 kubelet[2000]: E0710 00:44:25.697709 2000 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:44:25.697755 kubelet[2000]: E0710 00:44:25.697396 2000 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:44:26.698899 kubelet[2000]: E0710 00:44:26.698839 2000 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:44:27.847942 kubelet[2000]: I0710 00:44:27.847899 2000 kuberuntime_manager.go:1746] "Updating runtime config through cri with podcidr" CIDR="192.168.0.0/24" Jul 10 00:44:27.848376 kubelet[2000]: I0710 00:44:27.848360 2000 kubelet_network.go:61] "Updating Pod CIDR" originalPodCIDR="" newPodCIDR="192.168.0.0/24" Jul 10 00:44:27.848410 env[1210]: time="2025-07-10T00:44:27.848175693Z" level=info msg="No cni config template is specified, wait for other system components to drop the config." Jul 10 00:44:28.845163 systemd[1]: Created slice kubepods-besteffort-pod7dd83009_6f9d_43b8_bd4c_e86825460c1b.slice. Jul 10 00:44:28.913337 kubelet[2000]: I0710 00:44:28.913255 2000 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-proxy\" (UniqueName: \"kubernetes.io/configmap/7dd83009-6f9d-43b8-bd4c-e86825460c1b-kube-proxy\") pod \"kube-proxy-cs4m9\" (UID: \"7dd83009-6f9d-43b8-bd4c-e86825460c1b\") " pod="kube-system/kube-proxy-cs4m9" Jul 10 00:44:28.913337 kubelet[2000]: I0710 00:44:28.913309 2000 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/7dd83009-6f9d-43b8-bd4c-e86825460c1b-lib-modules\") pod \"kube-proxy-cs4m9\" (UID: \"7dd83009-6f9d-43b8-bd4c-e86825460c1b\") " pod="kube-system/kube-proxy-cs4m9" Jul 10 00:44:28.913337 kubelet[2000]: I0710 00:44:28.913330 2000 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/7dd83009-6f9d-43b8-bd4c-e86825460c1b-xtables-lock\") pod \"kube-proxy-cs4m9\" (UID: \"7dd83009-6f9d-43b8-bd4c-e86825460c1b\") " pod="kube-system/kube-proxy-cs4m9" Jul 10 00:44:28.913337 kubelet[2000]: I0710 00:44:28.913345 2000 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-cbn8j\" (UniqueName: \"kubernetes.io/projected/7dd83009-6f9d-43b8-bd4c-e86825460c1b-kube-api-access-cbn8j\") pod \"kube-proxy-cs4m9\" (UID: \"7dd83009-6f9d-43b8-bd4c-e86825460c1b\") " pod="kube-system/kube-proxy-cs4m9" Jul 10 00:44:28.998160 systemd[1]: Created slice kubepods-besteffort-pod17a9f213_c1a4_44c6_b6aa_1cf687e9a664.slice. Jul 10 00:44:29.019991 kubelet[2000]: I0710 00:44:29.019951 2000 swap_util.go:74] "error creating dir to test if tmpfs noswap is enabled. Assuming not supported" mount path="" error="stat /var/lib/kubelet/plugins/kubernetes.io/empty-dir: no such file or directory" Jul 10 00:44:29.115440 kubelet[2000]: I0710 00:44:29.115394 2000 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-kpslc\" (UniqueName: \"kubernetes.io/projected/17a9f213-c1a4-44c6-b6aa-1cf687e9a664-kube-api-access-kpslc\") pod \"tigera-operator-747864d56d-9c469\" (UID: \"17a9f213-c1a4-44c6-b6aa-1cf687e9a664\") " pod="tigera-operator/tigera-operator-747864d56d-9c469" Jul 10 00:44:29.115440 kubelet[2000]: I0710 00:44:29.115434 2000 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/17a9f213-c1a4-44c6-b6aa-1cf687e9a664-var-lib-calico\") pod \"tigera-operator-747864d56d-9c469\" (UID: \"17a9f213-c1a4-44c6-b6aa-1cf687e9a664\") " pod="tigera-operator/tigera-operator-747864d56d-9c469" Jul 10 00:44:29.151221 kubelet[2000]: E0710 00:44:29.151176 2000 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:44:29.151880 env[1210]: time="2025-07-10T00:44:29.151804879Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-cs4m9,Uid:7dd83009-6f9d-43b8-bd4c-e86825460c1b,Namespace:kube-system,Attempt:0,}" Jul 10 00:44:29.167523 env[1210]: time="2025-07-10T00:44:29.167449944Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 10 00:44:29.167523 env[1210]: time="2025-07-10T00:44:29.167488377Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 10 00:44:29.167523 env[1210]: time="2025-07-10T00:44:29.167498355Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 10 00:44:29.167726 env[1210]: time="2025-07-10T00:44:29.167669481Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/87694c7c65a736ccd39cf7ad18f4d485ec73f43cab6f3cf5b3681bf625b5da07 pid=2061 runtime=io.containerd.runc.v2 Jul 10 00:44:29.183395 systemd[1]: Started cri-containerd-87694c7c65a736ccd39cf7ad18f4d485ec73f43cab6f3cf5b3681bf625b5da07.scope. Jul 10 00:44:29.201887 kernel: kauditd_printk_skb: 281 callbacks suppressed Jul 10 00:44:29.202008 kernel: audit: type=1400 audit(1752108269.196:802): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:29.202034 kernel: audit: type=1400 audit(1752108269.196:803): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:29.196000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:29.196000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:29.196000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:29.206461 kernel: audit: type=1400 audit(1752108269.196:804): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:29.206507 kernel: audit: type=1400 audit(1752108269.196:805): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:29.196000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:29.209234 kernel: audit: type=1400 audit(1752108269.196:806): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:29.196000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:29.211967 kernel: audit: type=1400 audit(1752108269.196:807): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:29.196000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:29.196000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:29.217722 kernel: audit: type=1400 audit(1752108269.196:808): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:29.217770 kernel: audit: type=1400 audit(1752108269.196:809): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:29.196000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:29.196000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:29.223489 kernel: audit: type=1400 audit(1752108269.196:810): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:29.223604 kernel: audit: type=1400 audit(1752108269.200:811): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:29.200000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:29.200000 audit: BPF prog-id=100 op=LOAD Jul 10 00:44:29.200000 audit[2072]: AVC avc: denied { bpf } for pid=2072 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:29.200000 audit[2072]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=2061 pid=2072 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:44:29.200000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3837363934633763363561373336636364333963663761643138663464 Jul 10 00:44:29.200000 audit[2072]: AVC avc: denied { perfmon } for pid=2072 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:29.200000 audit[2072]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=2061 pid=2072 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:44:29.200000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3837363934633763363561373336636364333963663761643138663464 Jul 10 00:44:29.200000 audit[2072]: AVC avc: denied { bpf } for pid=2072 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:29.200000 audit[2072]: AVC avc: denied { bpf } for pid=2072 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:29.200000 audit[2072]: AVC avc: denied { bpf } for pid=2072 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:29.200000 audit[2072]: AVC avc: denied { perfmon } for pid=2072 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:29.200000 audit[2072]: AVC avc: denied { perfmon } for pid=2072 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:29.200000 audit[2072]: AVC avc: denied { perfmon } for pid=2072 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:29.200000 audit[2072]: AVC avc: denied { perfmon } for pid=2072 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:29.200000 audit[2072]: AVC avc: denied { perfmon } for pid=2072 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:29.200000 audit[2072]: AVC avc: denied { bpf } for pid=2072 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:29.200000 audit[2072]: AVC avc: denied { bpf } for pid=2072 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:29.200000 audit: BPF prog-id=101 op=LOAD Jul 10 00:44:29.200000 audit[2072]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c00032cae0 items=0 ppid=2061 pid=2072 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:44:29.200000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3837363934633763363561373336636364333963663761643138663464 Jul 10 00:44:29.202000 audit[2072]: AVC avc: denied { bpf } for pid=2072 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:29.202000 audit[2072]: AVC avc: denied { bpf } for pid=2072 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:29.202000 audit[2072]: AVC avc: denied { perfmon } for pid=2072 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:29.202000 audit[2072]: AVC avc: denied { perfmon } for pid=2072 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:29.202000 audit[2072]: AVC avc: denied { perfmon } for pid=2072 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:29.202000 audit[2072]: AVC avc: denied { perfmon } for pid=2072 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:29.202000 audit[2072]: AVC avc: denied { perfmon } for pid=2072 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:29.202000 audit[2072]: AVC avc: denied { bpf } for pid=2072 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:29.202000 audit[2072]: AVC avc: denied { bpf } for pid=2072 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:29.202000 audit: BPF prog-id=102 op=LOAD Jul 10 00:44:29.202000 audit[2072]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c00032cb28 items=0 ppid=2061 pid=2072 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:44:29.202000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3837363934633763363561373336636364333963663761643138663464 Jul 10 00:44:29.205000 audit: BPF prog-id=102 op=UNLOAD Jul 10 00:44:29.205000 audit: BPF prog-id=101 op=UNLOAD Jul 10 00:44:29.205000 audit[2072]: AVC avc: denied { bpf } for pid=2072 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:29.205000 audit[2072]: AVC avc: denied { bpf } for pid=2072 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:29.205000 audit[2072]: AVC avc: denied { bpf } for pid=2072 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:29.205000 audit[2072]: AVC avc: denied { perfmon } for pid=2072 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:29.205000 audit[2072]: AVC avc: denied { perfmon } for pid=2072 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:29.205000 audit[2072]: AVC avc: denied { perfmon } for pid=2072 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:29.205000 audit[2072]: AVC avc: denied { perfmon } for pid=2072 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:29.205000 audit[2072]: AVC avc: denied { perfmon } for pid=2072 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:29.205000 audit[2072]: AVC avc: denied { bpf } for pid=2072 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:29.205000 audit[2072]: AVC avc: denied { bpf } for pid=2072 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:29.205000 audit: BPF prog-id=103 op=LOAD Jul 10 00:44:29.205000 audit[2072]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c00032cf38 items=0 ppid=2061 pid=2072 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:44:29.205000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3837363934633763363561373336636364333963663761643138663464 Jul 10 00:44:29.238888 env[1210]: time="2025-07-10T00:44:29.238827030Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-cs4m9,Uid:7dd83009-6f9d-43b8-bd4c-e86825460c1b,Namespace:kube-system,Attempt:0,} returns sandbox id \"87694c7c65a736ccd39cf7ad18f4d485ec73f43cab6f3cf5b3681bf625b5da07\"" Jul 10 00:44:29.239619 kubelet[2000]: E0710 00:44:29.239571 2000 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:44:29.244943 env[1210]: time="2025-07-10T00:44:29.244899620Z" level=info msg="CreateContainer within sandbox \"87694c7c65a736ccd39cf7ad18f4d485ec73f43cab6f3cf5b3681bf625b5da07\" for container &ContainerMetadata{Name:kube-proxy,Attempt:0,}" Jul 10 00:44:29.259603 env[1210]: time="2025-07-10T00:44:29.259563712Z" level=info msg="CreateContainer within sandbox \"87694c7c65a736ccd39cf7ad18f4d485ec73f43cab6f3cf5b3681bf625b5da07\" for &ContainerMetadata{Name:kube-proxy,Attempt:0,} returns container id \"2b117c3e8dcf2dbf380b5d202460fe7f2a0302acc4a50ebb347b7af0bc4d3553\"" Jul 10 00:44:29.260189 env[1210]: time="2025-07-10T00:44:29.260147085Z" level=info msg="StartContainer for \"2b117c3e8dcf2dbf380b5d202460fe7f2a0302acc4a50ebb347b7af0bc4d3553\"" Jul 10 00:44:29.275082 systemd[1]: Started cri-containerd-2b117c3e8dcf2dbf380b5d202460fe7f2a0302acc4a50ebb347b7af0bc4d3553.scope. Jul 10 00:44:29.301066 env[1210]: time="2025-07-10T00:44:29.301003022Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-747864d56d-9c469,Uid:17a9f213-c1a4-44c6-b6aa-1cf687e9a664,Namespace:tigera-operator,Attempt:0,}" Jul 10 00:44:29.316460 env[1210]: time="2025-07-10T00:44:29.316247642Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 10 00:44:29.316460 env[1210]: time="2025-07-10T00:44:29.316284321Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 10 00:44:29.316460 env[1210]: time="2025-07-10T00:44:29.316293890Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 10 00:44:29.316828 env[1210]: time="2025-07-10T00:44:29.316779636Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/23278a0b9a6f122ad9d281a9dd4ca931569739ef4428b40bd4c94fe452dd933c pid=2121 runtime=io.containerd.runc.v2 Jul 10 00:44:29.327711 systemd[1]: Started cri-containerd-23278a0b9a6f122ad9d281a9dd4ca931569739ef4428b40bd4c94fe452dd933c.scope. Jul 10 00:44:29.477000 audit[2103]: AVC avc: denied { perfmon } for pid=2103 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:29.477000 audit[2103]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=7fa4633c6a88 items=0 ppid=2061 pid=2103 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:44:29.477000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3262313137633365386463663264626633383062356432303234363066 Jul 10 00:44:29.477000 audit[2103]: AVC avc: denied { bpf } for pid=2103 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:29.477000 audit[2103]: AVC avc: denied { bpf } for pid=2103 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:29.477000 audit[2103]: AVC avc: denied { bpf } for pid=2103 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:29.477000 audit[2103]: AVC avc: denied { perfmon } for pid=2103 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:29.477000 audit[2103]: AVC avc: denied { perfmon } for pid=2103 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:29.477000 audit[2103]: AVC avc: denied { perfmon } for pid=2103 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:29.477000 audit[2103]: AVC avc: denied { perfmon } for pid=2103 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:29.477000 audit[2103]: AVC avc: denied { perfmon } for pid=2103 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:29.477000 audit[2103]: AVC avc: denied { bpf } for pid=2103 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:29.477000 audit[2103]: AVC avc: denied { bpf } for pid=2103 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:29.477000 audit: BPF prog-id=104 op=LOAD Jul 10 00:44:29.477000 audit[2103]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001979d8 a2=78 a3=c0003a85e8 items=0 ppid=2061 pid=2103 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:44:29.477000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3262313137633365386463663264626633383062356432303234363066 Jul 10 00:44:29.478000 audit[2103]: AVC avc: denied { bpf } for pid=2103 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:29.478000 audit[2103]: AVC avc: denied { bpf } for pid=2103 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:29.478000 audit[2103]: AVC avc: denied { perfmon } for pid=2103 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:29.478000 audit[2103]: AVC avc: denied { perfmon } for pid=2103 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:29.478000 audit[2103]: AVC avc: denied { perfmon } for pid=2103 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:29.478000 audit[2103]: AVC avc: denied { perfmon } for pid=2103 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:29.478000 audit[2103]: AVC avc: denied { perfmon } for pid=2103 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:29.478000 audit[2103]: AVC avc: denied { bpf } for pid=2103 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:29.478000 audit[2103]: AVC avc: denied { bpf } for pid=2103 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:29.478000 audit: BPF prog-id=105 op=LOAD Jul 10 00:44:29.478000 audit[2103]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000197770 a2=78 a3=c0003a8638 items=0 ppid=2061 pid=2103 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:44:29.478000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3262313137633365386463663264626633383062356432303234363066 Jul 10 00:44:29.478000 audit: BPF prog-id=105 op=UNLOAD Jul 10 00:44:29.478000 audit: BPF prog-id=104 op=UNLOAD Jul 10 00:44:29.478000 audit[2103]: AVC avc: denied { bpf } for pid=2103 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:29.478000 audit[2103]: AVC avc: denied { bpf } for pid=2103 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:29.478000 audit[2103]: AVC avc: denied { bpf } for pid=2103 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:29.478000 audit[2103]: AVC avc: denied { perfmon } for pid=2103 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:29.478000 audit[2103]: AVC avc: denied { perfmon } for pid=2103 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:29.478000 audit[2103]: AVC avc: denied { perfmon } for pid=2103 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:29.478000 audit[2103]: AVC avc: denied { perfmon } for pid=2103 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:29.478000 audit[2103]: AVC avc: denied { perfmon } for pid=2103 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:29.478000 audit[2103]: AVC avc: denied { bpf } for pid=2103 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:29.478000 audit[2103]: AVC avc: denied { bpf } for pid=2103 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:29.478000 audit: BPF prog-id=106 op=LOAD Jul 10 00:44:29.478000 audit[2103]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000197c30 a2=78 a3=c0003a86c8 items=0 ppid=2061 pid=2103 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:44:29.478000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3262313137633365386463663264626633383062356432303234363066 Jul 10 00:44:29.479000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:29.479000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:29.479000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:29.479000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:29.479000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:29.479000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:29.479000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:29.479000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:29.479000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:29.479000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:29.479000 audit: BPF prog-id=107 op=LOAD Jul 10 00:44:29.479000 audit[2130]: AVC avc: denied { bpf } for pid=2130 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:29.479000 audit[2130]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=2121 pid=2130 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:44:29.479000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3233323738613062396136663132326164396432383161396464346361 Jul 10 00:44:29.480000 audit[2130]: AVC avc: denied { perfmon } for pid=2130 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:29.480000 audit[2130]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=2121 pid=2130 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:44:29.480000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3233323738613062396136663132326164396432383161396464346361 Jul 10 00:44:29.480000 audit[2130]: AVC avc: denied { bpf } for pid=2130 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:29.480000 audit[2130]: AVC avc: denied { bpf } for pid=2130 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:29.480000 audit[2130]: AVC avc: denied { bpf } for pid=2130 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:29.480000 audit[2130]: AVC avc: denied { perfmon } for pid=2130 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:29.480000 audit[2130]: AVC avc: denied { perfmon } for pid=2130 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:29.480000 audit[2130]: AVC avc: denied { perfmon } for pid=2130 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:29.480000 audit[2130]: AVC avc: denied { perfmon } for pid=2130 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:29.480000 audit[2130]: AVC avc: denied { perfmon } for pid=2130 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:29.480000 audit[2130]: AVC avc: denied { bpf } for pid=2130 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:29.480000 audit[2130]: AVC avc: denied { bpf } for pid=2130 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:29.480000 audit: BPF prog-id=108 op=LOAD Jul 10 00:44:29.480000 audit[2130]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0002c3dc0 items=0 ppid=2121 pid=2130 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:44:29.480000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3233323738613062396136663132326164396432383161396464346361 Jul 10 00:44:29.480000 audit[2130]: AVC avc: denied { bpf } for pid=2130 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:29.480000 audit[2130]: AVC avc: denied { bpf } for pid=2130 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:29.480000 audit[2130]: AVC avc: denied { perfmon } for pid=2130 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:29.480000 audit[2130]: AVC avc: denied { perfmon } for pid=2130 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:29.480000 audit[2130]: AVC avc: denied { perfmon } for pid=2130 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:29.480000 audit[2130]: AVC avc: denied { perfmon } for pid=2130 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:29.480000 audit[2130]: AVC avc: denied { perfmon } for pid=2130 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:29.480000 audit[2130]: AVC avc: denied { bpf } for pid=2130 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:29.480000 audit[2130]: AVC avc: denied { bpf } for pid=2130 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:29.480000 audit: BPF prog-id=109 op=LOAD Jul 10 00:44:29.480000 audit[2130]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0002c3e08 items=0 ppid=2121 pid=2130 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:44:29.480000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3233323738613062396136663132326164396432383161396464346361 Jul 10 00:44:29.480000 audit: BPF prog-id=109 op=UNLOAD Jul 10 00:44:29.480000 audit: BPF prog-id=108 op=UNLOAD Jul 10 00:44:29.480000 audit[2130]: AVC avc: denied { bpf } for pid=2130 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:29.480000 audit[2130]: AVC avc: denied { bpf } for pid=2130 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:29.480000 audit[2130]: AVC avc: denied { bpf } for pid=2130 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:29.480000 audit[2130]: AVC avc: denied { perfmon } for pid=2130 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:29.480000 audit[2130]: AVC avc: denied { perfmon } for pid=2130 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:29.480000 audit[2130]: AVC avc: denied { perfmon } for pid=2130 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:29.480000 audit[2130]: AVC avc: denied { perfmon } for pid=2130 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:29.480000 audit[2130]: AVC avc: denied { perfmon } for pid=2130 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:29.480000 audit[2130]: AVC avc: denied { bpf } for pid=2130 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:29.480000 audit[2130]: AVC avc: denied { bpf } for pid=2130 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:29.480000 audit: BPF prog-id=110 op=LOAD Jul 10 00:44:29.480000 audit[2130]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0003b6218 items=0 ppid=2121 pid=2130 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:44:29.480000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3233323738613062396136663132326164396432383161396464346361 Jul 10 00:44:29.501926 env[1210]: time="2025-07-10T00:44:29.501871292Z" level=info msg="StartContainer for \"2b117c3e8dcf2dbf380b5d202460fe7f2a0302acc4a50ebb347b7af0bc4d3553\" returns successfully" Jul 10 00:44:29.509289 env[1210]: time="2025-07-10T00:44:29.509250784Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-747864d56d-9c469,Uid:17a9f213-c1a4-44c6-b6aa-1cf687e9a664,Namespace:tigera-operator,Attempt:0,} returns sandbox id \"23278a0b9a6f122ad9d281a9dd4ca931569739ef4428b40bd4c94fe452dd933c\"" Jul 10 00:44:29.513381 env[1210]: time="2025-07-10T00:44:29.513339541Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.38.3\"" Jul 10 00:44:29.601000 audit[2207]: NETFILTER_CFG table=mangle:38 family=2 entries=1 op=nft_register_chain pid=2207 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:44:29.601000 audit[2207]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fff69471000 a2=0 a3=7fff69470fec items=0 ppid=2141 pid=2207 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:44:29.601000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Jul 10 00:44:29.601000 audit[2208]: NETFILTER_CFG table=mangle:39 family=10 entries=1 op=nft_register_chain pid=2208 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:44:29.601000 audit[2208]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffc1b4aec10 a2=0 a3=7ffc1b4aebfc items=0 ppid=2141 pid=2208 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:44:29.601000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Jul 10 00:44:29.602000 audit[2209]: NETFILTER_CFG table=nat:40 family=2 entries=1 op=nft_register_chain pid=2209 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:44:29.602000 audit[2209]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffcff9826b0 a2=0 a3=7ffcff98269c items=0 ppid=2141 pid=2209 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:44:29.602000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Jul 10 00:44:29.602000 audit[2211]: NETFILTER_CFG table=nat:41 family=10 entries=1 op=nft_register_chain pid=2211 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:44:29.602000 audit[2211]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffe643ce990 a2=0 a3=7ffe643ce97c items=0 ppid=2141 pid=2211 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:44:29.602000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Jul 10 00:44:29.603000 audit[2213]: NETFILTER_CFG table=filter:42 family=2 entries=1 op=nft_register_chain pid=2213 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:44:29.603000 audit[2213]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffd9ee93b70 a2=0 a3=7ffd9ee93b5c items=0 ppid=2141 pid=2213 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:44:29.603000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Jul 10 00:44:29.604000 audit[2214]: NETFILTER_CFG table=filter:43 family=10 entries=1 op=nft_register_chain pid=2214 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:44:29.604000 audit[2214]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffc130e7c50 a2=0 a3=7ffc130e7c3c items=0 ppid=2141 pid=2214 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:44:29.604000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Jul 10 00:44:29.703000 audit[2216]: NETFILTER_CFG table=filter:44 family=2 entries=1 op=nft_register_chain pid=2216 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:44:29.703000 audit[2216]: SYSCALL arch=c000003e syscall=46 success=yes exit=108 a0=3 a1=7ffec66dcc30 a2=0 a3=7ffec66dcc1c items=0 ppid=2141 pid=2216 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:44:29.703000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Jul 10 00:44:29.705239 kubelet[2000]: E0710 00:44:29.704967 2000 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:44:29.707000 audit[2218]: NETFILTER_CFG table=filter:45 family=2 entries=1 op=nft_register_rule pid=2218 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:44:29.707000 audit[2218]: SYSCALL arch=c000003e syscall=46 success=yes exit=752 a0=3 a1=7ffd325c8b30 a2=0 a3=7ffd325c8b1c items=0 ppid=2141 pid=2218 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:44:29.707000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276696365 Jul 10 00:44:29.710000 audit[2221]: NETFILTER_CFG table=filter:46 family=2 entries=1 op=nft_register_rule pid=2221 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:44:29.710000 audit[2221]: SYSCALL arch=c000003e syscall=46 success=yes exit=752 a0=3 a1=7ffc882ad980 a2=0 a3=7ffc882ad96c items=0 ppid=2141 pid=2221 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:44:29.710000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C65207365727669 Jul 10 00:44:29.711000 audit[2222]: NETFILTER_CFG table=filter:47 family=2 entries=1 op=nft_register_chain pid=2222 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:44:29.711000 audit[2222]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffc804dadf0 a2=0 a3=7ffc804daddc items=0 ppid=2141 pid=2222 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:44:29.711000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Jul 10 00:44:29.715481 kubelet[2000]: I0710 00:44:29.715429 2000 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-proxy-cs4m9" podStartSLOduration=1.714074728 podStartE2EDuration="1.714074728s" podCreationTimestamp="2025-07-10 00:44:28 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-10 00:44:29.713783453 +0000 UTC m=+6.119739088" watchObservedRunningTime="2025-07-10 00:44:29.714074728 +0000 UTC m=+6.120030363" Jul 10 00:44:29.715000 audit[2224]: NETFILTER_CFG table=filter:48 family=2 entries=1 op=nft_register_rule pid=2224 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:44:29.715000 audit[2224]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffc72a93cb0 a2=0 a3=7ffc72a93c9c items=0 ppid=2141 pid=2224 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:44:29.715000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Jul 10 00:44:29.716000 audit[2225]: NETFILTER_CFG table=filter:49 family=2 entries=1 op=nft_register_chain pid=2225 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:44:29.716000 audit[2225]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fff68d13550 a2=0 a3=7fff68d1353c items=0 ppid=2141 pid=2225 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:44:29.716000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Jul 10 00:44:29.718000 audit[2227]: NETFILTER_CFG table=filter:50 family=2 entries=1 op=nft_register_rule pid=2227 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:44:29.718000 audit[2227]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7ffe27f43b00 a2=0 a3=7ffe27f43aec items=0 ppid=2141 pid=2227 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:44:29.718000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Jul 10 00:44:29.722000 audit[2230]: NETFILTER_CFG table=filter:51 family=2 entries=1 op=nft_register_rule pid=2230 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:44:29.722000 audit[2230]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7fff90e5a270 a2=0 a3=7fff90e5a25c items=0 ppid=2141 pid=2230 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:44:29.722000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D53 Jul 10 00:44:29.723000 audit[2231]: NETFILTER_CFG table=filter:52 family=2 entries=1 op=nft_register_chain pid=2231 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:44:29.723000 audit[2231]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffe64769ee0 a2=0 a3=7ffe64769ecc items=0 ppid=2141 pid=2231 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:44:29.723000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Jul 10 00:44:29.725000 audit[2233]: NETFILTER_CFG table=filter:53 family=2 entries=1 op=nft_register_rule pid=2233 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:44:29.725000 audit[2233]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffe5d16d470 a2=0 a3=7ffe5d16d45c items=0 ppid=2141 pid=2233 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:44:29.725000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Jul 10 00:44:29.726000 audit[2234]: NETFILTER_CFG table=filter:54 family=2 entries=1 op=nft_register_chain pid=2234 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:44:29.726000 audit[2234]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fff93ab39e0 a2=0 a3=7fff93ab39cc items=0 ppid=2141 pid=2234 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:44:29.726000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Jul 10 00:44:29.728000 audit[2236]: NETFILTER_CFG table=filter:55 family=2 entries=1 op=nft_register_rule pid=2236 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:44:29.728000 audit[2236]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7fff4324c6b0 a2=0 a3=7fff4324c69c items=0 ppid=2141 pid=2236 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:44:29.728000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Jul 10 00:44:29.732000 audit[2239]: NETFILTER_CFG table=filter:56 family=2 entries=1 op=nft_register_rule pid=2239 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:44:29.732000 audit[2239]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffed78557b0 a2=0 a3=7ffed785579c items=0 ppid=2141 pid=2239 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:44:29.732000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Jul 10 00:44:29.735000 audit[2242]: NETFILTER_CFG table=filter:57 family=2 entries=1 op=nft_register_rule pid=2242 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:44:29.735000 audit[2242]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffdb03c1920 a2=0 a3=7ffdb03c190c items=0 ppid=2141 pid=2242 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:44:29.735000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Jul 10 00:44:29.736000 audit[2243]: NETFILTER_CFG table=nat:58 family=2 entries=1 op=nft_register_chain pid=2243 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:44:29.736000 audit[2243]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffcc8d67880 a2=0 a3=7ffcc8d6786c items=0 ppid=2141 pid=2243 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:44:29.736000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Jul 10 00:44:29.738000 audit[2245]: NETFILTER_CFG table=nat:59 family=2 entries=1 op=nft_register_rule pid=2245 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:44:29.738000 audit[2245]: SYSCALL arch=c000003e syscall=46 success=yes exit=524 a0=3 a1=7ffda62c8190 a2=0 a3=7ffda62c817c items=0 ppid=2141 pid=2245 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:44:29.738000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Jul 10 00:44:29.742000 audit[2248]: NETFILTER_CFG table=nat:60 family=2 entries=1 op=nft_register_rule pid=2248 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:44:29.742000 audit[2248]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffc5334ae30 a2=0 a3=7ffc5334ae1c items=0 ppid=2141 pid=2248 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:44:29.742000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Jul 10 00:44:29.743000 audit[2249]: NETFILTER_CFG table=nat:61 family=2 entries=1 op=nft_register_chain pid=2249 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:44:29.743000 audit[2249]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffed3d995a0 a2=0 a3=7ffed3d9958c items=0 ppid=2141 pid=2249 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:44:29.743000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Jul 10 00:44:29.745000 audit[2251]: NETFILTER_CFG table=nat:62 family=2 entries=1 op=nft_register_rule pid=2251 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:44:29.745000 audit[2251]: SYSCALL arch=c000003e syscall=46 success=yes exit=532 a0=3 a1=7fff30398560 a2=0 a3=7fff3039854c items=0 ppid=2141 pid=2251 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:44:29.745000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Jul 10 00:44:29.768000 audit[2257]: NETFILTER_CFG table=filter:63 family=2 entries=8 op=nft_register_rule pid=2257 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:44:29.768000 audit[2257]: SYSCALL arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7ffdf9bebff0 a2=0 a3=7ffdf9bebfdc items=0 ppid=2141 pid=2257 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:44:29.768000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:44:29.777000 audit[2257]: NETFILTER_CFG table=nat:64 family=2 entries=14 op=nft_register_chain pid=2257 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:44:29.777000 audit[2257]: SYSCALL arch=c000003e syscall=46 success=yes exit=5508 a0=3 a1=7ffdf9bebff0 a2=0 a3=7ffdf9bebfdc items=0 ppid=2141 pid=2257 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:44:29.777000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:44:29.779000 audit[2262]: NETFILTER_CFG table=filter:65 family=10 entries=1 op=nft_register_chain pid=2262 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:44:29.779000 audit[2262]: SYSCALL arch=c000003e syscall=46 success=yes exit=108 a0=3 a1=7ffc376cf9f0 a2=0 a3=7ffc376cf9dc items=0 ppid=2141 pid=2262 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:44:29.779000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Jul 10 00:44:29.781000 audit[2264]: NETFILTER_CFG table=filter:66 family=10 entries=2 op=nft_register_chain pid=2264 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:44:29.781000 audit[2264]: SYSCALL arch=c000003e syscall=46 success=yes exit=836 a0=3 a1=7ffdfae7f600 a2=0 a3=7ffdfae7f5ec items=0 ppid=2141 pid=2264 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:44:29.781000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C6520736572766963 Jul 10 00:44:29.784000 audit[2267]: NETFILTER_CFG table=filter:67 family=10 entries=2 op=nft_register_chain pid=2267 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:44:29.784000 audit[2267]: SYSCALL arch=c000003e syscall=46 success=yes exit=836 a0=3 a1=7ffc41021120 a2=0 a3=7ffc4102110c items=0 ppid=2141 pid=2267 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:44:29.784000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276 Jul 10 00:44:29.785000 audit[2268]: NETFILTER_CFG table=filter:68 family=10 entries=1 op=nft_register_chain pid=2268 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:44:29.785000 audit[2268]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fff1ba9fd90 a2=0 a3=7fff1ba9fd7c items=0 ppid=2141 pid=2268 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:44:29.785000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Jul 10 00:44:29.787000 audit[2270]: NETFILTER_CFG table=filter:69 family=10 entries=1 op=nft_register_rule pid=2270 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:44:29.787000 audit[2270]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffff7dd1a20 a2=0 a3=7ffff7dd1a0c items=0 ppid=2141 pid=2270 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:44:29.787000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Jul 10 00:44:29.788000 audit[2271]: NETFILTER_CFG table=filter:70 family=10 entries=1 op=nft_register_chain pid=2271 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:44:29.788000 audit[2271]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffd5785b280 a2=0 a3=7ffd5785b26c items=0 ppid=2141 pid=2271 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:44:29.788000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Jul 10 00:44:29.791000 audit[2273]: NETFILTER_CFG table=filter:71 family=10 entries=1 op=nft_register_rule pid=2273 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:44:29.791000 audit[2273]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7ffdfc273c90 a2=0 a3=7ffdfc273c7c items=0 ppid=2141 pid=2273 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:44:29.791000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B554245 Jul 10 00:44:29.794000 audit[2276]: NETFILTER_CFG table=filter:72 family=10 entries=2 op=nft_register_chain pid=2276 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:44:29.794000 audit[2276]: SYSCALL arch=c000003e syscall=46 success=yes exit=828 a0=3 a1=7fff23b0c170 a2=0 a3=7fff23b0c15c items=0 ppid=2141 pid=2276 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:44:29.794000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Jul 10 00:44:29.795000 audit[2277]: NETFILTER_CFG table=filter:73 family=10 entries=1 op=nft_register_chain pid=2277 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:44:29.795000 audit[2277]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffef7034d90 a2=0 a3=7ffef7034d7c items=0 ppid=2141 pid=2277 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:44:29.795000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Jul 10 00:44:29.797000 audit[2279]: NETFILTER_CFG table=filter:74 family=10 entries=1 op=nft_register_rule pid=2279 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:44:29.797000 audit[2279]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffdfc1b8720 a2=0 a3=7ffdfc1b870c items=0 ppid=2141 pid=2279 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:44:29.797000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Jul 10 00:44:29.798000 audit[2280]: NETFILTER_CFG table=filter:75 family=10 entries=1 op=nft_register_chain pid=2280 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:44:29.798000 audit[2280]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffea7580a40 a2=0 a3=7ffea7580a2c items=0 ppid=2141 pid=2280 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:44:29.798000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Jul 10 00:44:29.800000 audit[2282]: NETFILTER_CFG table=filter:76 family=10 entries=1 op=nft_register_rule pid=2282 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:44:29.800000 audit[2282]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffccd20fb10 a2=0 a3=7ffccd20fafc items=0 ppid=2141 pid=2282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:44:29.800000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Jul 10 00:44:29.803000 audit[2285]: NETFILTER_CFG table=filter:77 family=10 entries=1 op=nft_register_rule pid=2285 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:44:29.803000 audit[2285]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffed8d81e80 a2=0 a3=7ffed8d81e6c items=0 ppid=2141 pid=2285 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:44:29.803000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Jul 10 00:44:29.807000 audit[2288]: NETFILTER_CFG table=filter:78 family=10 entries=1 op=nft_register_rule pid=2288 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:44:29.807000 audit[2288]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffdb82a5700 a2=0 a3=7ffdb82a56ec items=0 ppid=2141 pid=2288 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:44:29.807000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C Jul 10 00:44:29.808000 audit[2289]: NETFILTER_CFG table=nat:79 family=10 entries=1 op=nft_register_chain pid=2289 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:44:29.808000 audit[2289]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffdafba6e80 a2=0 a3=7ffdafba6e6c items=0 ppid=2141 pid=2289 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:44:29.808000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Jul 10 00:44:29.809000 audit[2291]: NETFILTER_CFG table=nat:80 family=10 entries=2 op=nft_register_chain pid=2291 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:44:29.809000 audit[2291]: SYSCALL arch=c000003e syscall=46 success=yes exit=600 a0=3 a1=7ffd15471f10 a2=0 a3=7ffd15471efc items=0 ppid=2141 pid=2291 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:44:29.809000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Jul 10 00:44:29.812000 audit[2294]: NETFILTER_CFG table=nat:81 family=10 entries=2 op=nft_register_chain pid=2294 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:44:29.812000 audit[2294]: SYSCALL arch=c000003e syscall=46 success=yes exit=608 a0=3 a1=7ffc49744390 a2=0 a3=7ffc4974437c items=0 ppid=2141 pid=2294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:44:29.812000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Jul 10 00:44:29.813000 audit[2295]: NETFILTER_CFG table=nat:82 family=10 entries=1 op=nft_register_chain pid=2295 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:44:29.813000 audit[2295]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fffa2d25060 a2=0 a3=7fffa2d2504c items=0 ppid=2141 pid=2295 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:44:29.813000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Jul 10 00:44:29.815000 audit[2297]: NETFILTER_CFG table=nat:83 family=10 entries=2 op=nft_register_chain pid=2297 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:44:29.815000 audit[2297]: SYSCALL arch=c000003e syscall=46 success=yes exit=612 a0=3 a1=7ffe51ad9560 a2=0 a3=7ffe51ad954c items=0 ppid=2141 pid=2297 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:44:29.815000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Jul 10 00:44:29.816000 audit[2298]: NETFILTER_CFG table=filter:84 family=10 entries=1 op=nft_register_chain pid=2298 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:44:29.816000 audit[2298]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffede9f9cc0 a2=0 a3=7ffede9f9cac items=0 ppid=2141 pid=2298 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:44:29.816000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Jul 10 00:44:29.818000 audit[2300]: NETFILTER_CFG table=filter:85 family=10 entries=1 op=nft_register_rule pid=2300 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:44:29.818000 audit[2300]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7fff36c49100 a2=0 a3=7fff36c490ec items=0 ppid=2141 pid=2300 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:44:29.818000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Jul 10 00:44:29.821000 audit[2303]: NETFILTER_CFG table=filter:86 family=10 entries=1 op=nft_register_rule pid=2303 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:44:29.821000 audit[2303]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffeb53b15a0 a2=0 a3=7ffeb53b158c items=0 ppid=2141 pid=2303 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:44:29.821000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Jul 10 00:44:29.823000 audit[2305]: NETFILTER_CFG table=filter:87 family=10 entries=3 op=nft_register_rule pid=2305 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Jul 10 00:44:29.823000 audit[2305]: SYSCALL arch=c000003e syscall=46 success=yes exit=2088 a0=3 a1=7ffc92652920 a2=0 a3=7ffc9265290c items=0 ppid=2141 pid=2305 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:44:29.823000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:44:29.824000 audit[2305]: NETFILTER_CFG table=nat:88 family=10 entries=7 op=nft_register_chain pid=2305 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Jul 10 00:44:29.824000 audit[2305]: SYSCALL arch=c000003e syscall=46 success=yes exit=2056 a0=3 a1=7ffc92652920 a2=0 a3=7ffc9265290c items=0 ppid=2141 pid=2305 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:44:29.824000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:44:31.347148 kubelet[2000]: E0710 00:44:31.347114 2000 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:44:31.707644 kubelet[2000]: E0710 00:44:31.707596 2000 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:44:32.357463 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3782304602.mount: Deactivated successfully. Jul 10 00:44:33.595349 kubelet[2000]: E0710 00:44:33.595310 2000 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:44:33.706406 env[1210]: time="2025-07-10T00:44:33.706330214Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator:v1.38.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:44:33.708140 env[1210]: time="2025-07-10T00:44:33.708110039Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:8bde16470b09d1963e19456806d73180c9778a6c2b3c1fda2335c67c1cd4ce93,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:44:33.709988 kubelet[2000]: E0710 00:44:33.709946 2000 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:44:33.710374 env[1210]: time="2025-07-10T00:44:33.710339590Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/tigera/operator:v1.38.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:44:33.713013 env[1210]: time="2025-07-10T00:44:33.712234875Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator@sha256:dbf1bad0def7b5955dc8e4aeee96e23ead0bc5822f6872518e685cd0ed484121,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:44:33.713013 env[1210]: time="2025-07-10T00:44:33.712667487Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.38.3\" returns image reference \"sha256:8bde16470b09d1963e19456806d73180c9778a6c2b3c1fda2335c67c1cd4ce93\"" Jul 10 00:44:33.718932 env[1210]: time="2025-07-10T00:44:33.718877358Z" level=info msg="CreateContainer within sandbox \"23278a0b9a6f122ad9d281a9dd4ca931569739ef4428b40bd4c94fe452dd933c\" for container &ContainerMetadata{Name:tigera-operator,Attempt:0,}" Jul 10 00:44:33.731132 env[1210]: time="2025-07-10T00:44:33.731076190Z" level=info msg="CreateContainer within sandbox \"23278a0b9a6f122ad9d281a9dd4ca931569739ef4428b40bd4c94fe452dd933c\" for &ContainerMetadata{Name:tigera-operator,Attempt:0,} returns container id \"fa48d5f68305e804b279e73f7e581a800b17e55ba2daa0e18dfd833388dd7acb\"" Jul 10 00:44:33.731605 env[1210]: time="2025-07-10T00:44:33.731579186Z" level=info msg="StartContainer for \"fa48d5f68305e804b279e73f7e581a800b17e55ba2daa0e18dfd833388dd7acb\"" Jul 10 00:44:33.753684 systemd[1]: run-containerd-runc-k8s.io-fa48d5f68305e804b279e73f7e581a800b17e55ba2daa0e18dfd833388dd7acb-runc.epNiwV.mount: Deactivated successfully. Jul 10 00:44:33.756888 systemd[1]: Started cri-containerd-fa48d5f68305e804b279e73f7e581a800b17e55ba2daa0e18dfd833388dd7acb.scope. Jul 10 00:44:33.770000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:33.770000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:33.770000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:33.770000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:33.770000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:33.770000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:33.770000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:33.770000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:33.770000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:33.770000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:33.770000 audit: BPF prog-id=111 op=LOAD Jul 10 00:44:33.771000 audit[2314]: AVC avc: denied { bpf } for pid=2314 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:33.771000 audit[2314]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=2121 pid=2314 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:44:33.771000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6661343864356636383330356538303462323739653733663765353831 Jul 10 00:44:33.771000 audit[2314]: AVC avc: denied { perfmon } for pid=2314 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:33.771000 audit[2314]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=2121 pid=2314 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:44:33.771000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6661343864356636383330356538303462323739653733663765353831 Jul 10 00:44:33.771000 audit[2314]: AVC avc: denied { bpf } for pid=2314 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:33.771000 audit[2314]: AVC avc: denied { bpf } for pid=2314 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:33.771000 audit[2314]: AVC avc: denied { bpf } for pid=2314 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:33.771000 audit[2314]: AVC avc: denied { perfmon } for pid=2314 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:33.771000 audit[2314]: AVC avc: denied { perfmon } for pid=2314 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:33.771000 audit[2314]: AVC avc: denied { perfmon } for pid=2314 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:33.771000 audit[2314]: AVC avc: denied { perfmon } for pid=2314 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:33.771000 audit[2314]: AVC avc: denied { perfmon } for pid=2314 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:33.771000 audit[2314]: AVC avc: denied { bpf } for pid=2314 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:33.771000 audit[2314]: AVC avc: denied { bpf } for pid=2314 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:33.771000 audit: BPF prog-id=112 op=LOAD Jul 10 00:44:33.771000 audit[2314]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0002850d0 items=0 ppid=2121 pid=2314 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:44:33.771000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6661343864356636383330356538303462323739653733663765353831 Jul 10 00:44:33.771000 audit[2314]: AVC avc: denied { bpf } for pid=2314 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:33.771000 audit[2314]: AVC avc: denied { bpf } for pid=2314 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:33.771000 audit[2314]: AVC avc: denied { perfmon } for pid=2314 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:33.771000 audit[2314]: AVC avc: denied { perfmon } for pid=2314 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:33.771000 audit[2314]: AVC avc: denied { perfmon } for pid=2314 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:33.771000 audit[2314]: AVC avc: denied { perfmon } for pid=2314 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:33.771000 audit[2314]: AVC avc: denied { perfmon } for pid=2314 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:33.771000 audit[2314]: AVC avc: denied { bpf } for pid=2314 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:33.771000 audit[2314]: AVC avc: denied { bpf } for pid=2314 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:33.771000 audit: BPF prog-id=113 op=LOAD Jul 10 00:44:33.771000 audit[2314]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c000285118 items=0 ppid=2121 pid=2314 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:44:33.771000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6661343864356636383330356538303462323739653733663765353831 Jul 10 00:44:33.771000 audit: BPF prog-id=113 op=UNLOAD Jul 10 00:44:33.771000 audit: BPF prog-id=112 op=UNLOAD Jul 10 00:44:33.771000 audit[2314]: AVC avc: denied { bpf } for pid=2314 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:33.771000 audit[2314]: AVC avc: denied { bpf } for pid=2314 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:33.771000 audit[2314]: AVC avc: denied { bpf } for pid=2314 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:33.771000 audit[2314]: AVC avc: denied { perfmon } for pid=2314 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:33.771000 audit[2314]: AVC avc: denied { perfmon } for pid=2314 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:33.771000 audit[2314]: AVC avc: denied { perfmon } for pid=2314 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:33.771000 audit[2314]: AVC avc: denied { perfmon } for pid=2314 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:33.771000 audit[2314]: AVC avc: denied { perfmon } for pid=2314 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:33.771000 audit[2314]: AVC avc: denied { bpf } for pid=2314 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:33.771000 audit[2314]: AVC avc: denied { bpf } for pid=2314 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:33.771000 audit: BPF prog-id=114 op=LOAD Jul 10 00:44:33.771000 audit[2314]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c000285528 items=0 ppid=2121 pid=2314 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:44:33.771000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6661343864356636383330356538303462323739653733663765353831 Jul 10 00:44:33.893132 env[1210]: time="2025-07-10T00:44:33.893042711Z" level=info msg="StartContainer for \"fa48d5f68305e804b279e73f7e581a800b17e55ba2daa0e18dfd833388dd7acb\" returns successfully" Jul 10 00:44:34.723151 kubelet[2000]: I0710 00:44:34.723074 2000 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="tigera-operator/tigera-operator-747864d56d-9c469" podStartSLOduration=2.5178434 podStartE2EDuration="6.723050353s" podCreationTimestamp="2025-07-10 00:44:28 +0000 UTC" firstStartedPulling="2025-07-10 00:44:29.510230232 +0000 UTC m=+5.916185867" lastFinishedPulling="2025-07-10 00:44:33.715437195 +0000 UTC m=+10.121392820" observedRunningTime="2025-07-10 00:44:34.72278602 +0000 UTC m=+11.128741675" watchObservedRunningTime="2025-07-10 00:44:34.723050353 +0000 UTC m=+11.129006008" Jul 10 00:44:36.297970 kubelet[2000]: E0710 00:44:36.297932 2000 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:44:36.715963 kubelet[2000]: E0710 00:44:36.715929 2000 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:44:39.208056 sudo[1351]: pam_unix(sudo:session): session closed for user root Jul 10 00:44:39.216704 kernel: kauditd_printk_skb: 357 callbacks suppressed Jul 10 00:44:39.216763 kernel: audit: type=1106 audit(1752108279.207:913): pid=1351 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 10 00:44:39.216786 kernel: audit: type=1104 audit(1752108279.207:914): pid=1351 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 10 00:44:39.207000 audit[1351]: USER_END pid=1351 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 10 00:44:39.207000 audit[1351]: CRED_DISP pid=1351 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 10 00:44:39.217620 sshd[1347]: pam_unix(sshd:session): session closed for user core Jul 10 00:44:39.218000 audit[1347]: USER_END pid=1347 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:44:39.222442 systemd[1]: sshd@8-10.0.0.116:22-10.0.0.1:55970.service: Deactivated successfully. Jul 10 00:44:39.223532 systemd[1]: session-9.scope: Deactivated successfully. Jul 10 00:44:39.223667 systemd[1]: session-9.scope: Consumed 5.010s CPU time. Jul 10 00:44:39.225356 systemd-logind[1194]: Session 9 logged out. Waiting for processes to exit. Jul 10 00:44:39.218000 audit[1347]: CRED_DISP pid=1347 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:44:39.229347 kernel: audit: type=1106 audit(1752108279.218:915): pid=1347 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:44:39.229421 kernel: audit: type=1104 audit(1752108279.218:916): pid=1347 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:44:39.221000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.0.0.116:22-10.0.0.1:55970 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:44:39.233095 kernel: audit: type=1131 audit(1752108279.221:917): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.0.0.116:22-10.0.0.1:55970 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:44:39.233127 systemd-logind[1194]: Removed session 9. Jul 10 00:44:39.743000 audit[2403]: NETFILTER_CFG table=filter:89 family=2 entries=15 op=nft_register_rule pid=2403 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:44:39.743000 audit[2403]: SYSCALL arch=c000003e syscall=46 success=yes exit=5992 a0=3 a1=7ffd19fe5270 a2=0 a3=7ffd19fe525c items=0 ppid=2141 pid=2403 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:44:39.751643 kernel: audit: type=1325 audit(1752108279.743:918): table=filter:89 family=2 entries=15 op=nft_register_rule pid=2403 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:44:39.751740 kernel: audit: type=1300 audit(1752108279.743:918): arch=c000003e syscall=46 success=yes exit=5992 a0=3 a1=7ffd19fe5270 a2=0 a3=7ffd19fe525c items=0 ppid=2141 pid=2403 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:44:39.751773 kernel: audit: type=1327 audit(1752108279.743:918): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:44:39.743000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:44:39.755000 audit[2403]: NETFILTER_CFG table=nat:90 family=2 entries=12 op=nft_register_rule pid=2403 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:44:39.755000 audit[2403]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffd19fe5270 a2=0 a3=0 items=0 ppid=2141 pid=2403 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:44:39.764567 kernel: audit: type=1325 audit(1752108279.755:919): table=nat:90 family=2 entries=12 op=nft_register_rule pid=2403 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:44:39.764627 kernel: audit: type=1300 audit(1752108279.755:919): arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffd19fe5270 a2=0 a3=0 items=0 ppid=2141 pid=2403 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:44:39.755000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:44:39.769000 audit[2405]: NETFILTER_CFG table=filter:91 family=2 entries=16 op=nft_register_rule pid=2405 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:44:39.769000 audit[2405]: SYSCALL arch=c000003e syscall=46 success=yes exit=5992 a0=3 a1=7ffd7a135d50 a2=0 a3=7ffd7a135d3c items=0 ppid=2141 pid=2405 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:44:39.769000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:44:39.777000 audit[2405]: NETFILTER_CFG table=nat:92 family=2 entries=12 op=nft_register_rule pid=2405 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:44:39.777000 audit[2405]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffd7a135d50 a2=0 a3=0 items=0 ppid=2141 pid=2405 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:44:39.777000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:44:41.854000 audit[2407]: NETFILTER_CFG table=filter:93 family=2 entries=17 op=nft_register_rule pid=2407 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:44:41.854000 audit[2407]: SYSCALL arch=c000003e syscall=46 success=yes exit=6736 a0=3 a1=7ffdad22a3d0 a2=0 a3=7ffdad22a3bc items=0 ppid=2141 pid=2407 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:44:41.854000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:44:41.864000 audit[2407]: NETFILTER_CFG table=nat:94 family=2 entries=12 op=nft_register_rule pid=2407 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:44:41.864000 audit[2407]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffdad22a3d0 a2=0 a3=0 items=0 ppid=2141 pid=2407 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:44:41.864000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:44:41.873000 audit[2409]: NETFILTER_CFG table=filter:95 family=2 entries=18 op=nft_register_rule pid=2409 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:44:41.873000 audit[2409]: SYSCALL arch=c000003e syscall=46 success=yes exit=6736 a0=3 a1=7fff3d9bb500 a2=0 a3=7fff3d9bb4ec items=0 ppid=2141 pid=2409 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:44:41.873000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:44:41.878000 audit[2409]: NETFILTER_CFG table=nat:96 family=2 entries=12 op=nft_register_rule pid=2409 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:44:41.878000 audit[2409]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7fff3d9bb500 a2=0 a3=0 items=0 ppid=2141 pid=2409 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:44:41.878000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:44:42.006904 systemd[1]: Created slice kubepods-besteffort-pod49a037cf_66af_46c9_84c6_a1d632539de8.slice. Jul 10 00:44:42.192994 systemd[1]: Created slice kubepods-besteffort-pod95641ef5_8ad8_4169_9b0a_ef93967c99a8.slice. Jul 10 00:44:42.199657 kubelet[2000]: I0710 00:44:42.199605 2000 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/49a037cf-66af-46c9-84c6-a1d632539de8-tigera-ca-bundle\") pod \"calico-typha-8685b84948-tjwrz\" (UID: \"49a037cf-66af-46c9-84c6-a1d632539de8\") " pod="calico-system/calico-typha-8685b84948-tjwrz" Jul 10 00:44:42.199982 kubelet[2000]: I0710 00:44:42.199966 2000 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-lnpd5\" (UniqueName: \"kubernetes.io/projected/49a037cf-66af-46c9-84c6-a1d632539de8-kube-api-access-lnpd5\") pod \"calico-typha-8685b84948-tjwrz\" (UID: \"49a037cf-66af-46c9-84c6-a1d632539de8\") " pod="calico-system/calico-typha-8685b84948-tjwrz" Jul 10 00:44:42.200151 kubelet[2000]: I0710 00:44:42.200116 2000 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"typha-certs\" (UniqueName: \"kubernetes.io/secret/49a037cf-66af-46c9-84c6-a1d632539de8-typha-certs\") pod \"calico-typha-8685b84948-tjwrz\" (UID: \"49a037cf-66af-46c9-84c6-a1d632539de8\") " pod="calico-system/calico-typha-8685b84948-tjwrz" Jul 10 00:44:42.300519 kubelet[2000]: I0710 00:44:42.300460 2000 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvol-driver-host\" (UniqueName: \"kubernetes.io/host-path/95641ef5-8ad8-4169-9b0a-ef93967c99a8-flexvol-driver-host\") pod \"calico-node-mw7f4\" (UID: \"95641ef5-8ad8-4169-9b0a-ef93967c99a8\") " pod="calico-system/calico-node-mw7f4" Jul 10 00:44:42.300519 kubelet[2000]: I0710 00:44:42.300512 2000 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/95641ef5-8ad8-4169-9b0a-ef93967c99a8-lib-modules\") pod \"calico-node-mw7f4\" (UID: \"95641ef5-8ad8-4169-9b0a-ef93967c99a8\") " pod="calico-system/calico-node-mw7f4" Jul 10 00:44:42.300874 kubelet[2000]: I0710 00:44:42.300539 2000 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-wvk22\" (UniqueName: \"kubernetes.io/projected/95641ef5-8ad8-4169-9b0a-ef93967c99a8-kube-api-access-wvk22\") pod \"calico-node-mw7f4\" (UID: \"95641ef5-8ad8-4169-9b0a-ef93967c99a8\") " pod="calico-system/calico-node-mw7f4" Jul 10 00:44:42.300874 kubelet[2000]: I0710 00:44:42.300586 2000 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/95641ef5-8ad8-4169-9b0a-ef93967c99a8-tigera-ca-bundle\") pod \"calico-node-mw7f4\" (UID: \"95641ef5-8ad8-4169-9b0a-ef93967c99a8\") " pod="calico-system/calico-node-mw7f4" Jul 10 00:44:42.300874 kubelet[2000]: I0710 00:44:42.300609 2000 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"policysync\" (UniqueName: \"kubernetes.io/host-path/95641ef5-8ad8-4169-9b0a-ef93967c99a8-policysync\") pod \"calico-node-mw7f4\" (UID: \"95641ef5-8ad8-4169-9b0a-ef93967c99a8\") " pod="calico-system/calico-node-mw7f4" Jul 10 00:44:42.300874 kubelet[2000]: I0710 00:44:42.300630 2000 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-run-calico\" (UniqueName: \"kubernetes.io/host-path/95641ef5-8ad8-4169-9b0a-ef93967c99a8-var-run-calico\") pod \"calico-node-mw7f4\" (UID: \"95641ef5-8ad8-4169-9b0a-ef93967c99a8\") " pod="calico-system/calico-node-mw7f4" Jul 10 00:44:42.300874 kubelet[2000]: I0710 00:44:42.300650 2000 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/95641ef5-8ad8-4169-9b0a-ef93967c99a8-xtables-lock\") pod \"calico-node-mw7f4\" (UID: \"95641ef5-8ad8-4169-9b0a-ef93967c99a8\") " pod="calico-system/calico-node-mw7f4" Jul 10 00:44:42.301037 kubelet[2000]: I0710 00:44:42.300686 2000 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/95641ef5-8ad8-4169-9b0a-ef93967c99a8-var-lib-calico\") pod \"calico-node-mw7f4\" (UID: \"95641ef5-8ad8-4169-9b0a-ef93967c99a8\") " pod="calico-system/calico-node-mw7f4" Jul 10 00:44:42.301037 kubelet[2000]: I0710 00:44:42.300711 2000 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"node-certs\" (UniqueName: \"kubernetes.io/secret/95641ef5-8ad8-4169-9b0a-ef93967c99a8-node-certs\") pod \"calico-node-mw7f4\" (UID: \"95641ef5-8ad8-4169-9b0a-ef93967c99a8\") " pod="calico-system/calico-node-mw7f4" Jul 10 00:44:42.301037 kubelet[2000]: I0710 00:44:42.300725 2000 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-bin-dir\" (UniqueName: \"kubernetes.io/host-path/95641ef5-8ad8-4169-9b0a-ef93967c99a8-cni-bin-dir\") pod \"calico-node-mw7f4\" (UID: \"95641ef5-8ad8-4169-9b0a-ef93967c99a8\") " pod="calico-system/calico-node-mw7f4" Jul 10 00:44:42.301037 kubelet[2000]: I0710 00:44:42.300738 2000 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-log-dir\" (UniqueName: \"kubernetes.io/host-path/95641ef5-8ad8-4169-9b0a-ef93967c99a8-cni-log-dir\") pod \"calico-node-mw7f4\" (UID: \"95641ef5-8ad8-4169-9b0a-ef93967c99a8\") " pod="calico-system/calico-node-mw7f4" Jul 10 00:44:42.301037 kubelet[2000]: I0710 00:44:42.300750 2000 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-net-dir\" (UniqueName: \"kubernetes.io/host-path/95641ef5-8ad8-4169-9b0a-ef93967c99a8-cni-net-dir\") pod \"calico-node-mw7f4\" (UID: \"95641ef5-8ad8-4169-9b0a-ef93967c99a8\") " pod="calico-system/calico-node-mw7f4" Jul 10 00:44:42.311027 kubelet[2000]: E0710 00:44:42.310989 2000 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:44:42.311707 env[1210]: time="2025-07-10T00:44:42.311658677Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-8685b84948-tjwrz,Uid:49a037cf-66af-46c9-84c6-a1d632539de8,Namespace:calico-system,Attempt:0,}" Jul 10 00:44:42.333895 env[1210]: time="2025-07-10T00:44:42.333777723Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 10 00:44:42.333895 env[1210]: time="2025-07-10T00:44:42.333829491Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 10 00:44:42.333895 env[1210]: time="2025-07-10T00:44:42.333840392Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 10 00:44:42.336162 env[1210]: time="2025-07-10T00:44:42.336084805Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/c41a02d564cf4bf5e07eb3494b37598a100524eff9dcd6ec1432546befe37be1 pid=2420 runtime=io.containerd.runc.v2 Jul 10 00:44:42.354197 systemd[1]: Started cri-containerd-c41a02d564cf4bf5e07eb3494b37598a100524eff9dcd6ec1432546befe37be1.scope. Jul 10 00:44:42.363000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:42.363000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:42.364000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:42.364000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:42.364000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:42.364000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:42.364000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:42.364000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:42.364000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:42.364000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:42.364000 audit: BPF prog-id=115 op=LOAD Jul 10 00:44:42.364000 audit[2432]: AVC avc: denied { bpf } for pid=2432 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:42.364000 audit[2432]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=2420 pid=2432 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:44:42.364000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6334316130326435363463663462663565303765623334393462333735 Jul 10 00:44:42.364000 audit[2432]: AVC avc: denied { perfmon } for pid=2432 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:42.364000 audit[2432]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=2420 pid=2432 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:44:42.364000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6334316130326435363463663462663565303765623334393462333735 Jul 10 00:44:42.364000 audit[2432]: AVC avc: denied { bpf } for pid=2432 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:42.364000 audit[2432]: AVC avc: denied { bpf } for pid=2432 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:42.364000 audit[2432]: AVC avc: denied { bpf } for pid=2432 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:42.364000 audit[2432]: AVC avc: denied { perfmon } for pid=2432 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:42.364000 audit[2432]: AVC avc: denied { perfmon } for pid=2432 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:42.364000 audit[2432]: AVC avc: denied { perfmon } for pid=2432 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:42.364000 audit[2432]: AVC avc: denied { perfmon } for pid=2432 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:42.364000 audit[2432]: AVC avc: denied { perfmon } for pid=2432 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:42.364000 audit[2432]: AVC avc: denied { bpf } for pid=2432 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:42.364000 audit[2432]: AVC avc: denied { bpf } for pid=2432 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:42.364000 audit: BPF prog-id=116 op=LOAD Jul 10 00:44:42.364000 audit[2432]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0003ec010 items=0 ppid=2420 pid=2432 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:44:42.364000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6334316130326435363463663462663565303765623334393462333735 Jul 10 00:44:42.364000 audit[2432]: AVC avc: denied { bpf } for pid=2432 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:42.364000 audit[2432]: AVC avc: denied { bpf } for pid=2432 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:42.364000 audit[2432]: AVC avc: denied { perfmon } for pid=2432 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:42.364000 audit[2432]: AVC avc: denied { perfmon } for pid=2432 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:42.364000 audit[2432]: AVC avc: denied { perfmon } for pid=2432 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:42.364000 audit[2432]: AVC avc: denied { perfmon } for pid=2432 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:42.364000 audit[2432]: AVC avc: denied { perfmon } for pid=2432 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:42.364000 audit[2432]: AVC avc: denied { bpf } for pid=2432 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:42.364000 audit[2432]: AVC avc: denied { bpf } for pid=2432 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:42.364000 audit: BPF prog-id=117 op=LOAD Jul 10 00:44:42.364000 audit[2432]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0003ec058 items=0 ppid=2420 pid=2432 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:44:42.364000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6334316130326435363463663462663565303765623334393462333735 Jul 10 00:44:42.365000 audit: BPF prog-id=117 op=UNLOAD Jul 10 00:44:42.365000 audit: BPF prog-id=116 op=UNLOAD Jul 10 00:44:42.365000 audit[2432]: AVC avc: denied { bpf } for pid=2432 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:42.365000 audit[2432]: AVC avc: denied { bpf } for pid=2432 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:42.365000 audit[2432]: AVC avc: denied { bpf } for pid=2432 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:42.365000 audit[2432]: AVC avc: denied { perfmon } for pid=2432 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:42.365000 audit[2432]: AVC avc: denied { perfmon } for pid=2432 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:42.365000 audit[2432]: AVC avc: denied { perfmon } for pid=2432 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:42.365000 audit[2432]: AVC avc: denied { perfmon } for pid=2432 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:42.365000 audit[2432]: AVC avc: denied { perfmon } for pid=2432 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:42.365000 audit[2432]: AVC avc: denied { bpf } for pid=2432 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:42.365000 audit[2432]: AVC avc: denied { bpf } for pid=2432 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:42.365000 audit: BPF prog-id=118 op=LOAD Jul 10 00:44:42.365000 audit[2432]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0003ec468 items=0 ppid=2420 pid=2432 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:44:42.365000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6334316130326435363463663462663565303765623334393462333735 Jul 10 00:44:42.391302 env[1210]: time="2025-07-10T00:44:42.391243376Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-8685b84948-tjwrz,Uid:49a037cf-66af-46c9-84c6-a1d632539de8,Namespace:calico-system,Attempt:0,} returns sandbox id \"c41a02d564cf4bf5e07eb3494b37598a100524eff9dcd6ec1432546befe37be1\"" Jul 10 00:44:42.392101 kubelet[2000]: E0710 00:44:42.392076 2000 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:44:42.393279 env[1210]: time="2025-07-10T00:44:42.393253234Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.30.2\"" Jul 10 00:44:42.403703 kubelet[2000]: E0710 00:44:42.403577 2000 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:44:42.403703 kubelet[2000]: W0710 00:44:42.403601 2000 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:44:42.403703 kubelet[2000]: E0710 00:44:42.403646 2000 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:44:42.406287 kubelet[2000]: E0710 00:44:42.406182 2000 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:44:42.406287 kubelet[2000]: W0710 00:44:42.406214 2000 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:44:42.406287 kubelet[2000]: E0710 00:44:42.406240 2000 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:44:42.410929 kubelet[2000]: E0710 00:44:42.410903 2000 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:44:42.410929 kubelet[2000]: W0710 00:44:42.410925 2000 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:44:42.411057 kubelet[2000]: E0710 00:44:42.410946 2000 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:44:42.482332 kubelet[2000]: E0710 00:44:42.482186 2000 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-2mgd9" podUID="8653425f-9c3b-4f40-adcd-044ce9ce6d7e" Jul 10 00:44:42.497574 env[1210]: time="2025-07-10T00:44:42.497511689Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-mw7f4,Uid:95641ef5-8ad8-4169-9b0a-ef93967c99a8,Namespace:calico-system,Attempt:0,}" Jul 10 00:44:42.501198 kubelet[2000]: E0710 00:44:42.501146 2000 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:44:42.501198 kubelet[2000]: W0710 00:44:42.501173 2000 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:44:42.501198 kubelet[2000]: E0710 00:44:42.501197 2000 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:44:42.501519 kubelet[2000]: E0710 00:44:42.501443 2000 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:44:42.501519 kubelet[2000]: W0710 00:44:42.501456 2000 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:44:42.501519 kubelet[2000]: E0710 00:44:42.501467 2000 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:44:42.501692 kubelet[2000]: E0710 00:44:42.501672 2000 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:44:42.501692 kubelet[2000]: W0710 00:44:42.501686 2000 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:44:42.501692 kubelet[2000]: E0710 00:44:42.501697 2000 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:44:42.503226 kubelet[2000]: E0710 00:44:42.503207 2000 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:44:42.503226 kubelet[2000]: W0710 00:44:42.503221 2000 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:44:42.503330 kubelet[2000]: E0710 00:44:42.503231 2000 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:44:42.503442 kubelet[2000]: E0710 00:44:42.503421 2000 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:44:42.503442 kubelet[2000]: W0710 00:44:42.503437 2000 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:44:42.503516 kubelet[2000]: E0710 00:44:42.503449 2000 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:44:42.503680 kubelet[2000]: E0710 00:44:42.503649 2000 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:44:42.503680 kubelet[2000]: W0710 00:44:42.503679 2000 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:44:42.503839 kubelet[2000]: E0710 00:44:42.503692 2000 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:44:42.503932 kubelet[2000]: E0710 00:44:42.503916 2000 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:44:42.503932 kubelet[2000]: W0710 00:44:42.503931 2000 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:44:42.503989 kubelet[2000]: E0710 00:44:42.503941 2000 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:44:42.504109 kubelet[2000]: E0710 00:44:42.504083 2000 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:44:42.504109 kubelet[2000]: W0710 00:44:42.504099 2000 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:44:42.504109 kubelet[2000]: E0710 00:44:42.504110 2000 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:44:42.504418 kubelet[2000]: E0710 00:44:42.504392 2000 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:44:42.504418 kubelet[2000]: W0710 00:44:42.504410 2000 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:44:42.504495 kubelet[2000]: E0710 00:44:42.504423 2000 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:44:42.504606 kubelet[2000]: E0710 00:44:42.504582 2000 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:44:42.504606 kubelet[2000]: W0710 00:44:42.504597 2000 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:44:42.504606 kubelet[2000]: E0710 00:44:42.504606 2000 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:44:42.504786 kubelet[2000]: E0710 00:44:42.504762 2000 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:44:42.504786 kubelet[2000]: W0710 00:44:42.504776 2000 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:44:42.504786 kubelet[2000]: E0710 00:44:42.504785 2000 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:44:42.505538 kubelet[2000]: E0710 00:44:42.505020 2000 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:44:42.505538 kubelet[2000]: W0710 00:44:42.505035 2000 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:44:42.505538 kubelet[2000]: E0710 00:44:42.505045 2000 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:44:42.505538 kubelet[2000]: E0710 00:44:42.505241 2000 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:44:42.505538 kubelet[2000]: W0710 00:44:42.505249 2000 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:44:42.505538 kubelet[2000]: E0710 00:44:42.505258 2000 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:44:42.505538 kubelet[2000]: E0710 00:44:42.505430 2000 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:44:42.505538 kubelet[2000]: W0710 00:44:42.505439 2000 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:44:42.505538 kubelet[2000]: E0710 00:44:42.505449 2000 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:44:42.505822 kubelet[2000]: E0710 00:44:42.505588 2000 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:44:42.505822 kubelet[2000]: W0710 00:44:42.505597 2000 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:44:42.505822 kubelet[2000]: E0710 00:44:42.505605 2000 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:44:42.505822 kubelet[2000]: E0710 00:44:42.505780 2000 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:44:42.505822 kubelet[2000]: W0710 00:44:42.505788 2000 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:44:42.505822 kubelet[2000]: E0710 00:44:42.505797 2000 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:44:42.506097 kubelet[2000]: E0710 00:44:42.506070 2000 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:44:42.506097 kubelet[2000]: W0710 00:44:42.506086 2000 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:44:42.506097 kubelet[2000]: E0710 00:44:42.506098 2000 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:44:42.506777 kubelet[2000]: E0710 00:44:42.506747 2000 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:44:42.506777 kubelet[2000]: W0710 00:44:42.506766 2000 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:44:42.506777 kubelet[2000]: E0710 00:44:42.506778 2000 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:44:42.507018 kubelet[2000]: E0710 00:44:42.506997 2000 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:44:42.507018 kubelet[2000]: W0710 00:44:42.507014 2000 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:44:42.507096 kubelet[2000]: E0710 00:44:42.507025 2000 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:44:42.507929 kubelet[2000]: E0710 00:44:42.507206 2000 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:44:42.507929 kubelet[2000]: W0710 00:44:42.507223 2000 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:44:42.507929 kubelet[2000]: E0710 00:44:42.507234 2000 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:44:42.507929 kubelet[2000]: E0710 00:44:42.507544 2000 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:44:42.507929 kubelet[2000]: W0710 00:44:42.507556 2000 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:44:42.507929 kubelet[2000]: E0710 00:44:42.507567 2000 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:44:42.507929 kubelet[2000]: I0710 00:44:42.507597 2000 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-4rxrv\" (UniqueName: \"kubernetes.io/projected/8653425f-9c3b-4f40-adcd-044ce9ce6d7e-kube-api-access-4rxrv\") pod \"csi-node-driver-2mgd9\" (UID: \"8653425f-9c3b-4f40-adcd-044ce9ce6d7e\") " pod="calico-system/csi-node-driver-2mgd9" Jul 10 00:44:42.507929 kubelet[2000]: E0710 00:44:42.507841 2000 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:44:42.507929 kubelet[2000]: W0710 00:44:42.507920 2000 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:44:42.508249 kubelet[2000]: E0710 00:44:42.507933 2000 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:44:42.508249 kubelet[2000]: I0710 00:44:42.507959 2000 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubelet-dir\" (UniqueName: \"kubernetes.io/host-path/8653425f-9c3b-4f40-adcd-044ce9ce6d7e-kubelet-dir\") pod \"csi-node-driver-2mgd9\" (UID: \"8653425f-9c3b-4f40-adcd-044ce9ce6d7e\") " pod="calico-system/csi-node-driver-2mgd9" Jul 10 00:44:42.508249 kubelet[2000]: E0710 00:44:42.508174 2000 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:44:42.508249 kubelet[2000]: W0710 00:44:42.508188 2000 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:44:42.508249 kubelet[2000]: E0710 00:44:42.508201 2000 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:44:42.508785 kubelet[2000]: E0710 00:44:42.508755 2000 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:44:42.508785 kubelet[2000]: W0710 00:44:42.508773 2000 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:44:42.508877 kubelet[2000]: E0710 00:44:42.508783 2000 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:44:42.509061 kubelet[2000]: E0710 00:44:42.509032 2000 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:44:42.509061 kubelet[2000]: W0710 00:44:42.509046 2000 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:44:42.509061 kubelet[2000]: E0710 00:44:42.509056 2000 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:44:42.509320 kubelet[2000]: I0710 00:44:42.509077 2000 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"registration-dir\" (UniqueName: \"kubernetes.io/host-path/8653425f-9c3b-4f40-adcd-044ce9ce6d7e-registration-dir\") pod \"csi-node-driver-2mgd9\" (UID: \"8653425f-9c3b-4f40-adcd-044ce9ce6d7e\") " pod="calico-system/csi-node-driver-2mgd9" Jul 10 00:44:42.509376 kubelet[2000]: E0710 00:44:42.509351 2000 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:44:42.509420 kubelet[2000]: W0710 00:44:42.509377 2000 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:44:42.509420 kubelet[2000]: E0710 00:44:42.509386 2000 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:44:42.509559 kubelet[2000]: I0710 00:44:42.509499 2000 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"socket-dir\" (UniqueName: \"kubernetes.io/host-path/8653425f-9c3b-4f40-adcd-044ce9ce6d7e-socket-dir\") pod \"csi-node-driver-2mgd9\" (UID: \"8653425f-9c3b-4f40-adcd-044ce9ce6d7e\") " pod="calico-system/csi-node-driver-2mgd9" Jul 10 00:44:42.509720 kubelet[2000]: E0710 00:44:42.509692 2000 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:44:42.509829 kubelet[2000]: W0710 00:44:42.509799 2000 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:44:42.509829 kubelet[2000]: E0710 00:44:42.509823 2000 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:44:42.510163 kubelet[2000]: E0710 00:44:42.510134 2000 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:44:42.510163 kubelet[2000]: W0710 00:44:42.510150 2000 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:44:42.510163 kubelet[2000]: E0710 00:44:42.510160 2000 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:44:42.510352 kubelet[2000]: E0710 00:44:42.510335 2000 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:44:42.510352 kubelet[2000]: W0710 00:44:42.510346 2000 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:44:42.510352 kubelet[2000]: E0710 00:44:42.510355 2000 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:44:42.510510 kubelet[2000]: E0710 00:44:42.510490 2000 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:44:42.510510 kubelet[2000]: W0710 00:44:42.510501 2000 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:44:42.510510 kubelet[2000]: E0710 00:44:42.510509 2000 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:44:42.510652 kubelet[2000]: I0710 00:44:42.510529 2000 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"varrun\" (UniqueName: \"kubernetes.io/host-path/8653425f-9c3b-4f40-adcd-044ce9ce6d7e-varrun\") pod \"csi-node-driver-2mgd9\" (UID: \"8653425f-9c3b-4f40-adcd-044ce9ce6d7e\") " pod="calico-system/csi-node-driver-2mgd9" Jul 10 00:44:42.510879 kubelet[2000]: E0710 00:44:42.510837 2000 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:44:42.510942 kubelet[2000]: W0710 00:44:42.510877 2000 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:44:42.510942 kubelet[2000]: E0710 00:44:42.510903 2000 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:44:42.511231 kubelet[2000]: E0710 00:44:42.511212 2000 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:44:42.511231 kubelet[2000]: W0710 00:44:42.511225 2000 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:44:42.511333 kubelet[2000]: E0710 00:44:42.511236 2000 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:44:42.511996 kubelet[2000]: E0710 00:44:42.511980 2000 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:44:42.512106 kubelet[2000]: W0710 00:44:42.512086 2000 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:44:42.512212 kubelet[2000]: E0710 00:44:42.512192 2000 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:44:42.512526 kubelet[2000]: E0710 00:44:42.512511 2000 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:44:42.512622 kubelet[2000]: W0710 00:44:42.512603 2000 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:44:42.512718 kubelet[2000]: E0710 00:44:42.512698 2000 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:44:42.513066 kubelet[2000]: E0710 00:44:42.513014 2000 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:44:42.513163 kubelet[2000]: W0710 00:44:42.513144 2000 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:44:42.513271 kubelet[2000]: E0710 00:44:42.513252 2000 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:44:42.518187 env[1210]: time="2025-07-10T00:44:42.518003362Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 10 00:44:42.518187 env[1210]: time="2025-07-10T00:44:42.518077012Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 10 00:44:42.518187 env[1210]: time="2025-07-10T00:44:42.518107930Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 10 00:44:42.518375 env[1210]: time="2025-07-10T00:44:42.518325021Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/f37b37334c78d4b971e053eead5a85adfc7d06e1deed44339c06b7681327d58b pid=2502 runtime=io.containerd.runc.v2 Jul 10 00:44:42.540871 systemd[1]: Started cri-containerd-f37b37334c78d4b971e053eead5a85adfc7d06e1deed44339c06b7681327d58b.scope. Jul 10 00:44:42.553000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:42.553000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:42.553000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:42.553000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:42.553000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:42.553000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:42.553000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:42.553000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:42.553000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:42.553000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:42.553000 audit: BPF prog-id=119 op=LOAD Jul 10 00:44:42.554000 audit[2511]: AVC avc: denied { bpf } for pid=2511 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:42.554000 audit[2511]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=2502 pid=2511 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:44:42.554000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6633376233373333346337386434623937316530353365656164356138 Jul 10 00:44:42.554000 audit[2511]: AVC avc: denied { perfmon } for pid=2511 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:42.554000 audit[2511]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=2502 pid=2511 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:44:42.554000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6633376233373333346337386434623937316530353365656164356138 Jul 10 00:44:42.554000 audit[2511]: AVC avc: denied { bpf } for pid=2511 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:42.554000 audit[2511]: AVC avc: denied { bpf } for pid=2511 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:42.554000 audit[2511]: AVC avc: denied { bpf } for pid=2511 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:42.554000 audit[2511]: AVC avc: denied { perfmon } for pid=2511 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:42.554000 audit[2511]: AVC avc: denied { perfmon } for pid=2511 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:42.554000 audit[2511]: AVC avc: denied { perfmon } for pid=2511 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:42.554000 audit[2511]: AVC avc: denied { perfmon } for pid=2511 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:42.554000 audit[2511]: AVC avc: denied { perfmon } for pid=2511 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:42.554000 audit[2511]: AVC avc: denied { bpf } for pid=2511 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:42.554000 audit[2511]: AVC avc: denied { bpf } for pid=2511 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:42.554000 audit: BPF prog-id=120 op=LOAD Jul 10 00:44:42.554000 audit[2511]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0000f5d90 items=0 ppid=2502 pid=2511 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:44:42.554000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6633376233373333346337386434623937316530353365656164356138 Jul 10 00:44:42.554000 audit[2511]: AVC avc: denied { bpf } for pid=2511 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:42.554000 audit[2511]: AVC avc: denied { bpf } for pid=2511 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:42.554000 audit[2511]: AVC avc: denied { perfmon } for pid=2511 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:42.554000 audit[2511]: AVC avc: denied { perfmon } for pid=2511 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:42.554000 audit[2511]: AVC avc: denied { perfmon } for pid=2511 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:42.554000 audit[2511]: AVC avc: denied { perfmon } for pid=2511 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:42.554000 audit[2511]: AVC avc: denied { perfmon } for pid=2511 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:42.554000 audit[2511]: AVC avc: denied { bpf } for pid=2511 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:42.554000 audit[2511]: AVC avc: denied { bpf } for pid=2511 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:42.554000 audit: BPF prog-id=121 op=LOAD Jul 10 00:44:42.554000 audit[2511]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0000f5dd8 items=0 ppid=2502 pid=2511 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:44:42.554000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6633376233373333346337386434623937316530353365656164356138 Jul 10 00:44:42.554000 audit: BPF prog-id=121 op=UNLOAD Jul 10 00:44:42.554000 audit: BPF prog-id=120 op=UNLOAD Jul 10 00:44:42.554000 audit[2511]: AVC avc: denied { bpf } for pid=2511 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:42.554000 audit[2511]: AVC avc: denied { bpf } for pid=2511 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:42.554000 audit[2511]: AVC avc: denied { bpf } for pid=2511 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:42.554000 audit[2511]: AVC avc: denied { perfmon } for pid=2511 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:42.554000 audit[2511]: AVC avc: denied { perfmon } for pid=2511 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:42.554000 audit[2511]: AVC avc: denied { perfmon } for pid=2511 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:42.554000 audit[2511]: AVC avc: denied { perfmon } for pid=2511 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:42.554000 audit[2511]: AVC avc: denied { perfmon } for pid=2511 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:42.554000 audit[2511]: AVC avc: denied { bpf } for pid=2511 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:42.554000 audit[2511]: AVC avc: denied { bpf } for pid=2511 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:42.554000 audit: BPF prog-id=122 op=LOAD Jul 10 00:44:42.554000 audit[2511]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0003501e8 items=0 ppid=2502 pid=2511 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:44:42.554000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6633376233373333346337386434623937316530353365656164356138 Jul 10 00:44:42.567460 env[1210]: time="2025-07-10T00:44:42.567406068Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-mw7f4,Uid:95641ef5-8ad8-4169-9b0a-ef93967c99a8,Namespace:calico-system,Attempt:0,} returns sandbox id \"f37b37334c78d4b971e053eead5a85adfc7d06e1deed44339c06b7681327d58b\"" Jul 10 00:44:42.612564 kubelet[2000]: E0710 00:44:42.612520 2000 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:44:42.612564 kubelet[2000]: W0710 00:44:42.612546 2000 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:44:42.612564 kubelet[2000]: E0710 00:44:42.612568 2000 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:44:42.612898 kubelet[2000]: E0710 00:44:42.612784 2000 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:44:42.612898 kubelet[2000]: W0710 00:44:42.612797 2000 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:44:42.612898 kubelet[2000]: E0710 00:44:42.612807 2000 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:44:42.613026 kubelet[2000]: E0710 00:44:42.612974 2000 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:44:42.613026 kubelet[2000]: W0710 00:44:42.612981 2000 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:44:42.613026 kubelet[2000]: E0710 00:44:42.612989 2000 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:44:42.613206 kubelet[2000]: E0710 00:44:42.613186 2000 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:44:42.613206 kubelet[2000]: W0710 00:44:42.613199 2000 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:44:42.613206 kubelet[2000]: E0710 00:44:42.613208 2000 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:44:42.613663 kubelet[2000]: E0710 00:44:42.613625 2000 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:44:42.613732 kubelet[2000]: W0710 00:44:42.613660 2000 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:44:42.613732 kubelet[2000]: E0710 00:44:42.613690 2000 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:44:42.613923 kubelet[2000]: E0710 00:44:42.613905 2000 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:44:42.613923 kubelet[2000]: W0710 00:44:42.613918 2000 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:44:42.614021 kubelet[2000]: E0710 00:44:42.613929 2000 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:44:42.614127 kubelet[2000]: E0710 00:44:42.614110 2000 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:44:42.614127 kubelet[2000]: W0710 00:44:42.614123 2000 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:44:42.614210 kubelet[2000]: E0710 00:44:42.614133 2000 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:44:42.614329 kubelet[2000]: E0710 00:44:42.614312 2000 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:44:42.614329 kubelet[2000]: W0710 00:44:42.614324 2000 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:44:42.614427 kubelet[2000]: E0710 00:44:42.614334 2000 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:44:42.614543 kubelet[2000]: E0710 00:44:42.614525 2000 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:44:42.614543 kubelet[2000]: W0710 00:44:42.614538 2000 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:44:42.614623 kubelet[2000]: E0710 00:44:42.614548 2000 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:44:42.616950 kubelet[2000]: E0710 00:44:42.616916 2000 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:44:42.616950 kubelet[2000]: W0710 00:44:42.616949 2000 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:44:42.617064 kubelet[2000]: E0710 00:44:42.616961 2000 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:44:42.617174 kubelet[2000]: E0710 00:44:42.617150 2000 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:44:42.617406 kubelet[2000]: W0710 00:44:42.617166 2000 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:44:42.617406 kubelet[2000]: E0710 00:44:42.617294 2000 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:44:42.617643 kubelet[2000]: E0710 00:44:42.617617 2000 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:44:42.617643 kubelet[2000]: W0710 00:44:42.617632 2000 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:44:42.617643 kubelet[2000]: E0710 00:44:42.617642 2000 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:44:42.618541 kubelet[2000]: E0710 00:44:42.618471 2000 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:44:42.618541 kubelet[2000]: W0710 00:44:42.618525 2000 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:44:42.618541 kubelet[2000]: E0710 00:44:42.618535 2000 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:44:42.619133 kubelet[2000]: E0710 00:44:42.619095 2000 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:44:42.619133 kubelet[2000]: W0710 00:44:42.619110 2000 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:44:42.619133 kubelet[2000]: E0710 00:44:42.619120 2000 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:44:42.619509 kubelet[2000]: E0710 00:44:42.619477 2000 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:44:42.619509 kubelet[2000]: W0710 00:44:42.619491 2000 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:44:42.619509 kubelet[2000]: E0710 00:44:42.619501 2000 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:44:42.619678 kubelet[2000]: E0710 00:44:42.619665 2000 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:44:42.619678 kubelet[2000]: W0710 00:44:42.619675 2000 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:44:42.619732 kubelet[2000]: E0710 00:44:42.619683 2000 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:44:42.619898 kubelet[2000]: E0710 00:44:42.619829 2000 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:44:42.619898 kubelet[2000]: W0710 00:44:42.619838 2000 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:44:42.619898 kubelet[2000]: E0710 00:44:42.619881 2000 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:44:42.620050 kubelet[2000]: E0710 00:44:42.620034 2000 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:44:42.620096 kubelet[2000]: W0710 00:44:42.620083 2000 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:44:42.620096 kubelet[2000]: E0710 00:44:42.620093 2000 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:44:42.620398 kubelet[2000]: E0710 00:44:42.620378 2000 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:44:42.620398 kubelet[2000]: W0710 00:44:42.620390 2000 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:44:42.620398 kubelet[2000]: E0710 00:44:42.620399 2000 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:44:42.620574 kubelet[2000]: E0710 00:44:42.620558 2000 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:44:42.620574 kubelet[2000]: W0710 00:44:42.620568 2000 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:44:42.620574 kubelet[2000]: E0710 00:44:42.620576 2000 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:44:42.620795 kubelet[2000]: E0710 00:44:42.620752 2000 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:44:42.620795 kubelet[2000]: W0710 00:44:42.620766 2000 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:44:42.620795 kubelet[2000]: E0710 00:44:42.620775 2000 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:44:42.621201 kubelet[2000]: E0710 00:44:42.621069 2000 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:44:42.621201 kubelet[2000]: W0710 00:44:42.621092 2000 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:44:42.621201 kubelet[2000]: E0710 00:44:42.621101 2000 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:44:42.621421 kubelet[2000]: E0710 00:44:42.621299 2000 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:44:42.621421 kubelet[2000]: W0710 00:44:42.621306 2000 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:44:42.621421 kubelet[2000]: E0710 00:44:42.621314 2000 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:44:42.621601 kubelet[2000]: E0710 00:44:42.621550 2000 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:44:42.621601 kubelet[2000]: W0710 00:44:42.621557 2000 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:44:42.621601 kubelet[2000]: E0710 00:44:42.621564 2000 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:44:42.621815 kubelet[2000]: E0710 00:44:42.621782 2000 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:44:42.621815 kubelet[2000]: W0710 00:44:42.621799 2000 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:44:42.621815 kubelet[2000]: E0710 00:44:42.621809 2000 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:44:42.634584 kubelet[2000]: E0710 00:44:42.634527 2000 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:44:42.634584 kubelet[2000]: W0710 00:44:42.634570 2000 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:44:42.634584 kubelet[2000]: E0710 00:44:42.634596 2000 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:44:42.887000 audit[2564]: NETFILTER_CFG table=filter:97 family=2 entries=20 op=nft_register_rule pid=2564 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:44:42.887000 audit[2564]: SYSCALL arch=c000003e syscall=46 success=yes exit=8224 a0=3 a1=7ffd50779a30 a2=0 a3=7ffd50779a1c items=0 ppid=2141 pid=2564 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:44:42.887000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:44:42.896000 audit[2564]: NETFILTER_CFG table=nat:98 family=2 entries=12 op=nft_register_rule pid=2564 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:44:42.896000 audit[2564]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffd50779a30 a2=0 a3=0 items=0 ppid=2141 pid=2564 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:44:42.896000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:44:43.310091 systemd[1]: run-containerd-runc-k8s.io-c41a02d564cf4bf5e07eb3494b37598a100524eff9dcd6ec1432546befe37be1-runc.I1TUYr.mount: Deactivated successfully. Jul 10 00:44:43.891967 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1770787526.mount: Deactivated successfully. Jul 10 00:44:44.681970 kubelet[2000]: E0710 00:44:44.681908 2000 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-2mgd9" podUID="8653425f-9c3b-4f40-adcd-044ce9ce6d7e" Jul 10 00:44:45.683454 env[1210]: time="2025-07-10T00:44:45.683396614Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:44:45.685219 env[1210]: time="2025-07-10T00:44:45.685195999Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:b3baa600c7ff9cd50dc12f2529ef263aaa346dbeca13c77c6553d661fd216b54,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:44:45.686914 env[1210]: time="2025-07-10T00:44:45.686893743Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/typha:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:44:45.688287 env[1210]: time="2025-07-10T00:44:45.688260751Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha@sha256:da29d745efe5eb7d25f765d3aa439f3fe60710a458efe39c285e58b02bd961af,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:44:45.688694 env[1210]: time="2025-07-10T00:44:45.688661129Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.30.2\" returns image reference \"sha256:b3baa600c7ff9cd50dc12f2529ef263aaa346dbeca13c77c6553d661fd216b54\"" Jul 10 00:44:45.689684 env[1210]: time="2025-07-10T00:44:45.689659719Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.2\"" Jul 10 00:44:45.999903 env[1210]: time="2025-07-10T00:44:45.999767669Z" level=info msg="CreateContainer within sandbox \"c41a02d564cf4bf5e07eb3494b37598a100524eff9dcd6ec1432546befe37be1\" for container &ContainerMetadata{Name:calico-typha,Attempt:0,}" Jul 10 00:44:46.014218 env[1210]: time="2025-07-10T00:44:46.014166639Z" level=info msg="CreateContainer within sandbox \"c41a02d564cf4bf5e07eb3494b37598a100524eff9dcd6ec1432546befe37be1\" for &ContainerMetadata{Name:calico-typha,Attempt:0,} returns container id \"2b24385035664d792d3896dccc14f9e20b92259cca1dc1137661b05f5936d432\"" Jul 10 00:44:46.014898 env[1210]: time="2025-07-10T00:44:46.014857466Z" level=info msg="StartContainer for \"2b24385035664d792d3896dccc14f9e20b92259cca1dc1137661b05f5936d432\"" Jul 10 00:44:46.031742 systemd[1]: Started cri-containerd-2b24385035664d792d3896dccc14f9e20b92259cca1dc1137661b05f5936d432.scope. Jul 10 00:44:46.048645 kernel: kauditd_printk_skb: 139 callbacks suppressed Jul 10 00:44:46.048773 kernel: audit: type=1400 audit(1752108286.046:964): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:46.046000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:46.046000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:46.065316 kernel: audit: type=1400 audit(1752108286.046:965): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:46.065409 kernel: audit: type=1400 audit(1752108286.046:966): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:46.065494 kernel: audit: type=1400 audit(1752108286.046:967): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:46.065580 kernel: audit: type=1400 audit(1752108286.046:968): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:46.046000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:46.046000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:46.046000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:46.046000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:46.046000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:46.072380 kernel: audit: type=1400 audit(1752108286.046:969): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:46.072470 kernel: audit: type=1400 audit(1752108286.046:970): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:46.072520 kernel: audit: type=1400 audit(1752108286.046:971): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:46.046000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:46.046000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:46.079417 kernel: audit: type=1400 audit(1752108286.046:972): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:46.082588 kernel: audit: type=1400 audit(1752108286.051:973): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:46.051000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:46.051000 audit: BPF prog-id=123 op=LOAD Jul 10 00:44:46.051000 audit[2575]: AVC avc: denied { bpf } for pid=2575 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:46.051000 audit[2575]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=2420 pid=2575 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:44:46.051000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3262323433383530333536363464373932643338393664636363313466 Jul 10 00:44:46.051000 audit[2575]: AVC avc: denied { perfmon } for pid=2575 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:46.051000 audit[2575]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=2420 pid=2575 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:44:46.051000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3262323433383530333536363464373932643338393664636363313466 Jul 10 00:44:46.051000 audit[2575]: AVC avc: denied { bpf } for pid=2575 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:46.051000 audit[2575]: AVC avc: denied { bpf } for pid=2575 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:46.051000 audit[2575]: AVC avc: denied { bpf } for pid=2575 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:46.051000 audit[2575]: AVC avc: denied { perfmon } for pid=2575 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:46.051000 audit[2575]: AVC avc: denied { perfmon } for pid=2575 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:46.051000 audit[2575]: AVC avc: denied { perfmon } for pid=2575 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:46.051000 audit[2575]: AVC avc: denied { perfmon } for pid=2575 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:46.051000 audit[2575]: AVC avc: denied { perfmon } for pid=2575 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:46.051000 audit[2575]: AVC avc: denied { bpf } for pid=2575 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:46.051000 audit[2575]: AVC avc: denied { bpf } for pid=2575 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:46.051000 audit: BPF prog-id=124 op=LOAD Jul 10 00:44:46.051000 audit[2575]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c00021b7b0 items=0 ppid=2420 pid=2575 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:44:46.051000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3262323433383530333536363464373932643338393664636363313466 Jul 10 00:44:46.058000 audit[2575]: AVC avc: denied { bpf } for pid=2575 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:46.058000 audit[2575]: AVC avc: denied { bpf } for pid=2575 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:46.058000 audit[2575]: AVC avc: denied { perfmon } for pid=2575 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:46.058000 audit[2575]: AVC avc: denied { perfmon } for pid=2575 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:46.058000 audit[2575]: AVC avc: denied { perfmon } for pid=2575 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:46.058000 audit[2575]: AVC avc: denied { perfmon } for pid=2575 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:46.058000 audit[2575]: AVC avc: denied { perfmon } for pid=2575 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:46.058000 audit[2575]: AVC avc: denied { bpf } for pid=2575 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:46.058000 audit[2575]: AVC avc: denied { bpf } for pid=2575 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:46.058000 audit: BPF prog-id=125 op=LOAD Jul 10 00:44:46.058000 audit[2575]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c00021b7f8 items=0 ppid=2420 pid=2575 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:44:46.058000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3262323433383530333536363464373932643338393664636363313466 Jul 10 00:44:46.064000 audit: BPF prog-id=125 op=UNLOAD Jul 10 00:44:46.064000 audit: BPF prog-id=124 op=UNLOAD Jul 10 00:44:46.064000 audit[2575]: AVC avc: denied { bpf } for pid=2575 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:46.064000 audit[2575]: AVC avc: denied { bpf } for pid=2575 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:46.064000 audit[2575]: AVC avc: denied { bpf } for pid=2575 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:46.064000 audit[2575]: AVC avc: denied { perfmon } for pid=2575 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:46.064000 audit[2575]: AVC avc: denied { perfmon } for pid=2575 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:46.064000 audit[2575]: AVC avc: denied { perfmon } for pid=2575 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:46.064000 audit[2575]: AVC avc: denied { perfmon } for pid=2575 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:46.064000 audit[2575]: AVC avc: denied { perfmon } for pid=2575 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:46.064000 audit[2575]: AVC avc: denied { bpf } for pid=2575 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:46.064000 audit[2575]: AVC avc: denied { bpf } for pid=2575 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:46.064000 audit: BPF prog-id=126 op=LOAD Jul 10 00:44:46.064000 audit[2575]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c00021bc08 items=0 ppid=2420 pid=2575 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:44:46.064000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3262323433383530333536363464373932643338393664636363313466 Jul 10 00:44:46.101163 env[1210]: time="2025-07-10T00:44:46.101117899Z" level=info msg="StartContainer for \"2b24385035664d792d3896dccc14f9e20b92259cca1dc1137661b05f5936d432\" returns successfully" Jul 10 00:44:46.682127 kubelet[2000]: E0710 00:44:46.682049 2000 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-2mgd9" podUID="8653425f-9c3b-4f40-adcd-044ce9ce6d7e" Jul 10 00:44:46.738923 kubelet[2000]: E0710 00:44:46.738888 2000 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:44:46.832691 kubelet[2000]: E0710 00:44:46.832642 2000 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:44:46.832691 kubelet[2000]: W0710 00:44:46.832668 2000 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:44:46.832691 kubelet[2000]: E0710 00:44:46.832692 2000 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:44:46.833051 kubelet[2000]: E0710 00:44:46.832969 2000 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:44:46.833051 kubelet[2000]: W0710 00:44:46.833001 2000 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:44:46.833051 kubelet[2000]: E0710 00:44:46.833033 2000 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:44:46.833366 kubelet[2000]: E0710 00:44:46.833346 2000 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:44:46.833366 kubelet[2000]: W0710 00:44:46.833358 2000 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:44:46.833366 kubelet[2000]: E0710 00:44:46.833366 2000 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:44:46.833611 kubelet[2000]: E0710 00:44:46.833592 2000 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:44:46.833611 kubelet[2000]: W0710 00:44:46.833602 2000 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:44:46.833611 kubelet[2000]: E0710 00:44:46.833611 2000 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:44:46.833802 kubelet[2000]: E0710 00:44:46.833785 2000 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:44:46.833802 kubelet[2000]: W0710 00:44:46.833795 2000 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:44:46.833802 kubelet[2000]: E0710 00:44:46.833802 2000 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:44:46.834014 kubelet[2000]: E0710 00:44:46.833999 2000 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:44:46.834014 kubelet[2000]: W0710 00:44:46.834009 2000 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:44:46.834014 kubelet[2000]: E0710 00:44:46.834017 2000 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:44:46.834201 kubelet[2000]: E0710 00:44:46.834187 2000 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:44:46.834201 kubelet[2000]: W0710 00:44:46.834196 2000 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:44:46.834269 kubelet[2000]: E0710 00:44:46.834203 2000 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:44:46.834383 kubelet[2000]: E0710 00:44:46.834371 2000 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:44:46.834383 kubelet[2000]: W0710 00:44:46.834381 2000 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:44:46.834438 kubelet[2000]: E0710 00:44:46.834388 2000 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:44:46.834568 kubelet[2000]: E0710 00:44:46.834554 2000 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:44:46.834568 kubelet[2000]: W0710 00:44:46.834566 2000 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:44:46.834636 kubelet[2000]: E0710 00:44:46.834574 2000 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:44:46.834766 kubelet[2000]: E0710 00:44:46.834749 2000 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:44:46.834766 kubelet[2000]: W0710 00:44:46.834758 2000 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:44:46.834766 kubelet[2000]: E0710 00:44:46.834764 2000 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:44:46.835046 kubelet[2000]: E0710 00:44:46.835006 2000 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:44:46.835106 kubelet[2000]: W0710 00:44:46.835044 2000 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:44:46.835106 kubelet[2000]: E0710 00:44:46.835079 2000 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:44:46.835391 kubelet[2000]: E0710 00:44:46.835361 2000 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:44:46.835391 kubelet[2000]: W0710 00:44:46.835376 2000 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:44:46.835391 kubelet[2000]: E0710 00:44:46.835386 2000 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:44:46.835577 kubelet[2000]: E0710 00:44:46.835564 2000 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:44:46.835577 kubelet[2000]: W0710 00:44:46.835574 2000 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:44:46.835629 kubelet[2000]: E0710 00:44:46.835582 2000 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:44:46.835810 kubelet[2000]: E0710 00:44:46.835789 2000 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:44:46.835810 kubelet[2000]: W0710 00:44:46.835801 2000 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:44:46.835810 kubelet[2000]: E0710 00:44:46.835810 2000 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:44:46.836008 kubelet[2000]: E0710 00:44:46.835994 2000 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:44:46.836008 kubelet[2000]: W0710 00:44:46.836006 2000 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:44:46.836063 kubelet[2000]: E0710 00:44:46.836016 2000 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:44:46.848323 kubelet[2000]: E0710 00:44:46.848291 2000 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:44:46.848323 kubelet[2000]: W0710 00:44:46.848305 2000 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:44:46.848323 kubelet[2000]: E0710 00:44:46.848315 2000 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:44:46.848530 kubelet[2000]: E0710 00:44:46.848514 2000 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:44:46.848530 kubelet[2000]: W0710 00:44:46.848524 2000 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:44:46.848530 kubelet[2000]: E0710 00:44:46.848531 2000 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:44:46.848738 kubelet[2000]: E0710 00:44:46.848711 2000 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:44:46.848738 kubelet[2000]: W0710 00:44:46.848721 2000 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:44:46.848738 kubelet[2000]: E0710 00:44:46.848728 2000 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:44:46.848948 kubelet[2000]: E0710 00:44:46.848919 2000 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:44:46.848948 kubelet[2000]: W0710 00:44:46.848935 2000 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:44:46.848948 kubelet[2000]: E0710 00:44:46.848945 2000 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:44:46.849169 kubelet[2000]: E0710 00:44:46.849152 2000 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:44:46.849169 kubelet[2000]: W0710 00:44:46.849162 2000 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:44:46.849169 kubelet[2000]: E0710 00:44:46.849171 2000 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:44:46.849475 kubelet[2000]: E0710 00:44:46.849447 2000 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:44:46.849475 kubelet[2000]: W0710 00:44:46.849463 2000 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:44:46.849475 kubelet[2000]: E0710 00:44:46.849473 2000 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:44:46.849698 kubelet[2000]: E0710 00:44:46.849684 2000 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:44:46.849698 kubelet[2000]: W0710 00:44:46.849696 2000 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:44:46.849751 kubelet[2000]: E0710 00:44:46.849705 2000 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:44:46.849897 kubelet[2000]: E0710 00:44:46.849882 2000 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:44:46.849897 kubelet[2000]: W0710 00:44:46.849893 2000 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:44:46.849975 kubelet[2000]: E0710 00:44:46.849902 2000 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:44:46.850113 kubelet[2000]: E0710 00:44:46.850090 2000 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:44:46.850113 kubelet[2000]: W0710 00:44:46.850106 2000 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:44:46.850113 kubelet[2000]: E0710 00:44:46.850115 2000 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:44:46.850286 kubelet[2000]: E0710 00:44:46.850272 2000 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:44:46.850286 kubelet[2000]: W0710 00:44:46.850281 2000 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:44:46.850286 kubelet[2000]: E0710 00:44:46.850288 2000 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:44:46.850454 kubelet[2000]: E0710 00:44:46.850438 2000 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:44:46.850454 kubelet[2000]: W0710 00:44:46.850448 2000 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:44:46.850454 kubelet[2000]: E0710 00:44:46.850457 2000 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:44:46.850665 kubelet[2000]: E0710 00:44:46.850649 2000 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:44:46.850665 kubelet[2000]: W0710 00:44:46.850659 2000 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:44:46.850739 kubelet[2000]: E0710 00:44:46.850669 2000 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:44:46.850943 kubelet[2000]: E0710 00:44:46.850927 2000 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:44:46.850943 kubelet[2000]: W0710 00:44:46.850940 2000 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:44:46.851001 kubelet[2000]: E0710 00:44:46.850949 2000 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:44:46.851137 kubelet[2000]: E0710 00:44:46.851124 2000 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:44:46.851137 kubelet[2000]: W0710 00:44:46.851135 2000 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:44:46.851184 kubelet[2000]: E0710 00:44:46.851143 2000 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:44:46.851308 kubelet[2000]: E0710 00:44:46.851297 2000 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:44:46.851359 kubelet[2000]: W0710 00:44:46.851308 2000 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:44:46.851359 kubelet[2000]: E0710 00:44:46.851318 2000 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:44:46.851517 kubelet[2000]: E0710 00:44:46.851501 2000 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:44:46.851517 kubelet[2000]: W0710 00:44:46.851511 2000 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:44:46.851517 kubelet[2000]: E0710 00:44:46.851519 2000 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:44:46.851783 kubelet[2000]: E0710 00:44:46.851767 2000 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:44:46.851783 kubelet[2000]: W0710 00:44:46.851780 2000 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:44:46.851872 kubelet[2000]: E0710 00:44:46.851793 2000 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:44:46.852008 kubelet[2000]: E0710 00:44:46.851994 2000 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:44:46.852008 kubelet[2000]: W0710 00:44:46.852004 2000 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:44:46.852056 kubelet[2000]: E0710 00:44:46.852012 2000 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:44:46.971418 kubelet[2000]: I0710 00:44:46.971194 2000 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-typha-8685b84948-tjwrz" podStartSLOduration=2.674467873 podStartE2EDuration="5.97117044s" podCreationTimestamp="2025-07-10 00:44:41 +0000 UTC" firstStartedPulling="2025-07-10 00:44:42.392811777 +0000 UTC m=+18.798767402" lastFinishedPulling="2025-07-10 00:44:45.689514334 +0000 UTC m=+22.095469969" observedRunningTime="2025-07-10 00:44:46.969602252 +0000 UTC m=+23.375557877" watchObservedRunningTime="2025-07-10 00:44:46.97117044 +0000 UTC m=+23.377126075" Jul 10 00:44:47.432275 env[1210]: time="2025-07-10T00:44:47.432220814Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:44:47.435941 env[1210]: time="2025-07-10T00:44:47.435884266Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:639615519fa6f7bc4b4756066ba9780068fd291eacc36c120f6c555e62f2b00e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:44:47.437952 env[1210]: time="2025-07-10T00:44:47.437891262Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:44:47.439212 env[1210]: time="2025-07-10T00:44:47.439175302Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol@sha256:972be127eaecd7d1a2d5393b8d14f1ae8f88550bee83e0519e9590c7e15eb41b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:44:47.440021 env[1210]: time="2025-07-10T00:44:47.439972701Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.2\" returns image reference \"sha256:639615519fa6f7bc4b4756066ba9780068fd291eacc36c120f6c555e62f2b00e\"" Jul 10 00:44:47.451382 env[1210]: time="2025-07-10T00:44:47.451314058Z" level=info msg="CreateContainer within sandbox \"f37b37334c78d4b971e053eead5a85adfc7d06e1deed44339c06b7681327d58b\" for container &ContainerMetadata{Name:flexvol-driver,Attempt:0,}" Jul 10 00:44:47.470095 env[1210]: time="2025-07-10T00:44:47.470026733Z" level=info msg="CreateContainer within sandbox \"f37b37334c78d4b971e053eead5a85adfc7d06e1deed44339c06b7681327d58b\" for &ContainerMetadata{Name:flexvol-driver,Attempt:0,} returns container id \"e4a2cc706ca273b1199a5f110c2cc2155566659b9fed5920227889a48553198c\"" Jul 10 00:44:47.471052 env[1210]: time="2025-07-10T00:44:47.471026303Z" level=info msg="StartContainer for \"e4a2cc706ca273b1199a5f110c2cc2155566659b9fed5920227889a48553198c\"" Jul 10 00:44:47.500089 systemd[1]: Started cri-containerd-e4a2cc706ca273b1199a5f110c2cc2155566659b9fed5920227889a48553198c.scope. Jul 10 00:44:47.514000 audit[2649]: AVC avc: denied { perfmon } for pid=2649 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:47.514000 audit[2649]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001476b0 a2=3c a3=7fd82c43c4d8 items=0 ppid=2502 pid=2649 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:44:47.514000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6534613263633730366361323733623131393961356631313063326363 Jul 10 00:44:47.514000 audit[2649]: AVC avc: denied { bpf } for pid=2649 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:47.514000 audit[2649]: AVC avc: denied { bpf } for pid=2649 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:47.514000 audit[2649]: AVC avc: denied { bpf } for pid=2649 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:47.514000 audit[2649]: AVC avc: denied { perfmon } for pid=2649 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:47.514000 audit[2649]: AVC avc: denied { perfmon } for pid=2649 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:47.514000 audit[2649]: AVC avc: denied { perfmon } for pid=2649 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:47.514000 audit[2649]: AVC avc: denied { perfmon } for pid=2649 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:47.514000 audit[2649]: AVC avc: denied { perfmon } for pid=2649 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:47.514000 audit[2649]: AVC avc: denied { bpf } for pid=2649 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:47.514000 audit[2649]: AVC avc: denied { bpf } for pid=2649 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:47.514000 audit: BPF prog-id=127 op=LOAD Jul 10 00:44:47.514000 audit[2649]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001479d8 a2=78 a3=c0002191b8 items=0 ppid=2502 pid=2649 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:44:47.514000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6534613263633730366361323733623131393961356631313063326363 Jul 10 00:44:47.514000 audit[2649]: AVC avc: denied { bpf } for pid=2649 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:47.514000 audit[2649]: AVC avc: denied { bpf } for pid=2649 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:47.514000 audit[2649]: AVC avc: denied { perfmon } for pid=2649 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:47.514000 audit[2649]: AVC avc: denied { perfmon } for pid=2649 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:47.514000 audit[2649]: AVC avc: denied { perfmon } for pid=2649 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:47.514000 audit[2649]: AVC avc: denied { perfmon } for pid=2649 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:47.514000 audit[2649]: AVC avc: denied { perfmon } for pid=2649 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:47.514000 audit[2649]: AVC avc: denied { bpf } for pid=2649 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:47.514000 audit[2649]: AVC avc: denied { bpf } for pid=2649 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:47.514000 audit: BPF prog-id=128 op=LOAD Jul 10 00:44:47.514000 audit[2649]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000147770 a2=78 a3=c000219208 items=0 ppid=2502 pid=2649 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:44:47.514000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6534613263633730366361323733623131393961356631313063326363 Jul 10 00:44:47.514000 audit: BPF prog-id=128 op=UNLOAD Jul 10 00:44:47.514000 audit: BPF prog-id=127 op=UNLOAD Jul 10 00:44:47.515000 audit[2649]: AVC avc: denied { bpf } for pid=2649 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:47.515000 audit[2649]: AVC avc: denied { bpf } for pid=2649 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:47.515000 audit[2649]: AVC avc: denied { bpf } for pid=2649 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:47.515000 audit[2649]: AVC avc: denied { perfmon } for pid=2649 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:47.515000 audit[2649]: AVC avc: denied { perfmon } for pid=2649 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:47.515000 audit[2649]: AVC avc: denied { perfmon } for pid=2649 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:47.515000 audit[2649]: AVC avc: denied { perfmon } for pid=2649 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:47.515000 audit[2649]: AVC avc: denied { perfmon } for pid=2649 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:47.515000 audit[2649]: AVC avc: denied { bpf } for pid=2649 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:47.515000 audit[2649]: AVC avc: denied { bpf } for pid=2649 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:47.515000 audit: BPF prog-id=129 op=LOAD Jul 10 00:44:47.515000 audit[2649]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000147c30 a2=78 a3=c000219298 items=0 ppid=2502 pid=2649 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:44:47.515000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6534613263633730366361323733623131393961356631313063326363 Jul 10 00:44:47.530110 env[1210]: time="2025-07-10T00:44:47.530032253Z" level=info msg="StartContainer for \"e4a2cc706ca273b1199a5f110c2cc2155566659b9fed5920227889a48553198c\" returns successfully" Jul 10 00:44:47.543342 systemd[1]: cri-containerd-e4a2cc706ca273b1199a5f110c2cc2155566659b9fed5920227889a48553198c.scope: Deactivated successfully. Jul 10 00:44:47.548000 audit: BPF prog-id=129 op=UNLOAD Jul 10 00:44:47.563609 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-e4a2cc706ca273b1199a5f110c2cc2155566659b9fed5920227889a48553198c-rootfs.mount: Deactivated successfully. Jul 10 00:44:47.615725 env[1210]: time="2025-07-10T00:44:47.615666040Z" level=info msg="shim disconnected" id=e4a2cc706ca273b1199a5f110c2cc2155566659b9fed5920227889a48553198c Jul 10 00:44:47.616052 env[1210]: time="2025-07-10T00:44:47.616002186Z" level=warning msg="cleaning up after shim disconnected" id=e4a2cc706ca273b1199a5f110c2cc2155566659b9fed5920227889a48553198c namespace=k8s.io Jul 10 00:44:47.616052 env[1210]: time="2025-07-10T00:44:47.616019609Z" level=info msg="cleaning up dead shim" Jul 10 00:44:47.623664 env[1210]: time="2025-07-10T00:44:47.623600843Z" level=warning msg="cleanup warnings time=\"2025-07-10T00:44:47Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2687 runtime=io.containerd.runc.v2\n" Jul 10 00:44:47.741895 kubelet[2000]: I0710 00:44:47.741688 2000 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Jul 10 00:44:47.742290 kubelet[2000]: E0710 00:44:47.742064 2000 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:44:47.743854 env[1210]: time="2025-07-10T00:44:47.743097218Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.30.2\"" Jul 10 00:44:48.681950 kubelet[2000]: E0710 00:44:48.681873 2000 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-2mgd9" podUID="8653425f-9c3b-4f40-adcd-044ce9ce6d7e" Jul 10 00:44:50.681553 kubelet[2000]: E0710 00:44:50.681479 2000 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-2mgd9" podUID="8653425f-9c3b-4f40-adcd-044ce9ce6d7e" Jul 10 00:44:51.835273 env[1210]: time="2025-07-10T00:44:51.835202831Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:44:51.837245 env[1210]: time="2025-07-10T00:44:51.837216156Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:77a357d0d33e3016e61153f7d2b7de72371579c4aaeb767fb7ef0af606fe1630,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:44:51.838834 env[1210]: time="2025-07-10T00:44:51.838795572Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/cni:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:44:51.840384 env[1210]: time="2025-07-10T00:44:51.840362595Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni@sha256:50686775cc60acb78bd92a66fa2d84e1700b2d8e43a718fbadbf35e59baefb4d,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:44:51.840780 env[1210]: time="2025-07-10T00:44:51.840755046Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.30.2\" returns image reference \"sha256:77a357d0d33e3016e61153f7d2b7de72371579c4aaeb767fb7ef0af606fe1630\"" Jul 10 00:44:51.845013 env[1210]: time="2025-07-10T00:44:51.844973050Z" level=info msg="CreateContainer within sandbox \"f37b37334c78d4b971e053eead5a85adfc7d06e1deed44339c06b7681327d58b\" for container &ContainerMetadata{Name:install-cni,Attempt:0,}" Jul 10 00:44:51.861239 env[1210]: time="2025-07-10T00:44:51.861177324Z" level=info msg="CreateContainer within sandbox \"f37b37334c78d4b971e053eead5a85adfc7d06e1deed44339c06b7681327d58b\" for &ContainerMetadata{Name:install-cni,Attempt:0,} returns container id \"c26062a2a454262f47c225be249447ffc9cbd2e4b99d9aaba745947ac4da5aa2\"" Jul 10 00:44:51.861815 env[1210]: time="2025-07-10T00:44:51.861791584Z" level=info msg="StartContainer for \"c26062a2a454262f47c225be249447ffc9cbd2e4b99d9aaba745947ac4da5aa2\"" Jul 10 00:44:51.888226 systemd[1]: Started cri-containerd-c26062a2a454262f47c225be249447ffc9cbd2e4b99d9aaba745947ac4da5aa2.scope. Jul 10 00:44:51.905000 audit[2712]: AVC avc: denied { perfmon } for pid=2712 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:51.915525 kernel: kauditd_printk_skb: 91 callbacks suppressed Jul 10 00:44:51.915595 kernel: audit: type=1400 audit(1752108291.905:989): avc: denied { perfmon } for pid=2712 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:51.905000 audit[2712]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001c56b0 a2=3c a3=7fa24a2dc2f8 items=0 ppid=2502 pid=2712 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:44:51.923221 kernel: audit: type=1300 audit(1752108291.905:989): arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001c56b0 a2=3c a3=7fa24a2dc2f8 items=0 ppid=2502 pid=2712 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:44:51.905000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6332363036326132613435343236326634376332323562653234393434 Jul 10 00:44:51.927510 kernel: audit: type=1327 audit(1752108291.905:989): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6332363036326132613435343236326634376332323562653234393434 Jul 10 00:44:51.927566 kernel: audit: type=1400 audit(1752108291.905:990): avc: denied { bpf } for pid=2712 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:51.905000 audit[2712]: AVC avc: denied { bpf } for pid=2712 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:51.930663 kernel: audit: type=1400 audit(1752108291.905:990): avc: denied { bpf } for pid=2712 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:51.905000 audit[2712]: AVC avc: denied { bpf } for pid=2712 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:51.905000 audit[2712]: AVC avc: denied { bpf } for pid=2712 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:51.937184 kernel: audit: type=1400 audit(1752108291.905:990): avc: denied { bpf } for pid=2712 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:51.905000 audit[2712]: AVC avc: denied { perfmon } for pid=2712 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:51.940281 kernel: audit: type=1400 audit(1752108291.905:990): avc: denied { perfmon } for pid=2712 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:51.940352 kernel: audit: type=1400 audit(1752108291.905:990): avc: denied { perfmon } for pid=2712 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:51.905000 audit[2712]: AVC avc: denied { perfmon } for pid=2712 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:51.905000 audit[2712]: AVC avc: denied { perfmon } for pid=2712 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:51.946744 kernel: audit: type=1400 audit(1752108291.905:990): avc: denied { perfmon } for pid=2712 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:51.946835 kernel: audit: type=1400 audit(1752108291.905:990): avc: denied { perfmon } for pid=2712 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:51.905000 audit[2712]: AVC avc: denied { perfmon } for pid=2712 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:51.905000 audit[2712]: AVC avc: denied { perfmon } for pid=2712 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:51.905000 audit[2712]: AVC avc: denied { bpf } for pid=2712 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:51.905000 audit[2712]: AVC avc: denied { bpf } for pid=2712 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:51.905000 audit: BPF prog-id=130 op=LOAD Jul 10 00:44:51.905000 audit[2712]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001c59d8 a2=78 a3=c000024248 items=0 ppid=2502 pid=2712 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:44:51.905000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6332363036326132613435343236326634376332323562653234393434 Jul 10 00:44:51.917000 audit[2712]: AVC avc: denied { bpf } for pid=2712 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:51.917000 audit[2712]: AVC avc: denied { bpf } for pid=2712 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:51.917000 audit[2712]: AVC avc: denied { perfmon } for pid=2712 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:51.917000 audit[2712]: AVC avc: denied { perfmon } for pid=2712 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:51.917000 audit[2712]: AVC avc: denied { perfmon } for pid=2712 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:51.917000 audit[2712]: AVC avc: denied { perfmon } for pid=2712 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:51.917000 audit[2712]: AVC avc: denied { perfmon } for pid=2712 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:51.917000 audit[2712]: AVC avc: denied { bpf } for pid=2712 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:51.917000 audit[2712]: AVC avc: denied { bpf } for pid=2712 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:51.917000 audit: BPF prog-id=131 op=LOAD Jul 10 00:44:51.917000 audit[2712]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c0001c5770 a2=78 a3=c000024298 items=0 ppid=2502 pid=2712 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:44:51.917000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6332363036326132613435343236326634376332323562653234393434 Jul 10 00:44:51.922000 audit: BPF prog-id=131 op=UNLOAD Jul 10 00:44:51.922000 audit: BPF prog-id=130 op=UNLOAD Jul 10 00:44:51.922000 audit[2712]: AVC avc: denied { bpf } for pid=2712 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:51.922000 audit[2712]: AVC avc: denied { bpf } for pid=2712 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:51.922000 audit[2712]: AVC avc: denied { bpf } for pid=2712 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:51.922000 audit[2712]: AVC avc: denied { perfmon } for pid=2712 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:51.922000 audit[2712]: AVC avc: denied { perfmon } for pid=2712 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:51.922000 audit[2712]: AVC avc: denied { perfmon } for pid=2712 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:51.922000 audit[2712]: AVC avc: denied { perfmon } for pid=2712 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:51.922000 audit[2712]: AVC avc: denied { perfmon } for pid=2712 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:51.922000 audit[2712]: AVC avc: denied { bpf } for pid=2712 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:51.922000 audit[2712]: AVC avc: denied { bpf } for pid=2712 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:44:51.922000 audit: BPF prog-id=132 op=LOAD Jul 10 00:44:51.922000 audit[2712]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001c5c30 a2=78 a3=c000024328 items=0 ppid=2502 pid=2712 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:44:51.922000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6332363036326132613435343236326634376332323562653234393434 Jul 10 00:44:51.951232 env[1210]: time="2025-07-10T00:44:51.951177002Z" level=info msg="StartContainer for \"c26062a2a454262f47c225be249447ffc9cbd2e4b99d9aaba745947ac4da5aa2\" returns successfully" Jul 10 00:44:52.682211 kubelet[2000]: E0710 00:44:52.682125 2000 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-2mgd9" podUID="8653425f-9c3b-4f40-adcd-044ce9ce6d7e" Jul 10 00:44:52.856138 systemd[1]: run-containerd-runc-k8s.io-c26062a2a454262f47c225be249447ffc9cbd2e4b99d9aaba745947ac4da5aa2-runc.IiLMGC.mount: Deactivated successfully. Jul 10 00:44:53.416066 kubelet[2000]: E0710 00:44:53.416026 2000 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:44:53.827816 kubelet[2000]: E0710 00:44:53.827704 2000 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:44:54.276000 audit[2744]: NETFILTER_CFG table=filter:99 family=2 entries=21 op=nft_register_rule pid=2744 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:44:54.276000 audit[2744]: SYSCALL arch=c000003e syscall=46 success=yes exit=7480 a0=3 a1=7ffe5a40d740 a2=0 a3=7ffe5a40d72c items=0 ppid=2141 pid=2744 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:44:54.276000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:44:54.282000 audit[2744]: NETFILTER_CFG table=nat:100 family=2 entries=19 op=nft_register_chain pid=2744 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:44:54.282000 audit[2744]: SYSCALL arch=c000003e syscall=46 success=yes exit=6276 a0=3 a1=7ffe5a40d740 a2=0 a3=7ffe5a40d72c items=0 ppid=2141 pid=2744 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:44:54.282000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:44:54.461087 env[1210]: time="2025-07-10T00:44:54.461013520Z" level=error msg="failed to reload cni configuration after receiving fs change event(\"/etc/cni/net.d/calico-kubeconfig\": WRITE)" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Jul 10 00:44:54.462520 systemd[1]: cri-containerd-c26062a2a454262f47c225be249447ffc9cbd2e4b99d9aaba745947ac4da5aa2.scope: Deactivated successfully. Jul 10 00:44:54.465000 audit: BPF prog-id=132 op=UNLOAD Jul 10 00:44:54.479576 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-c26062a2a454262f47c225be249447ffc9cbd2e4b99d9aaba745947ac4da5aa2-rootfs.mount: Deactivated successfully. Jul 10 00:44:54.500436 kubelet[2000]: I0710 00:44:54.500386 2000 kubelet_node_status.go:501] "Fast updating node status as it just became ready" Jul 10 00:44:54.808613 systemd[1]: Created slice kubepods-besteffort-pod8653425f_9c3b_4f40_adcd_044ce9ce6d7e.slice. Jul 10 00:44:54.813165 env[1210]: time="2025-07-10T00:44:54.813121516Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-2mgd9,Uid:8653425f-9c3b-4f40-adcd-044ce9ce6d7e,Namespace:calico-system,Attempt:0,}" Jul 10 00:44:54.817739 env[1210]: time="2025-07-10T00:44:54.817671002Z" level=info msg="shim disconnected" id=c26062a2a454262f47c225be249447ffc9cbd2e4b99d9aaba745947ac4da5aa2 Jul 10 00:44:54.817739 env[1210]: time="2025-07-10T00:44:54.817723040Z" level=warning msg="cleaning up after shim disconnected" id=c26062a2a454262f47c225be249447ffc9cbd2e4b99d9aaba745947ac4da5aa2 namespace=k8s.io Jul 10 00:44:54.817739 env[1210]: time="2025-07-10T00:44:54.817731536Z" level=info msg="cleaning up dead shim" Jul 10 00:44:54.829621 env[1210]: time="2025-07-10T00:44:54.829542304Z" level=warning msg="cleanup warnings time=\"2025-07-10T00:44:54Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2758 runtime=io.containerd.runc.v2\n" Jul 10 00:44:54.836331 systemd[1]: Created slice kubepods-besteffort-podddc62d5a_12e9_476f_81ea_fecce29e2a58.slice. Jul 10 00:44:54.860394 systemd[1]: Created slice kubepods-besteffort-podbd35914e_3d9d_48a8_9a13_4f3678b36e0a.slice. Jul 10 00:44:54.867130 systemd[1]: Created slice kubepods-besteffort-pod990e1b75_6549_43f4_a7d2_6561d110faed.slice. Jul 10 00:44:54.873865 systemd[1]: Created slice kubepods-burstable-pod987d308c_16d4_4ea4_ad48_1ba4d53a2918.slice. Jul 10 00:44:54.881153 systemd[1]: Created slice kubepods-burstable-podd4134d3e_309e_4c16_a93c_0185dfd5a718.slice. Jul 10 00:44:54.887397 systemd[1]: Created slice kubepods-besteffort-pod9b2dff5b_398c_407e_b4b2_8a06e63be01e.slice. Jul 10 00:44:54.900560 systemd[1]: Created slice kubepods-besteffort-poddfde559b_7bf4_4977_8d25_29403f29347b.slice. Jul 10 00:44:54.910892 kubelet[2000]: I0710 00:44:54.910812 2000 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/bd35914e-3d9d-48a8-9a13-4f3678b36e0a-calico-apiserver-certs\") pod \"calico-apiserver-7b8bd7bfc9-7mdpn\" (UID: \"bd35914e-3d9d-48a8-9a13-4f3678b36e0a\") " pod="calico-apiserver/calico-apiserver-7b8bd7bfc9-7mdpn" Jul 10 00:44:54.910892 kubelet[2000]: I0710 00:44:54.910868 2000 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"goldmane-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/990e1b75-6549-43f4-a7d2-6561d110faed-goldmane-ca-bundle\") pod \"goldmane-768f4c5c69-vbht5\" (UID: \"990e1b75-6549-43f4-a7d2-6561d110faed\") " pod="calico-system/goldmane-768f4c5c69-vbht5" Jul 10 00:44:54.910892 kubelet[2000]: I0710 00:44:54.910886 2000 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/9b2dff5b-398c-407e-b4b2-8a06e63be01e-whisker-ca-bundle\") pod \"whisker-6657b6b6b8-lqb99\" (UID: \"9b2dff5b-398c-407e-b4b2-8a06e63be01e\") " pod="calico-system/whisker-6657b6b6b8-lqb99" Jul 10 00:44:54.910892 kubelet[2000]: I0710 00:44:54.910906 2000 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-cnxn4\" (UniqueName: \"kubernetes.io/projected/987d308c-16d4-4ea4-ad48-1ba4d53a2918-kube-api-access-cnxn4\") pod \"coredns-674b8bbfcf-ffnv5\" (UID: \"987d308c-16d4-4ea4-ad48-1ba4d53a2918\") " pod="kube-system/coredns-674b8bbfcf-ffnv5" Jul 10 00:44:54.911421 kubelet[2000]: I0710 00:44:54.910922 2000 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config\" (UniqueName: \"kubernetes.io/configmap/990e1b75-6549-43f4-a7d2-6561d110faed-config\") pod \"goldmane-768f4c5c69-vbht5\" (UID: \"990e1b75-6549-43f4-a7d2-6561d110faed\") " pod="calico-system/goldmane-768f4c5c69-vbht5" Jul 10 00:44:54.911421 kubelet[2000]: I0710 00:44:54.910984 2000 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-7p6fk\" (UniqueName: \"kubernetes.io/projected/bd35914e-3d9d-48a8-9a13-4f3678b36e0a-kube-api-access-7p6fk\") pod \"calico-apiserver-7b8bd7bfc9-7mdpn\" (UID: \"bd35914e-3d9d-48a8-9a13-4f3678b36e0a\") " pod="calico-apiserver/calico-apiserver-7b8bd7bfc9-7mdpn" Jul 10 00:44:54.911421 kubelet[2000]: I0710 00:44:54.911002 2000 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/9b2dff5b-398c-407e-b4b2-8a06e63be01e-whisker-backend-key-pair\") pod \"whisker-6657b6b6b8-lqb99\" (UID: \"9b2dff5b-398c-407e-b4b2-8a06e63be01e\") " pod="calico-system/whisker-6657b6b6b8-lqb99" Jul 10 00:44:54.911421 kubelet[2000]: I0710 00:44:54.911019 2000 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-trqrd\" (UniqueName: \"kubernetes.io/projected/9b2dff5b-398c-407e-b4b2-8a06e63be01e-kube-api-access-trqrd\") pod \"whisker-6657b6b6b8-lqb99\" (UID: \"9b2dff5b-398c-407e-b4b2-8a06e63be01e\") " pod="calico-system/whisker-6657b6b6b8-lqb99" Jul 10 00:44:54.911421 kubelet[2000]: I0710 00:44:54.911043 2000 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/d4134d3e-309e-4c16-a93c-0185dfd5a718-config-volume\") pod \"coredns-674b8bbfcf-dgqq9\" (UID: \"d4134d3e-309e-4c16-a93c-0185dfd5a718\") " pod="kube-system/coredns-674b8bbfcf-dgqq9" Jul 10 00:44:54.911550 kubelet[2000]: I0710 00:44:54.911056 2000 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-57jgj\" (UniqueName: \"kubernetes.io/projected/d4134d3e-309e-4c16-a93c-0185dfd5a718-kube-api-access-57jgj\") pod \"coredns-674b8bbfcf-dgqq9\" (UID: \"d4134d3e-309e-4c16-a93c-0185dfd5a718\") " pod="kube-system/coredns-674b8bbfcf-dgqq9" Jul 10 00:44:54.911550 kubelet[2000]: I0710 00:44:54.911070 2000 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-lr2ph\" (UniqueName: \"kubernetes.io/projected/dfde559b-7bf4-4977-8d25-29403f29347b-kube-api-access-lr2ph\") pod \"calico-apiserver-7b8bd7bfc9-9vccb\" (UID: \"dfde559b-7bf4-4977-8d25-29403f29347b\") " pod="calico-apiserver/calico-apiserver-7b8bd7bfc9-9vccb" Jul 10 00:44:54.911550 kubelet[2000]: I0710 00:44:54.911087 2000 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/ddc62d5a-12e9-476f-81ea-fecce29e2a58-tigera-ca-bundle\") pod \"calico-kube-controllers-6fbf996c46-f5zkt\" (UID: \"ddc62d5a-12e9-476f-81ea-fecce29e2a58\") " pod="calico-system/calico-kube-controllers-6fbf996c46-f5zkt" Jul 10 00:44:54.911550 kubelet[2000]: I0710 00:44:54.911101 2000 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-lqncc\" (UniqueName: \"kubernetes.io/projected/ddc62d5a-12e9-476f-81ea-fecce29e2a58-kube-api-access-lqncc\") pod \"calico-kube-controllers-6fbf996c46-f5zkt\" (UID: \"ddc62d5a-12e9-476f-81ea-fecce29e2a58\") " pod="calico-system/calico-kube-controllers-6fbf996c46-f5zkt" Jul 10 00:44:54.911550 kubelet[2000]: I0710 00:44:54.911116 2000 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/987d308c-16d4-4ea4-ad48-1ba4d53a2918-config-volume\") pod \"coredns-674b8bbfcf-ffnv5\" (UID: \"987d308c-16d4-4ea4-ad48-1ba4d53a2918\") " pod="kube-system/coredns-674b8bbfcf-ffnv5" Jul 10 00:44:54.911672 kubelet[2000]: I0710 00:44:54.911135 2000 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"goldmane-key-pair\" (UniqueName: \"kubernetes.io/secret/990e1b75-6549-43f4-a7d2-6561d110faed-goldmane-key-pair\") pod \"goldmane-768f4c5c69-vbht5\" (UID: \"990e1b75-6549-43f4-a7d2-6561d110faed\") " pod="calico-system/goldmane-768f4c5c69-vbht5" Jul 10 00:44:54.911672 kubelet[2000]: I0710 00:44:54.911163 2000 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/dfde559b-7bf4-4977-8d25-29403f29347b-calico-apiserver-certs\") pod \"calico-apiserver-7b8bd7bfc9-9vccb\" (UID: \"dfde559b-7bf4-4977-8d25-29403f29347b\") " pod="calico-apiserver/calico-apiserver-7b8bd7bfc9-9vccb" Jul 10 00:44:54.911672 kubelet[2000]: I0710 00:44:54.911177 2000 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-7ds7t\" (UniqueName: \"kubernetes.io/projected/990e1b75-6549-43f4-a7d2-6561d110faed-kube-api-access-7ds7t\") pod \"goldmane-768f4c5c69-vbht5\" (UID: \"990e1b75-6549-43f4-a7d2-6561d110faed\") " pod="calico-system/goldmane-768f4c5c69-vbht5" Jul 10 00:44:54.942510 env[1210]: time="2025-07-10T00:44:54.942381435Z" level=error msg="Failed to destroy network for sandbox \"a6a871d605560fe8d98e2baf90bb42a3dd9c1190ff7c730774a37205b055ca5c\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:44:54.942933 env[1210]: time="2025-07-10T00:44:54.942898772Z" level=error msg="encountered an error cleaning up failed sandbox \"a6a871d605560fe8d98e2baf90bb42a3dd9c1190ff7c730774a37205b055ca5c\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:44:54.942994 env[1210]: time="2025-07-10T00:44:54.942963895Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-2mgd9,Uid:8653425f-9c3b-4f40-adcd-044ce9ce6d7e,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"a6a871d605560fe8d98e2baf90bb42a3dd9c1190ff7c730774a37205b055ca5c\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:44:54.943396 kubelet[2000]: E0710 00:44:54.943328 2000 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"a6a871d605560fe8d98e2baf90bb42a3dd9c1190ff7c730774a37205b055ca5c\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:44:54.943473 kubelet[2000]: E0710 00:44:54.943432 2000 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"a6a871d605560fe8d98e2baf90bb42a3dd9c1190ff7c730774a37205b055ca5c\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-2mgd9" Jul 10 00:44:54.943502 kubelet[2000]: E0710 00:44:54.943470 2000 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"a6a871d605560fe8d98e2baf90bb42a3dd9c1190ff7c730774a37205b055ca5c\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-2mgd9" Jul 10 00:44:54.943570 kubelet[2000]: E0710 00:44:54.943537 2000 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"csi-node-driver-2mgd9_calico-system(8653425f-9c3b-4f40-adcd-044ce9ce6d7e)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"csi-node-driver-2mgd9_calico-system(8653425f-9c3b-4f40-adcd-044ce9ce6d7e)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"a6a871d605560fe8d98e2baf90bb42a3dd9c1190ff7c730774a37205b055ca5c\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-2mgd9" podUID="8653425f-9c3b-4f40-adcd-044ce9ce6d7e" Jul 10 00:44:54.945348 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-a6a871d605560fe8d98e2baf90bb42a3dd9c1190ff7c730774a37205b055ca5c-shm.mount: Deactivated successfully. Jul 10 00:44:55.144187 env[1210]: time="2025-07-10T00:44:55.143814859Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-6fbf996c46-f5zkt,Uid:ddc62d5a-12e9-476f-81ea-fecce29e2a58,Namespace:calico-system,Attempt:0,}" Jul 10 00:44:55.165006 env[1210]: time="2025-07-10T00:44:55.164978203Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-7b8bd7bfc9-7mdpn,Uid:bd35914e-3d9d-48a8-9a13-4f3678b36e0a,Namespace:calico-apiserver,Attempt:0,}" Jul 10 00:44:55.179459 kubelet[2000]: E0710 00:44:55.179378 2000 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:44:55.180500 env[1210]: time="2025-07-10T00:44:55.180087718Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-ffnv5,Uid:987d308c-16d4-4ea4-ad48-1ba4d53a2918,Namespace:kube-system,Attempt:0,}" Jul 10 00:44:55.180500 env[1210]: time="2025-07-10T00:44:55.180113647Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-768f4c5c69-vbht5,Uid:990e1b75-6549-43f4-a7d2-6561d110faed,Namespace:calico-system,Attempt:0,}" Jul 10 00:44:55.186326 kubelet[2000]: E0710 00:44:55.186284 2000 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:44:55.187062 env[1210]: time="2025-07-10T00:44:55.187003674Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-dgqq9,Uid:d4134d3e-309e-4c16-a93c-0185dfd5a718,Namespace:kube-system,Attempt:0,}" Jul 10 00:44:55.192550 env[1210]: time="2025-07-10T00:44:55.192347741Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-6657b6b6b8-lqb99,Uid:9b2dff5b-398c-407e-b4b2-8a06e63be01e,Namespace:calico-system,Attempt:0,}" Jul 10 00:44:55.206742 env[1210]: time="2025-07-10T00:44:55.206652145Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-7b8bd7bfc9-9vccb,Uid:dfde559b-7bf4-4977-8d25-29403f29347b,Namespace:calico-apiserver,Attempt:0,}" Jul 10 00:44:55.469487 env[1210]: time="2025-07-10T00:44:55.469339677Z" level=error msg="Failed to destroy network for sandbox \"7ffa2b3c827ee5ba1786acf83241852e76af9ad68f8fd0a62b972cd27c7cbeea\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:44:55.470364 env[1210]: time="2025-07-10T00:44:55.470331982Z" level=error msg="encountered an error cleaning up failed sandbox \"7ffa2b3c827ee5ba1786acf83241852e76af9ad68f8fd0a62b972cd27c7cbeea\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:44:55.470492 env[1210]: time="2025-07-10T00:44:55.470462910Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-dgqq9,Uid:d4134d3e-309e-4c16-a93c-0185dfd5a718,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"7ffa2b3c827ee5ba1786acf83241852e76af9ad68f8fd0a62b972cd27c7cbeea\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:44:55.471126 kubelet[2000]: E0710 00:44:55.470888 2000 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"7ffa2b3c827ee5ba1786acf83241852e76af9ad68f8fd0a62b972cd27c7cbeea\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:44:55.471126 kubelet[2000]: E0710 00:44:55.470982 2000 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"7ffa2b3c827ee5ba1786acf83241852e76af9ad68f8fd0a62b972cd27c7cbeea\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-674b8bbfcf-dgqq9" Jul 10 00:44:55.471126 kubelet[2000]: E0710 00:44:55.471004 2000 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"7ffa2b3c827ee5ba1786acf83241852e76af9ad68f8fd0a62b972cd27c7cbeea\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-674b8bbfcf-dgqq9" Jul 10 00:44:55.471270 kubelet[2000]: E0710 00:44:55.471073 2000 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-674b8bbfcf-dgqq9_kube-system(d4134d3e-309e-4c16-a93c-0185dfd5a718)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-674b8bbfcf-dgqq9_kube-system(d4134d3e-309e-4c16-a93c-0185dfd5a718)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"7ffa2b3c827ee5ba1786acf83241852e76af9ad68f8fd0a62b972cd27c7cbeea\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-674b8bbfcf-dgqq9" podUID="d4134d3e-309e-4c16-a93c-0185dfd5a718" Jul 10 00:44:55.477364 env[1210]: time="2025-07-10T00:44:55.477261414Z" level=error msg="Failed to destroy network for sandbox \"b84b082488c498ee101edac9ccb074ef00c948da04c445ef1696aa4916ed2382\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:44:55.487331 env[1210]: time="2025-07-10T00:44:55.487267889Z" level=error msg="encountered an error cleaning up failed sandbox \"b84b082488c498ee101edac9ccb074ef00c948da04c445ef1696aa4916ed2382\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:44:55.487800 env[1210]: time="2025-07-10T00:44:55.487762824Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-ffnv5,Uid:987d308c-16d4-4ea4-ad48-1ba4d53a2918,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"b84b082488c498ee101edac9ccb074ef00c948da04c445ef1696aa4916ed2382\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:44:55.488621 kubelet[2000]: E0710 00:44:55.488160 2000 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"b84b082488c498ee101edac9ccb074ef00c948da04c445ef1696aa4916ed2382\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:44:55.488621 kubelet[2000]: E0710 00:44:55.488237 2000 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"b84b082488c498ee101edac9ccb074ef00c948da04c445ef1696aa4916ed2382\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-674b8bbfcf-ffnv5" Jul 10 00:44:55.488621 kubelet[2000]: E0710 00:44:55.488271 2000 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"b84b082488c498ee101edac9ccb074ef00c948da04c445ef1696aa4916ed2382\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-674b8bbfcf-ffnv5" Jul 10 00:44:55.488896 kubelet[2000]: E0710 00:44:55.488324 2000 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-674b8bbfcf-ffnv5_kube-system(987d308c-16d4-4ea4-ad48-1ba4d53a2918)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-674b8bbfcf-ffnv5_kube-system(987d308c-16d4-4ea4-ad48-1ba4d53a2918)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"b84b082488c498ee101edac9ccb074ef00c948da04c445ef1696aa4916ed2382\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-674b8bbfcf-ffnv5" podUID="987d308c-16d4-4ea4-ad48-1ba4d53a2918" Jul 10 00:44:55.500143 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-b84b082488c498ee101edac9ccb074ef00c948da04c445ef1696aa4916ed2382-shm.mount: Deactivated successfully. Jul 10 00:44:55.507090 env[1210]: time="2025-07-10T00:44:55.507032358Z" level=error msg="Failed to destroy network for sandbox \"e088b4fa64ce58bd102e89b3e973569ef5f7d0da6d336068407c752f60657218\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:44:55.507574 env[1210]: time="2025-07-10T00:44:55.507546920Z" level=error msg="encountered an error cleaning up failed sandbox \"e088b4fa64ce58bd102e89b3e973569ef5f7d0da6d336068407c752f60657218\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:44:55.507697 env[1210]: time="2025-07-10T00:44:55.507667158Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-6fbf996c46-f5zkt,Uid:ddc62d5a-12e9-476f-81ea-fecce29e2a58,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"e088b4fa64ce58bd102e89b3e973569ef5f7d0da6d336068407c752f60657218\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:44:55.508524 kubelet[2000]: E0710 00:44:55.508055 2000 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"e088b4fa64ce58bd102e89b3e973569ef5f7d0da6d336068407c752f60657218\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:44:55.508524 kubelet[2000]: E0710 00:44:55.508126 2000 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"e088b4fa64ce58bd102e89b3e973569ef5f7d0da6d336068407c752f60657218\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-6fbf996c46-f5zkt" Jul 10 00:44:55.508524 kubelet[2000]: E0710 00:44:55.508147 2000 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"e088b4fa64ce58bd102e89b3e973569ef5f7d0da6d336068407c752f60657218\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-6fbf996c46-f5zkt" Jul 10 00:44:55.508767 kubelet[2000]: E0710 00:44:55.508197 2000 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-kube-controllers-6fbf996c46-f5zkt_calico-system(ddc62d5a-12e9-476f-81ea-fecce29e2a58)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-kube-controllers-6fbf996c46-f5zkt_calico-system(ddc62d5a-12e9-476f-81ea-fecce29e2a58)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"e088b4fa64ce58bd102e89b3e973569ef5f7d0da6d336068407c752f60657218\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-6fbf996c46-f5zkt" podUID="ddc62d5a-12e9-476f-81ea-fecce29e2a58" Jul 10 00:44:55.509395 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-e088b4fa64ce58bd102e89b3e973569ef5f7d0da6d336068407c752f60657218-shm.mount: Deactivated successfully. Jul 10 00:44:55.515816 env[1210]: time="2025-07-10T00:44:55.515759236Z" level=error msg="Failed to destroy network for sandbox \"1607d724730937f239d497e65803ea949f79c495541c34cdbc1f84732fa42959\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:44:55.516306 env[1210]: time="2025-07-10T00:44:55.516279158Z" level=error msg="encountered an error cleaning up failed sandbox \"1607d724730937f239d497e65803ea949f79c495541c34cdbc1f84732fa42959\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:44:55.516421 env[1210]: time="2025-07-10T00:44:55.516392693Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-7b8bd7bfc9-7mdpn,Uid:bd35914e-3d9d-48a8-9a13-4f3678b36e0a,Namespace:calico-apiserver,Attempt:0,} failed, error" error="failed to setup network for sandbox \"1607d724730937f239d497e65803ea949f79c495541c34cdbc1f84732fa42959\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:44:55.517753 kubelet[2000]: E0710 00:44:55.516813 2000 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"1607d724730937f239d497e65803ea949f79c495541c34cdbc1f84732fa42959\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:44:55.517753 kubelet[2000]: E0710 00:44:55.516979 2000 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"1607d724730937f239d497e65803ea949f79c495541c34cdbc1f84732fa42959\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-7b8bd7bfc9-7mdpn" Jul 10 00:44:55.517753 kubelet[2000]: E0710 00:44:55.517003 2000 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"1607d724730937f239d497e65803ea949f79c495541c34cdbc1f84732fa42959\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-7b8bd7bfc9-7mdpn" Jul 10 00:44:55.518017 kubelet[2000]: E0710 00:44:55.517083 2000 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-apiserver-7b8bd7bfc9-7mdpn_calico-apiserver(bd35914e-3d9d-48a8-9a13-4f3678b36e0a)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-apiserver-7b8bd7bfc9-7mdpn_calico-apiserver(bd35914e-3d9d-48a8-9a13-4f3678b36e0a)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"1607d724730937f239d497e65803ea949f79c495541c34cdbc1f84732fa42959\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-7b8bd7bfc9-7mdpn" podUID="bd35914e-3d9d-48a8-9a13-4f3678b36e0a" Jul 10 00:44:55.518378 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-1607d724730937f239d497e65803ea949f79c495541c34cdbc1f84732fa42959-shm.mount: Deactivated successfully. Jul 10 00:44:55.527402 env[1210]: time="2025-07-10T00:44:55.527320468Z" level=error msg="Failed to destroy network for sandbox \"6f997f8f42875d0c5592191313f27a28488bd1115bcb1c7abc280db6bf054afa\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:44:55.528131 env[1210]: time="2025-07-10T00:44:55.528088899Z" level=error msg="encountered an error cleaning up failed sandbox \"6f997f8f42875d0c5592191313f27a28488bd1115bcb1c7abc280db6bf054afa\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:44:55.528281 env[1210]: time="2025-07-10T00:44:55.528233302Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-7b8bd7bfc9-9vccb,Uid:dfde559b-7bf4-4977-8d25-29403f29347b,Namespace:calico-apiserver,Attempt:0,} failed, error" error="failed to setup network for sandbox \"6f997f8f42875d0c5592191313f27a28488bd1115bcb1c7abc280db6bf054afa\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:44:55.529034 kubelet[2000]: E0710 00:44:55.528638 2000 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"6f997f8f42875d0c5592191313f27a28488bd1115bcb1c7abc280db6bf054afa\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:44:55.529034 kubelet[2000]: E0710 00:44:55.528700 2000 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"6f997f8f42875d0c5592191313f27a28488bd1115bcb1c7abc280db6bf054afa\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-7b8bd7bfc9-9vccb" Jul 10 00:44:55.529034 kubelet[2000]: E0710 00:44:55.528725 2000 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"6f997f8f42875d0c5592191313f27a28488bd1115bcb1c7abc280db6bf054afa\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-7b8bd7bfc9-9vccb" Jul 10 00:44:55.529262 kubelet[2000]: E0710 00:44:55.528774 2000 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-apiserver-7b8bd7bfc9-9vccb_calico-apiserver(dfde559b-7bf4-4977-8d25-29403f29347b)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-apiserver-7b8bd7bfc9-9vccb_calico-apiserver(dfde559b-7bf4-4977-8d25-29403f29347b)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"6f997f8f42875d0c5592191313f27a28488bd1115bcb1c7abc280db6bf054afa\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-7b8bd7bfc9-9vccb" podUID="dfde559b-7bf4-4977-8d25-29403f29347b" Jul 10 00:44:55.529892 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-6f997f8f42875d0c5592191313f27a28488bd1115bcb1c7abc280db6bf054afa-shm.mount: Deactivated successfully. Jul 10 00:44:55.534071 env[1210]: time="2025-07-10T00:44:55.533993976Z" level=error msg="Failed to destroy network for sandbox \"db0de9ac83a9321c2e4e43df778f279fe3355d0f51d63a8fbfc25fe415710bd9\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:44:55.534401 env[1210]: time="2025-07-10T00:44:55.534371529Z" level=error msg="encountered an error cleaning up failed sandbox \"db0de9ac83a9321c2e4e43df778f279fe3355d0f51d63a8fbfc25fe415710bd9\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:44:55.534475 env[1210]: time="2025-07-10T00:44:55.534428948Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-6657b6b6b8-lqb99,Uid:9b2dff5b-398c-407e-b4b2-8a06e63be01e,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"db0de9ac83a9321c2e4e43df778f279fe3355d0f51d63a8fbfc25fe415710bd9\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:44:55.534756 kubelet[2000]: E0710 00:44:55.534687 2000 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"db0de9ac83a9321c2e4e43df778f279fe3355d0f51d63a8fbfc25fe415710bd9\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:44:55.534880 kubelet[2000]: E0710 00:44:55.534767 2000 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"db0de9ac83a9321c2e4e43df778f279fe3355d0f51d63a8fbfc25fe415710bd9\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/whisker-6657b6b6b8-lqb99" Jul 10 00:44:55.534880 kubelet[2000]: E0710 00:44:55.534806 2000 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"db0de9ac83a9321c2e4e43df778f279fe3355d0f51d63a8fbfc25fe415710bd9\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/whisker-6657b6b6b8-lqb99" Jul 10 00:44:55.534947 kubelet[2000]: E0710 00:44:55.534908 2000 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"whisker-6657b6b6b8-lqb99_calico-system(9b2dff5b-398c-407e-b4b2-8a06e63be01e)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"whisker-6657b6b6b8-lqb99_calico-system(9b2dff5b-398c-407e-b4b2-8a06e63be01e)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"db0de9ac83a9321c2e4e43df778f279fe3355d0f51d63a8fbfc25fe415710bd9\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/whisker-6657b6b6b8-lqb99" podUID="9b2dff5b-398c-407e-b4b2-8a06e63be01e" Jul 10 00:44:55.543257 env[1210]: time="2025-07-10T00:44:55.543047651Z" level=error msg="Failed to destroy network for sandbox \"317a222f2045d2f01f5e1d9fdc4c36d61e4148988f0f93c66864ab12afa61081\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:44:55.543677 env[1210]: time="2025-07-10T00:44:55.543627937Z" level=error msg="encountered an error cleaning up failed sandbox \"317a222f2045d2f01f5e1d9fdc4c36d61e4148988f0f93c66864ab12afa61081\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:44:55.543743 env[1210]: time="2025-07-10T00:44:55.543700003Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-768f4c5c69-vbht5,Uid:990e1b75-6549-43f4-a7d2-6561d110faed,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"317a222f2045d2f01f5e1d9fdc4c36d61e4148988f0f93c66864ab12afa61081\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:44:55.543984 kubelet[2000]: E0710 00:44:55.543941 2000 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"317a222f2045d2f01f5e1d9fdc4c36d61e4148988f0f93c66864ab12afa61081\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:44:55.544134 kubelet[2000]: E0710 00:44:55.544011 2000 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"317a222f2045d2f01f5e1d9fdc4c36d61e4148988f0f93c66864ab12afa61081\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/goldmane-768f4c5c69-vbht5" Jul 10 00:44:55.544134 kubelet[2000]: E0710 00:44:55.544034 2000 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"317a222f2045d2f01f5e1d9fdc4c36d61e4148988f0f93c66864ab12afa61081\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/goldmane-768f4c5c69-vbht5" Jul 10 00:44:55.544134 kubelet[2000]: E0710 00:44:55.544091 2000 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"goldmane-768f4c5c69-vbht5_calico-system(990e1b75-6549-43f4-a7d2-6561d110faed)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"goldmane-768f4c5c69-vbht5_calico-system(990e1b75-6549-43f4-a7d2-6561d110faed)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"317a222f2045d2f01f5e1d9fdc4c36d61e4148988f0f93c66864ab12afa61081\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/goldmane-768f4c5c69-vbht5" podUID="990e1b75-6549-43f4-a7d2-6561d110faed" Jul 10 00:44:55.832653 env[1210]: time="2025-07-10T00:44:55.832507553Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.30.2\"" Jul 10 00:44:55.832819 kubelet[2000]: I0710 00:44:55.832697 2000 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="e088b4fa64ce58bd102e89b3e973569ef5f7d0da6d336068407c752f60657218" Jul 10 00:44:55.833395 env[1210]: time="2025-07-10T00:44:55.833319336Z" level=info msg="StopPodSandbox for \"e088b4fa64ce58bd102e89b3e973569ef5f7d0da6d336068407c752f60657218\"" Jul 10 00:44:55.834989 kubelet[2000]: I0710 00:44:55.834952 2000 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="1607d724730937f239d497e65803ea949f79c495541c34cdbc1f84732fa42959" Jul 10 00:44:55.835497 env[1210]: time="2025-07-10T00:44:55.835469278Z" level=info msg="StopPodSandbox for \"1607d724730937f239d497e65803ea949f79c495541c34cdbc1f84732fa42959\"" Jul 10 00:44:55.837114 kubelet[2000]: I0710 00:44:55.837081 2000 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="6f997f8f42875d0c5592191313f27a28488bd1115bcb1c7abc280db6bf054afa" Jul 10 00:44:55.838105 env[1210]: time="2025-07-10T00:44:55.838062529Z" level=info msg="StopPodSandbox for \"6f997f8f42875d0c5592191313f27a28488bd1115bcb1c7abc280db6bf054afa\"" Jul 10 00:44:55.844487 kubelet[2000]: I0710 00:44:55.844215 2000 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="317a222f2045d2f01f5e1d9fdc4c36d61e4148988f0f93c66864ab12afa61081" Jul 10 00:44:55.845196 env[1210]: time="2025-07-10T00:44:55.845158744Z" level=info msg="StopPodSandbox for \"317a222f2045d2f01f5e1d9fdc4c36d61e4148988f0f93c66864ab12afa61081\"" Jul 10 00:44:55.848446 kubelet[2000]: I0710 00:44:55.846583 2000 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="a6a871d605560fe8d98e2baf90bb42a3dd9c1190ff7c730774a37205b055ca5c" Jul 10 00:44:55.848658 env[1210]: time="2025-07-10T00:44:55.847563979Z" level=info msg="StopPodSandbox for \"a6a871d605560fe8d98e2baf90bb42a3dd9c1190ff7c730774a37205b055ca5c\"" Jul 10 00:44:55.850257 kubelet[2000]: I0710 00:44:55.850214 2000 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="7ffa2b3c827ee5ba1786acf83241852e76af9ad68f8fd0a62b972cd27c7cbeea" Jul 10 00:44:55.851034 env[1210]: time="2025-07-10T00:44:55.850729619Z" level=info msg="StopPodSandbox for \"7ffa2b3c827ee5ba1786acf83241852e76af9ad68f8fd0a62b972cd27c7cbeea\"" Jul 10 00:44:55.852356 kubelet[2000]: I0710 00:44:55.852312 2000 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="b84b082488c498ee101edac9ccb074ef00c948da04c445ef1696aa4916ed2382" Jul 10 00:44:55.853085 env[1210]: time="2025-07-10T00:44:55.853052047Z" level=info msg="StopPodSandbox for \"b84b082488c498ee101edac9ccb074ef00c948da04c445ef1696aa4916ed2382\"" Jul 10 00:44:55.854678 kubelet[2000]: I0710 00:44:55.854327 2000 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="db0de9ac83a9321c2e4e43df778f279fe3355d0f51d63a8fbfc25fe415710bd9" Jul 10 00:44:55.854972 env[1210]: time="2025-07-10T00:44:55.854894268Z" level=info msg="StopPodSandbox for \"db0de9ac83a9321c2e4e43df778f279fe3355d0f51d63a8fbfc25fe415710bd9\"" Jul 10 00:44:55.881373 env[1210]: time="2025-07-10T00:44:55.881311927Z" level=error msg="StopPodSandbox for \"1607d724730937f239d497e65803ea949f79c495541c34cdbc1f84732fa42959\" failed" error="failed to destroy network for sandbox \"1607d724730937f239d497e65803ea949f79c495541c34cdbc1f84732fa42959\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:44:55.881931 kubelet[2000]: E0710 00:44:55.881879 2000 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"1607d724730937f239d497e65803ea949f79c495541c34cdbc1f84732fa42959\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="1607d724730937f239d497e65803ea949f79c495541c34cdbc1f84732fa42959" Jul 10 00:44:55.882012 kubelet[2000]: E0710 00:44:55.881967 2000 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"1607d724730937f239d497e65803ea949f79c495541c34cdbc1f84732fa42959"} Jul 10 00:44:55.882049 kubelet[2000]: E0710 00:44:55.882037 2000 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"bd35914e-3d9d-48a8-9a13-4f3678b36e0a\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"1607d724730937f239d497e65803ea949f79c495541c34cdbc1f84732fa42959\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 10 00:44:55.882141 kubelet[2000]: E0710 00:44:55.882069 2000 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"bd35914e-3d9d-48a8-9a13-4f3678b36e0a\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"1607d724730937f239d497e65803ea949f79c495541c34cdbc1f84732fa42959\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-7b8bd7bfc9-7mdpn" podUID="bd35914e-3d9d-48a8-9a13-4f3678b36e0a" Jul 10 00:44:55.882838 env[1210]: time="2025-07-10T00:44:55.882797333Z" level=error msg="StopPodSandbox for \"e088b4fa64ce58bd102e89b3e973569ef5f7d0da6d336068407c752f60657218\" failed" error="failed to destroy network for sandbox \"e088b4fa64ce58bd102e89b3e973569ef5f7d0da6d336068407c752f60657218\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:44:55.883229 kubelet[2000]: E0710 00:44:55.883091 2000 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"e088b4fa64ce58bd102e89b3e973569ef5f7d0da6d336068407c752f60657218\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="e088b4fa64ce58bd102e89b3e973569ef5f7d0da6d336068407c752f60657218" Jul 10 00:44:55.883229 kubelet[2000]: E0710 00:44:55.883125 2000 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"e088b4fa64ce58bd102e89b3e973569ef5f7d0da6d336068407c752f60657218"} Jul 10 00:44:55.883229 kubelet[2000]: E0710 00:44:55.883159 2000 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"ddc62d5a-12e9-476f-81ea-fecce29e2a58\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"e088b4fa64ce58bd102e89b3e973569ef5f7d0da6d336068407c752f60657218\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 10 00:44:55.883229 kubelet[2000]: E0710 00:44:55.883185 2000 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"ddc62d5a-12e9-476f-81ea-fecce29e2a58\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"e088b4fa64ce58bd102e89b3e973569ef5f7d0da6d336068407c752f60657218\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-6fbf996c46-f5zkt" podUID="ddc62d5a-12e9-476f-81ea-fecce29e2a58" Jul 10 00:44:55.904876 env[1210]: time="2025-07-10T00:44:55.904758203Z" level=error msg="StopPodSandbox for \"6f997f8f42875d0c5592191313f27a28488bd1115bcb1c7abc280db6bf054afa\" failed" error="failed to destroy network for sandbox \"6f997f8f42875d0c5592191313f27a28488bd1115bcb1c7abc280db6bf054afa\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:44:55.905214 kubelet[2000]: E0710 00:44:55.905163 2000 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"6f997f8f42875d0c5592191313f27a28488bd1115bcb1c7abc280db6bf054afa\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="6f997f8f42875d0c5592191313f27a28488bd1115bcb1c7abc280db6bf054afa" Jul 10 00:44:55.905330 kubelet[2000]: E0710 00:44:55.905258 2000 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"6f997f8f42875d0c5592191313f27a28488bd1115bcb1c7abc280db6bf054afa"} Jul 10 00:44:55.905370 kubelet[2000]: E0710 00:44:55.905305 2000 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"dfde559b-7bf4-4977-8d25-29403f29347b\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"6f997f8f42875d0c5592191313f27a28488bd1115bcb1c7abc280db6bf054afa\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 10 00:44:55.905451 kubelet[2000]: E0710 00:44:55.905361 2000 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"dfde559b-7bf4-4977-8d25-29403f29347b\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"6f997f8f42875d0c5592191313f27a28488bd1115bcb1c7abc280db6bf054afa\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-7b8bd7bfc9-9vccb" podUID="dfde559b-7bf4-4977-8d25-29403f29347b" Jul 10 00:44:55.914902 env[1210]: time="2025-07-10T00:44:55.914805786Z" level=error msg="StopPodSandbox for \"b84b082488c498ee101edac9ccb074ef00c948da04c445ef1696aa4916ed2382\" failed" error="failed to destroy network for sandbox \"b84b082488c498ee101edac9ccb074ef00c948da04c445ef1696aa4916ed2382\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:44:55.915560 kubelet[2000]: E0710 00:44:55.915361 2000 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"b84b082488c498ee101edac9ccb074ef00c948da04c445ef1696aa4916ed2382\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="b84b082488c498ee101edac9ccb074ef00c948da04c445ef1696aa4916ed2382" Jul 10 00:44:55.915560 kubelet[2000]: E0710 00:44:55.915445 2000 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"b84b082488c498ee101edac9ccb074ef00c948da04c445ef1696aa4916ed2382"} Jul 10 00:44:55.915560 kubelet[2000]: E0710 00:44:55.915491 2000 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"987d308c-16d4-4ea4-ad48-1ba4d53a2918\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"b84b082488c498ee101edac9ccb074ef00c948da04c445ef1696aa4916ed2382\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 10 00:44:55.915560 kubelet[2000]: E0710 00:44:55.915524 2000 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"987d308c-16d4-4ea4-ad48-1ba4d53a2918\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"b84b082488c498ee101edac9ccb074ef00c948da04c445ef1696aa4916ed2382\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-674b8bbfcf-ffnv5" podUID="987d308c-16d4-4ea4-ad48-1ba4d53a2918" Jul 10 00:44:55.923199 env[1210]: time="2025-07-10T00:44:55.923119212Z" level=error msg="StopPodSandbox for \"a6a871d605560fe8d98e2baf90bb42a3dd9c1190ff7c730774a37205b055ca5c\" failed" error="failed to destroy network for sandbox \"a6a871d605560fe8d98e2baf90bb42a3dd9c1190ff7c730774a37205b055ca5c\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:44:55.923665 kubelet[2000]: E0710 00:44:55.923602 2000 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"a6a871d605560fe8d98e2baf90bb42a3dd9c1190ff7c730774a37205b055ca5c\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="a6a871d605560fe8d98e2baf90bb42a3dd9c1190ff7c730774a37205b055ca5c" Jul 10 00:44:55.923749 kubelet[2000]: E0710 00:44:55.923669 2000 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"a6a871d605560fe8d98e2baf90bb42a3dd9c1190ff7c730774a37205b055ca5c"} Jul 10 00:44:55.923749 kubelet[2000]: E0710 00:44:55.923714 2000 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"8653425f-9c3b-4f40-adcd-044ce9ce6d7e\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"a6a871d605560fe8d98e2baf90bb42a3dd9c1190ff7c730774a37205b055ca5c\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 10 00:44:55.923901 kubelet[2000]: E0710 00:44:55.923742 2000 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"8653425f-9c3b-4f40-adcd-044ce9ce6d7e\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"a6a871d605560fe8d98e2baf90bb42a3dd9c1190ff7c730774a37205b055ca5c\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-2mgd9" podUID="8653425f-9c3b-4f40-adcd-044ce9ce6d7e" Jul 10 00:44:55.930960 env[1210]: time="2025-07-10T00:44:55.930884853Z" level=error msg="StopPodSandbox for \"7ffa2b3c827ee5ba1786acf83241852e76af9ad68f8fd0a62b972cd27c7cbeea\" failed" error="failed to destroy network for sandbox \"7ffa2b3c827ee5ba1786acf83241852e76af9ad68f8fd0a62b972cd27c7cbeea\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:44:55.931630 kubelet[2000]: E0710 00:44:55.931440 2000 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"7ffa2b3c827ee5ba1786acf83241852e76af9ad68f8fd0a62b972cd27c7cbeea\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="7ffa2b3c827ee5ba1786acf83241852e76af9ad68f8fd0a62b972cd27c7cbeea" Jul 10 00:44:55.931630 kubelet[2000]: E0710 00:44:55.931506 2000 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"7ffa2b3c827ee5ba1786acf83241852e76af9ad68f8fd0a62b972cd27c7cbeea"} Jul 10 00:44:55.931630 kubelet[2000]: E0710 00:44:55.931557 2000 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"d4134d3e-309e-4c16-a93c-0185dfd5a718\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"7ffa2b3c827ee5ba1786acf83241852e76af9ad68f8fd0a62b972cd27c7cbeea\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 10 00:44:55.931630 kubelet[2000]: E0710 00:44:55.931587 2000 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"d4134d3e-309e-4c16-a93c-0185dfd5a718\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"7ffa2b3c827ee5ba1786acf83241852e76af9ad68f8fd0a62b972cd27c7cbeea\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-674b8bbfcf-dgqq9" podUID="d4134d3e-309e-4c16-a93c-0185dfd5a718" Jul 10 00:44:55.932622 env[1210]: time="2025-07-10T00:44:55.932569696Z" level=error msg="StopPodSandbox for \"317a222f2045d2f01f5e1d9fdc4c36d61e4148988f0f93c66864ab12afa61081\" failed" error="failed to destroy network for sandbox \"317a222f2045d2f01f5e1d9fdc4c36d61e4148988f0f93c66864ab12afa61081\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:44:55.932782 kubelet[2000]: E0710 00:44:55.932752 2000 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"317a222f2045d2f01f5e1d9fdc4c36d61e4148988f0f93c66864ab12afa61081\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="317a222f2045d2f01f5e1d9fdc4c36d61e4148988f0f93c66864ab12afa61081" Jul 10 00:44:55.932869 kubelet[2000]: E0710 00:44:55.932790 2000 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"317a222f2045d2f01f5e1d9fdc4c36d61e4148988f0f93c66864ab12afa61081"} Jul 10 00:44:55.932869 kubelet[2000]: E0710 00:44:55.932817 2000 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"990e1b75-6549-43f4-a7d2-6561d110faed\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"317a222f2045d2f01f5e1d9fdc4c36d61e4148988f0f93c66864ab12afa61081\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 10 00:44:55.932975 kubelet[2000]: E0710 00:44:55.932869 2000 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"990e1b75-6549-43f4-a7d2-6561d110faed\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"317a222f2045d2f01f5e1d9fdc4c36d61e4148988f0f93c66864ab12afa61081\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/goldmane-768f4c5c69-vbht5" podUID="990e1b75-6549-43f4-a7d2-6561d110faed" Jul 10 00:44:55.938117 env[1210]: time="2025-07-10T00:44:55.938054327Z" level=error msg="StopPodSandbox for \"db0de9ac83a9321c2e4e43df778f279fe3355d0f51d63a8fbfc25fe415710bd9\" failed" error="failed to destroy network for sandbox \"db0de9ac83a9321c2e4e43df778f279fe3355d0f51d63a8fbfc25fe415710bd9\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:44:55.938326 kubelet[2000]: E0710 00:44:55.938289 2000 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"db0de9ac83a9321c2e4e43df778f279fe3355d0f51d63a8fbfc25fe415710bd9\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="db0de9ac83a9321c2e4e43df778f279fe3355d0f51d63a8fbfc25fe415710bd9" Jul 10 00:44:55.938377 kubelet[2000]: E0710 00:44:55.938340 2000 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"db0de9ac83a9321c2e4e43df778f279fe3355d0f51d63a8fbfc25fe415710bd9"} Jul 10 00:44:55.938417 kubelet[2000]: E0710 00:44:55.938387 2000 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"9b2dff5b-398c-407e-b4b2-8a06e63be01e\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"db0de9ac83a9321c2e4e43df778f279fe3355d0f51d63a8fbfc25fe415710bd9\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 10 00:44:55.938479 kubelet[2000]: E0710 00:44:55.938418 2000 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"9b2dff5b-398c-407e-b4b2-8a06e63be01e\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"db0de9ac83a9321c2e4e43df778f279fe3355d0f51d63a8fbfc25fe415710bd9\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/whisker-6657b6b6b8-lqb99" podUID="9b2dff5b-398c-407e-b4b2-8a06e63be01e" Jul 10 00:44:56.479902 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-db0de9ac83a9321c2e4e43df778f279fe3355d0f51d63a8fbfc25fe415710bd9-shm.mount: Deactivated successfully. Jul 10 00:44:56.480013 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-317a222f2045d2f01f5e1d9fdc4c36d61e4148988f0f93c66864ab12afa61081-shm.mount: Deactivated successfully. Jul 10 00:45:02.873946 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3385675032.mount: Deactivated successfully. Jul 10 00:45:05.143637 env[1210]: time="2025-07-10T00:45:05.143575082Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:45:05.145776 env[1210]: time="2025-07-10T00:45:05.145703689Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:cc52550d767f73458fee2ee68db9db5de30d175e8fa4569ebdb43610127b6d20,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:45:05.147237 env[1210]: time="2025-07-10T00:45:05.147206505Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/node:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:45:05.148620 env[1210]: time="2025-07-10T00:45:05.148582042Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node@sha256:e94d49349cc361ef2216d27dda4a097278984d778279f66e79b0616c827c6760,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:45:05.148983 env[1210]: time="2025-07-10T00:45:05.148936781Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.30.2\" returns image reference \"sha256:cc52550d767f73458fee2ee68db9db5de30d175e8fa4569ebdb43610127b6d20\"" Jul 10 00:45:05.160514 env[1210]: time="2025-07-10T00:45:05.160471951Z" level=info msg="CreateContainer within sandbox \"f37b37334c78d4b971e053eead5a85adfc7d06e1deed44339c06b7681327d58b\" for container &ContainerMetadata{Name:calico-node,Attempt:0,}" Jul 10 00:45:05.176239 env[1210]: time="2025-07-10T00:45:05.176189346Z" level=info msg="CreateContainer within sandbox \"f37b37334c78d4b971e053eead5a85adfc7d06e1deed44339c06b7681327d58b\" for &ContainerMetadata{Name:calico-node,Attempt:0,} returns container id \"f1f49ec6255199217afe33c47bdfa1f5c25ebeea2654f65e82a32942bf2b890c\"" Jul 10 00:45:05.176891 env[1210]: time="2025-07-10T00:45:05.176822330Z" level=info msg="StartContainer for \"f1f49ec6255199217afe33c47bdfa1f5c25ebeea2654f65e82a32942bf2b890c\"" Jul 10 00:45:05.192807 systemd[1]: Started cri-containerd-f1f49ec6255199217afe33c47bdfa1f5c25ebeea2654f65e82a32942bf2b890c.scope. Jul 10 00:45:05.208000 audit[3205]: AVC avc: denied { perfmon } for pid=3205 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:05.210532 kernel: kauditd_printk_skb: 40 callbacks suppressed Jul 10 00:45:05.210585 kernel: audit: type=1400 audit(1752108305.208:998): avc: denied { perfmon } for pid=3205 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:05.208000 audit[3205]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c00014d6b0 a2=3c a3=7f894c076c28 items=0 ppid=2502 pid=3205 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:05.217700 kernel: audit: type=1300 audit(1752108305.208:998): arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c00014d6b0 a2=3c a3=7f894c076c28 items=0 ppid=2502 pid=3205 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:05.217763 kernel: audit: type=1327 audit(1752108305.208:998): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6631663439656336323535313939323137616665333363343762646661 Jul 10 00:45:05.208000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6631663439656336323535313939323137616665333363343762646661 Jul 10 00:45:05.209000 audit[3205]: AVC avc: denied { bpf } for pid=3205 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:05.224365 kernel: audit: type=1400 audit(1752108305.209:999): avc: denied { bpf } for pid=3205 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:05.224412 kernel: audit: type=1400 audit(1752108305.209:999): avc: denied { bpf } for pid=3205 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:05.209000 audit[3205]: AVC avc: denied { bpf } for pid=3205 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:05.209000 audit[3205]: AVC avc: denied { bpf } for pid=3205 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:05.229992 kernel: audit: type=1400 audit(1752108305.209:999): avc: denied { bpf } for pid=3205 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:05.230042 kernel: audit: type=1400 audit(1752108305.209:999): avc: denied { perfmon } for pid=3205 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:05.209000 audit[3205]: AVC avc: denied { perfmon } for pid=3205 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:05.233499 kernel: audit: type=1400 audit(1752108305.209:999): avc: denied { perfmon } for pid=3205 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:05.209000 audit[3205]: AVC avc: denied { perfmon } for pid=3205 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:05.238511 kernel: audit: type=1400 audit(1752108305.209:999): avc: denied { perfmon } for pid=3205 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:05.209000 audit[3205]: AVC avc: denied { perfmon } for pid=3205 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:05.209000 audit[3205]: AVC avc: denied { perfmon } for pid=3205 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:05.241610 kernel: audit: type=1400 audit(1752108305.209:999): avc: denied { perfmon } for pid=3205 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:05.209000 audit[3205]: AVC avc: denied { perfmon } for pid=3205 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:05.209000 audit[3205]: AVC avc: denied { bpf } for pid=3205 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:05.209000 audit[3205]: AVC avc: denied { bpf } for pid=3205 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:05.209000 audit: BPF prog-id=133 op=LOAD Jul 10 00:45:05.209000 audit[3205]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c00014d9d8 a2=78 a3=c0001bea28 items=0 ppid=2502 pid=3205 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:05.209000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6631663439656336323535313939323137616665333363343762646661 Jul 10 00:45:05.216000 audit[3205]: AVC avc: denied { bpf } for pid=3205 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:05.216000 audit[3205]: AVC avc: denied { bpf } for pid=3205 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:05.216000 audit[3205]: AVC avc: denied { perfmon } for pid=3205 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:05.216000 audit[3205]: AVC avc: denied { perfmon } for pid=3205 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:05.216000 audit[3205]: AVC avc: denied { perfmon } for pid=3205 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:05.216000 audit[3205]: AVC avc: denied { perfmon } for pid=3205 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:05.216000 audit[3205]: AVC avc: denied { perfmon } for pid=3205 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:05.216000 audit[3205]: AVC avc: denied { bpf } for pid=3205 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:05.216000 audit[3205]: AVC avc: denied { bpf } for pid=3205 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:05.216000 audit: BPF prog-id=134 op=LOAD Jul 10 00:45:05.216000 audit[3205]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c00014d770 a2=78 a3=c0001bea78 items=0 ppid=2502 pid=3205 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:05.216000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6631663439656336323535313939323137616665333363343762646661 Jul 10 00:45:05.223000 audit: BPF prog-id=134 op=UNLOAD Jul 10 00:45:05.223000 audit: BPF prog-id=133 op=UNLOAD Jul 10 00:45:05.223000 audit[3205]: AVC avc: denied { bpf } for pid=3205 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:05.223000 audit[3205]: AVC avc: denied { bpf } for pid=3205 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:05.223000 audit[3205]: AVC avc: denied { bpf } for pid=3205 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:05.223000 audit[3205]: AVC avc: denied { perfmon } for pid=3205 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:05.223000 audit[3205]: AVC avc: denied { perfmon } for pid=3205 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:05.223000 audit[3205]: AVC avc: denied { perfmon } for pid=3205 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:05.223000 audit[3205]: AVC avc: denied { perfmon } for pid=3205 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:05.223000 audit[3205]: AVC avc: denied { perfmon } for pid=3205 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:05.223000 audit[3205]: AVC avc: denied { bpf } for pid=3205 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:05.223000 audit[3205]: AVC avc: denied { bpf } for pid=3205 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:05.223000 audit: BPF prog-id=135 op=LOAD Jul 10 00:45:05.223000 audit[3205]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c00014dc30 a2=78 a3=c0001beb08 items=0 ppid=2502 pid=3205 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:05.223000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6631663439656336323535313939323137616665333363343762646661 Jul 10 00:45:05.242963 env[1210]: time="2025-07-10T00:45:05.242804761Z" level=info msg="StartContainer for \"f1f49ec6255199217afe33c47bdfa1f5c25ebeea2654f65e82a32942bf2b890c\" returns successfully" Jul 10 00:45:05.324247 kernel: wireguard: WireGuard 1.0.0 loaded. See www.wireguard.com for information. Jul 10 00:45:05.324494 kernel: wireguard: Copyright (C) 2015-2019 Jason A. Donenfeld . All Rights Reserved. Jul 10 00:45:05.412808 env[1210]: time="2025-07-10T00:45:05.412659000Z" level=info msg="StopPodSandbox for \"db0de9ac83a9321c2e4e43df778f279fe3355d0f51d63a8fbfc25fe415710bd9\"" Jul 10 00:45:05.780894 env[1210]: 2025-07-10 00:45:05.722 [INFO][3264] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="db0de9ac83a9321c2e4e43df778f279fe3355d0f51d63a8fbfc25fe415710bd9" Jul 10 00:45:05.780894 env[1210]: 2025-07-10 00:45:05.723 [INFO][3264] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="db0de9ac83a9321c2e4e43df778f279fe3355d0f51d63a8fbfc25fe415710bd9" iface="eth0" netns="/var/run/netns/cni-49b0dd13-67f6-67f8-9cf6-134d329ec248" Jul 10 00:45:05.780894 env[1210]: 2025-07-10 00:45:05.723 [INFO][3264] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="db0de9ac83a9321c2e4e43df778f279fe3355d0f51d63a8fbfc25fe415710bd9" iface="eth0" netns="/var/run/netns/cni-49b0dd13-67f6-67f8-9cf6-134d329ec248" Jul 10 00:45:05.780894 env[1210]: 2025-07-10 00:45:05.723 [INFO][3264] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="db0de9ac83a9321c2e4e43df778f279fe3355d0f51d63a8fbfc25fe415710bd9" iface="eth0" netns="/var/run/netns/cni-49b0dd13-67f6-67f8-9cf6-134d329ec248" Jul 10 00:45:05.780894 env[1210]: 2025-07-10 00:45:05.723 [INFO][3264] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="db0de9ac83a9321c2e4e43df778f279fe3355d0f51d63a8fbfc25fe415710bd9" Jul 10 00:45:05.780894 env[1210]: 2025-07-10 00:45:05.723 [INFO][3264] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="db0de9ac83a9321c2e4e43df778f279fe3355d0f51d63a8fbfc25fe415710bd9" Jul 10 00:45:05.780894 env[1210]: 2025-07-10 00:45:05.770 [INFO][3272] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="db0de9ac83a9321c2e4e43df778f279fe3355d0f51d63a8fbfc25fe415710bd9" HandleID="k8s-pod-network.db0de9ac83a9321c2e4e43df778f279fe3355d0f51d63a8fbfc25fe415710bd9" Workload="localhost-k8s-whisker--6657b6b6b8--lqb99-eth0" Jul 10 00:45:05.780894 env[1210]: 2025-07-10 00:45:05.770 [INFO][3272] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:45:05.780894 env[1210]: 2025-07-10 00:45:05.770 [INFO][3272] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:45:05.780894 env[1210]: 2025-07-10 00:45:05.776 [WARNING][3272] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="db0de9ac83a9321c2e4e43df778f279fe3355d0f51d63a8fbfc25fe415710bd9" HandleID="k8s-pod-network.db0de9ac83a9321c2e4e43df778f279fe3355d0f51d63a8fbfc25fe415710bd9" Workload="localhost-k8s-whisker--6657b6b6b8--lqb99-eth0" Jul 10 00:45:05.780894 env[1210]: 2025-07-10 00:45:05.776 [INFO][3272] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="db0de9ac83a9321c2e4e43df778f279fe3355d0f51d63a8fbfc25fe415710bd9" HandleID="k8s-pod-network.db0de9ac83a9321c2e4e43df778f279fe3355d0f51d63a8fbfc25fe415710bd9" Workload="localhost-k8s-whisker--6657b6b6b8--lqb99-eth0" Jul 10 00:45:05.780894 env[1210]: 2025-07-10 00:45:05.777 [INFO][3272] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:45:05.780894 env[1210]: 2025-07-10 00:45:05.779 [INFO][3264] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="db0de9ac83a9321c2e4e43df778f279fe3355d0f51d63a8fbfc25fe415710bd9" Jul 10 00:45:05.781490 env[1210]: time="2025-07-10T00:45:05.781431575Z" level=info msg="TearDown network for sandbox \"db0de9ac83a9321c2e4e43df778f279fe3355d0f51d63a8fbfc25fe415710bd9\" successfully" Jul 10 00:45:05.781490 env[1210]: time="2025-07-10T00:45:05.781472903Z" level=info msg="StopPodSandbox for \"db0de9ac83a9321c2e4e43df778f279fe3355d0f51d63a8fbfc25fe415710bd9\" returns successfully" Jul 10 00:45:05.882672 kubelet[2000]: I0710 00:45:05.882627 2000 reconciler_common.go:162] "operationExecutor.UnmountVolume started for volume \"kube-api-access-trqrd\" (UniqueName: \"kubernetes.io/projected/9b2dff5b-398c-407e-b4b2-8a06e63be01e-kube-api-access-trqrd\") pod \"9b2dff5b-398c-407e-b4b2-8a06e63be01e\" (UID: \"9b2dff5b-398c-407e-b4b2-8a06e63be01e\") " Jul 10 00:45:05.882672 kubelet[2000]: I0710 00:45:05.882679 2000 reconciler_common.go:162] "operationExecutor.UnmountVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/9b2dff5b-398c-407e-b4b2-8a06e63be01e-whisker-ca-bundle\") pod \"9b2dff5b-398c-407e-b4b2-8a06e63be01e\" (UID: \"9b2dff5b-398c-407e-b4b2-8a06e63be01e\") " Jul 10 00:45:05.883218 kubelet[2000]: I0710 00:45:05.882697 2000 reconciler_common.go:162] "operationExecutor.UnmountVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/9b2dff5b-398c-407e-b4b2-8a06e63be01e-whisker-backend-key-pair\") pod \"9b2dff5b-398c-407e-b4b2-8a06e63be01e\" (UID: \"9b2dff5b-398c-407e-b4b2-8a06e63be01e\") " Jul 10 00:45:05.883367 kubelet[2000]: I0710 00:45:05.883323 2000 operation_generator.go:781] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/9b2dff5b-398c-407e-b4b2-8a06e63be01e-whisker-ca-bundle" (OuterVolumeSpecName: "whisker-ca-bundle") pod "9b2dff5b-398c-407e-b4b2-8a06e63be01e" (UID: "9b2dff5b-398c-407e-b4b2-8a06e63be01e"). InnerVolumeSpecName "whisker-ca-bundle". PluginName "kubernetes.io/configmap", VolumeGIDValue "" Jul 10 00:45:05.886404 kubelet[2000]: I0710 00:45:05.886352 2000 operation_generator.go:781] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/9b2dff5b-398c-407e-b4b2-8a06e63be01e-kube-api-access-trqrd" (OuterVolumeSpecName: "kube-api-access-trqrd") pod "9b2dff5b-398c-407e-b4b2-8a06e63be01e" (UID: "9b2dff5b-398c-407e-b4b2-8a06e63be01e"). InnerVolumeSpecName "kube-api-access-trqrd". PluginName "kubernetes.io/projected", VolumeGIDValue "" Jul 10 00:45:05.886404 kubelet[2000]: I0710 00:45:05.886385 2000 operation_generator.go:781] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/9b2dff5b-398c-407e-b4b2-8a06e63be01e-whisker-backend-key-pair" (OuterVolumeSpecName: "whisker-backend-key-pair") pod "9b2dff5b-398c-407e-b4b2-8a06e63be01e" (UID: "9b2dff5b-398c-407e-b4b2-8a06e63be01e"). InnerVolumeSpecName "whisker-backend-key-pair". PluginName "kubernetes.io/secret", VolumeGIDValue "" Jul 10 00:45:05.891215 kubelet[2000]: I0710 00:45:05.890405 2000 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-node-mw7f4" podStartSLOduration=1.309283503 podStartE2EDuration="23.890388172s" podCreationTimestamp="2025-07-10 00:44:42 +0000 UTC" firstStartedPulling="2025-07-10 00:44:42.56859951 +0000 UTC m=+18.974555145" lastFinishedPulling="2025-07-10 00:45:05.149704179 +0000 UTC m=+41.555659814" observedRunningTime="2025-07-10 00:45:05.888878643 +0000 UTC m=+42.294834308" watchObservedRunningTime="2025-07-10 00:45:05.890388172 +0000 UTC m=+42.296343797" Jul 10 00:45:05.983401 kubelet[2000]: I0710 00:45:05.983342 2000 reconciler_common.go:299] "Volume detached for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/9b2dff5b-398c-407e-b4b2-8a06e63be01e-whisker-ca-bundle\") on node \"localhost\" DevicePath \"\"" Jul 10 00:45:05.983401 kubelet[2000]: I0710 00:45:05.983369 2000 reconciler_common.go:299] "Volume detached for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/9b2dff5b-398c-407e-b4b2-8a06e63be01e-whisker-backend-key-pair\") on node \"localhost\" DevicePath \"\"" Jul 10 00:45:05.983401 kubelet[2000]: I0710 00:45:05.983381 2000 reconciler_common.go:299] "Volume detached for volume \"kube-api-access-trqrd\" (UniqueName: \"kubernetes.io/projected/9b2dff5b-398c-407e-b4b2-8a06e63be01e-kube-api-access-trqrd\") on node \"localhost\" DevicePath \"\"" Jul 10 00:45:06.154830 systemd[1]: run-netns-cni\x2d49b0dd13\x2d67f6\x2d67f8\x2d9cf6\x2d134d329ec248.mount: Deactivated successfully. Jul 10 00:45:06.154926 systemd[1]: var-lib-kubelet-pods-9b2dff5b\x2d398c\x2d407e\x2db4b2\x2d8a06e63be01e-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2dtrqrd.mount: Deactivated successfully. Jul 10 00:45:06.154985 systemd[1]: var-lib-kubelet-pods-9b2dff5b\x2d398c\x2d407e\x2db4b2\x2d8a06e63be01e-volumes-kubernetes.io\x7esecret-whisker\x2dbackend\x2dkey\x2dpair.mount: Deactivated successfully. Jul 10 00:45:06.177067 systemd[1]: Removed slice kubepods-besteffort-pod9b2dff5b_398c_407e_b4b2_8a06e63be01e.slice. Jul 10 00:45:06.224918 systemd[1]: Created slice kubepods-besteffort-pod016327fb_9cdf_427b_b736_19d1cc12e2c0.slice. Jul 10 00:45:06.285484 kubelet[2000]: I0710 00:45:06.285406 2000 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/016327fb-9cdf-427b-b736-19d1cc12e2c0-whisker-backend-key-pair\") pod \"whisker-57dc5c8b4-pkht6\" (UID: \"016327fb-9cdf-427b-b736-19d1cc12e2c0\") " pod="calico-system/whisker-57dc5c8b4-pkht6" Jul 10 00:45:06.285484 kubelet[2000]: I0710 00:45:06.285473 2000 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-bwcq5\" (UniqueName: \"kubernetes.io/projected/016327fb-9cdf-427b-b736-19d1cc12e2c0-kube-api-access-bwcq5\") pod \"whisker-57dc5c8b4-pkht6\" (UID: \"016327fb-9cdf-427b-b736-19d1cc12e2c0\") " pod="calico-system/whisker-57dc5c8b4-pkht6" Jul 10 00:45:06.285737 kubelet[2000]: I0710 00:45:06.285500 2000 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/016327fb-9cdf-427b-b736-19d1cc12e2c0-whisker-ca-bundle\") pod \"whisker-57dc5c8b4-pkht6\" (UID: \"016327fb-9cdf-427b-b736-19d1cc12e2c0\") " pod="calico-system/whisker-57dc5c8b4-pkht6" Jul 10 00:45:06.527433 env[1210]: time="2025-07-10T00:45:06.527307367Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-57dc5c8b4-pkht6,Uid:016327fb-9cdf-427b-b736-19d1cc12e2c0,Namespace:calico-system,Attempt:0,}" Jul 10 00:45:06.630216 systemd-networkd[1027]: calic50fadf0416: Link UP Jul 10 00:45:06.632511 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Jul 10 00:45:06.632656 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calic50fadf0416: link becomes ready Jul 10 00:45:06.632922 systemd-networkd[1027]: calic50fadf0416: Gained carrier Jul 10 00:45:06.646964 env[1210]: 2025-07-10 00:45:06.558 [INFO][3317] cni-plugin/utils.go 100: File /var/lib/calico/mtu does not exist Jul 10 00:45:06.646964 env[1210]: 2025-07-10 00:45:06.568 [INFO][3317] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-whisker--57dc5c8b4--pkht6-eth0 whisker-57dc5c8b4- calico-system 016327fb-9cdf-427b-b736-19d1cc12e2c0 927 0 2025-07-10 00:45:06 +0000 UTC map[app.kubernetes.io/name:whisker k8s-app:whisker pod-template-hash:57dc5c8b4 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:whisker] map[] [] [] []} {k8s localhost whisker-57dc5c8b4-pkht6 eth0 whisker [] [] [kns.calico-system ksa.calico-system.whisker] calic50fadf0416 [] [] }} ContainerID="b559b797c2608820678ed5a66519d0b090ac69eaa3e5795ac2b1af11ee396b61" Namespace="calico-system" Pod="whisker-57dc5c8b4-pkht6" WorkloadEndpoint="localhost-k8s-whisker--57dc5c8b4--pkht6-" Jul 10 00:45:06.646964 env[1210]: 2025-07-10 00:45:06.568 [INFO][3317] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="b559b797c2608820678ed5a66519d0b090ac69eaa3e5795ac2b1af11ee396b61" Namespace="calico-system" Pod="whisker-57dc5c8b4-pkht6" WorkloadEndpoint="localhost-k8s-whisker--57dc5c8b4--pkht6-eth0" Jul 10 00:45:06.646964 env[1210]: 2025-07-10 00:45:06.587 [INFO][3333] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="b559b797c2608820678ed5a66519d0b090ac69eaa3e5795ac2b1af11ee396b61" HandleID="k8s-pod-network.b559b797c2608820678ed5a66519d0b090ac69eaa3e5795ac2b1af11ee396b61" Workload="localhost-k8s-whisker--57dc5c8b4--pkht6-eth0" Jul 10 00:45:06.646964 env[1210]: 2025-07-10 00:45:06.587 [INFO][3333] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="b559b797c2608820678ed5a66519d0b090ac69eaa3e5795ac2b1af11ee396b61" HandleID="k8s-pod-network.b559b797c2608820678ed5a66519d0b090ac69eaa3e5795ac2b1af11ee396b61" Workload="localhost-k8s-whisker--57dc5c8b4--pkht6-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc00020b760), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"whisker-57dc5c8b4-pkht6", "timestamp":"2025-07-10 00:45:06.587153739 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 10 00:45:06.646964 env[1210]: 2025-07-10 00:45:06.587 [INFO][3333] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:45:06.646964 env[1210]: 2025-07-10 00:45:06.587 [INFO][3333] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:45:06.646964 env[1210]: 2025-07-10 00:45:06.587 [INFO][3333] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 10 00:45:06.646964 env[1210]: 2025-07-10 00:45:06.595 [INFO][3333] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.b559b797c2608820678ed5a66519d0b090ac69eaa3e5795ac2b1af11ee396b61" host="localhost" Jul 10 00:45:06.646964 env[1210]: 2025-07-10 00:45:06.600 [INFO][3333] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 10 00:45:06.646964 env[1210]: 2025-07-10 00:45:06.605 [INFO][3333] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 10 00:45:06.646964 env[1210]: 2025-07-10 00:45:06.607 [INFO][3333] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 10 00:45:06.646964 env[1210]: 2025-07-10 00:45:06.609 [INFO][3333] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 10 00:45:06.646964 env[1210]: 2025-07-10 00:45:06.609 [INFO][3333] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.b559b797c2608820678ed5a66519d0b090ac69eaa3e5795ac2b1af11ee396b61" host="localhost" Jul 10 00:45:06.646964 env[1210]: 2025-07-10 00:45:06.611 [INFO][3333] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.b559b797c2608820678ed5a66519d0b090ac69eaa3e5795ac2b1af11ee396b61 Jul 10 00:45:06.646964 env[1210]: 2025-07-10 00:45:06.614 [INFO][3333] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.b559b797c2608820678ed5a66519d0b090ac69eaa3e5795ac2b1af11ee396b61" host="localhost" Jul 10 00:45:06.646964 env[1210]: 2025-07-10 00:45:06.619 [INFO][3333] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.129/26] block=192.168.88.128/26 handle="k8s-pod-network.b559b797c2608820678ed5a66519d0b090ac69eaa3e5795ac2b1af11ee396b61" host="localhost" Jul 10 00:45:06.646964 env[1210]: 2025-07-10 00:45:06.619 [INFO][3333] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.129/26] handle="k8s-pod-network.b559b797c2608820678ed5a66519d0b090ac69eaa3e5795ac2b1af11ee396b61" host="localhost" Jul 10 00:45:06.646964 env[1210]: 2025-07-10 00:45:06.619 [INFO][3333] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:45:06.646964 env[1210]: 2025-07-10 00:45:06.619 [INFO][3333] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.129/26] IPv6=[] ContainerID="b559b797c2608820678ed5a66519d0b090ac69eaa3e5795ac2b1af11ee396b61" HandleID="k8s-pod-network.b559b797c2608820678ed5a66519d0b090ac69eaa3e5795ac2b1af11ee396b61" Workload="localhost-k8s-whisker--57dc5c8b4--pkht6-eth0" Jul 10 00:45:06.647553 env[1210]: 2025-07-10 00:45:06.622 [INFO][3317] cni-plugin/k8s.go 418: Populated endpoint ContainerID="b559b797c2608820678ed5a66519d0b090ac69eaa3e5795ac2b1af11ee396b61" Namespace="calico-system" Pod="whisker-57dc5c8b4-pkht6" WorkloadEndpoint="localhost-k8s-whisker--57dc5c8b4--pkht6-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-whisker--57dc5c8b4--pkht6-eth0", GenerateName:"whisker-57dc5c8b4-", Namespace:"calico-system", SelfLink:"", UID:"016327fb-9cdf-427b-b736-19d1cc12e2c0", ResourceVersion:"927", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 45, 6, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"whisker", "k8s-app":"whisker", "pod-template-hash":"57dc5c8b4", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"whisker"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"whisker-57dc5c8b4-pkht6", Endpoint:"eth0", ServiceAccountName:"whisker", IPNetworks:[]string{"192.168.88.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.whisker"}, InterfaceName:"calic50fadf0416", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:45:06.647553 env[1210]: 2025-07-10 00:45:06.622 [INFO][3317] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.129/32] ContainerID="b559b797c2608820678ed5a66519d0b090ac69eaa3e5795ac2b1af11ee396b61" Namespace="calico-system" Pod="whisker-57dc5c8b4-pkht6" WorkloadEndpoint="localhost-k8s-whisker--57dc5c8b4--pkht6-eth0" Jul 10 00:45:06.647553 env[1210]: 2025-07-10 00:45:06.622 [INFO][3317] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calic50fadf0416 ContainerID="b559b797c2608820678ed5a66519d0b090ac69eaa3e5795ac2b1af11ee396b61" Namespace="calico-system" Pod="whisker-57dc5c8b4-pkht6" WorkloadEndpoint="localhost-k8s-whisker--57dc5c8b4--pkht6-eth0" Jul 10 00:45:06.647553 env[1210]: 2025-07-10 00:45:06.632 [INFO][3317] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="b559b797c2608820678ed5a66519d0b090ac69eaa3e5795ac2b1af11ee396b61" Namespace="calico-system" Pod="whisker-57dc5c8b4-pkht6" WorkloadEndpoint="localhost-k8s-whisker--57dc5c8b4--pkht6-eth0" Jul 10 00:45:06.647553 env[1210]: 2025-07-10 00:45:06.633 [INFO][3317] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="b559b797c2608820678ed5a66519d0b090ac69eaa3e5795ac2b1af11ee396b61" Namespace="calico-system" Pod="whisker-57dc5c8b4-pkht6" WorkloadEndpoint="localhost-k8s-whisker--57dc5c8b4--pkht6-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-whisker--57dc5c8b4--pkht6-eth0", GenerateName:"whisker-57dc5c8b4-", Namespace:"calico-system", SelfLink:"", UID:"016327fb-9cdf-427b-b736-19d1cc12e2c0", ResourceVersion:"927", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 45, 6, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"whisker", "k8s-app":"whisker", "pod-template-hash":"57dc5c8b4", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"whisker"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"b559b797c2608820678ed5a66519d0b090ac69eaa3e5795ac2b1af11ee396b61", Pod:"whisker-57dc5c8b4-pkht6", Endpoint:"eth0", ServiceAccountName:"whisker", IPNetworks:[]string{"192.168.88.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.whisker"}, InterfaceName:"calic50fadf0416", MAC:"56:f1:08:f3:53:24", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:45:06.647553 env[1210]: 2025-07-10 00:45:06.643 [INFO][3317] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="b559b797c2608820678ed5a66519d0b090ac69eaa3e5795ac2b1af11ee396b61" Namespace="calico-system" Pod="whisker-57dc5c8b4-pkht6" WorkloadEndpoint="localhost-k8s-whisker--57dc5c8b4--pkht6-eth0" Jul 10 00:45:06.909158 env[1210]: time="2025-07-10T00:45:06.909058406Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 10 00:45:06.909400 env[1210]: time="2025-07-10T00:45:06.909359964Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 10 00:45:06.909531 env[1210]: time="2025-07-10T00:45:06.909505199Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 10 00:45:06.909819 env[1210]: time="2025-07-10T00:45:06.909780949Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/b559b797c2608820678ed5a66519d0b090ac69eaa3e5795ac2b1af11ee396b61 pid=3417 runtime=io.containerd.runc.v2 Jul 10 00:45:06.909000 audit[3416]: AVC avc: denied { write } for pid=3416 comm="tee" name="fd" dev="proc" ino=25908 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 10 00:45:06.909000 audit[3416]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffea580a7f1 a2=241 a3=1b6 items=1 ppid=3356 pid=3416 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:06.909000 audit: CWD cwd="/etc/service/enabled/confd/log" Jul 10 00:45:06.909000 audit: PATH item=0 name="/dev/fd/63" inode=25899 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:45:06.909000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 10 00:45:06.910000 audit[3406]: AVC avc: denied { write } for pid=3406 comm="tee" name="fd" dev="proc" ino=25127 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 10 00:45:06.910000 audit[3406]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7fffe071c7f1 a2=241 a3=1b6 items=1 ppid=3367 pid=3406 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:06.910000 audit: CWD cwd="/etc/service/enabled/bird6/log" Jul 10 00:45:06.910000 audit: PATH item=0 name="/dev/fd/63" inode=23480 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:45:06.910000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 10 00:45:06.911000 audit[3419]: AVC avc: denied { write } for pid=3419 comm="tee" name="fd" dev="proc" ino=25914 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 10 00:45:06.911000 audit[3419]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7fff2c2f07f2 a2=241 a3=1b6 items=1 ppid=3357 pid=3419 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:06.911000 audit: CWD cwd="/etc/service/enabled/bird/log" Jul 10 00:45:06.911000 audit: PATH item=0 name="/dev/fd/63" inode=25900 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:45:06.911000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 10 00:45:06.915000 audit[3436]: AVC avc: denied { write } for pid=3436 comm="tee" name="fd" dev="proc" ino=24272 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 10 00:45:06.915000 audit[3436]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffc5bdda7e1 a2=241 a3=1b6 items=1 ppid=3360 pid=3436 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:06.915000 audit: CWD cwd="/etc/service/enabled/allocate-tunnel-addrs/log" Jul 10 00:45:06.915000 audit: PATH item=0 name="/dev/fd/63" inode=23490 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:45:06.915000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 10 00:45:06.927000 audit[3455]: AVC avc: denied { write } for pid=3455 comm="tee" name="fd" dev="proc" ino=25134 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 10 00:45:06.927000 audit[3455]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7fff7af757f3 a2=241 a3=1b6 items=1 ppid=3364 pid=3455 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:06.927000 audit: CWD cwd="/etc/service/enabled/cni/log" Jul 10 00:45:06.927000 audit: PATH item=0 name="/dev/fd/63" inode=25920 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:45:06.927000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 10 00:45:06.938000 audit[3465]: AVC avc: denied { write } for pid=3465 comm="tee" name="fd" dev="proc" ino=25925 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 10 00:45:06.938000 audit[3465]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffc9dfa07f1 a2=241 a3=1b6 items=1 ppid=3372 pid=3465 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:06.938000 audit: CWD cwd="/etc/service/enabled/felix/log" Jul 10 00:45:06.938000 audit: PATH item=0 name="/dev/fd/63" inode=25922 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:45:06.938000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 10 00:45:06.944000 audit[3461]: AVC avc: denied { write } for pid=3461 comm="tee" name="fd" dev="proc" ino=23506 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 10 00:45:06.944000 audit[3461]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffeb70237e2 a2=241 a3=1b6 items=1 ppid=3370 pid=3461 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:06.944000 audit: CWD cwd="/etc/service/enabled/node-status-reporter/log" Jul 10 00:45:06.944000 audit: PATH item=0 name="/dev/fd/63" inode=23493 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:45:06.944000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 10 00:45:06.956791 systemd[1]: Started cri-containerd-b559b797c2608820678ed5a66519d0b090ac69eaa3e5795ac2b1af11ee396b61.scope. Jul 10 00:45:06.982000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:06.982000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:06.982000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:06.982000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:06.982000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:06.982000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:06.983000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:06.983000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:06.983000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:06.983000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:06.983000 audit: BPF prog-id=136 op=LOAD Jul 10 00:45:06.983000 audit[3456]: AVC avc: denied { bpf } for pid=3456 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:06.983000 audit[3456]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=3417 pid=3456 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:06.983000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6235353962373937633236303838323036373865643561363635313964 Jul 10 00:45:06.983000 audit[3456]: AVC avc: denied { perfmon } for pid=3456 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:06.983000 audit[3456]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=3417 pid=3456 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:06.983000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6235353962373937633236303838323036373865643561363635313964 Jul 10 00:45:06.983000 audit[3456]: AVC avc: denied { bpf } for pid=3456 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:06.983000 audit[3456]: AVC avc: denied { bpf } for pid=3456 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:06.983000 audit[3456]: AVC avc: denied { bpf } for pid=3456 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:06.983000 audit[3456]: AVC avc: denied { perfmon } for pid=3456 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:06.983000 audit[3456]: AVC avc: denied { perfmon } for pid=3456 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:06.983000 audit[3456]: AVC avc: denied { perfmon } for pid=3456 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:06.983000 audit[3456]: AVC avc: denied { perfmon } for pid=3456 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:06.983000 audit[3456]: AVC avc: denied { perfmon } for pid=3456 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:06.983000 audit[3456]: AVC avc: denied { bpf } for pid=3456 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:06.983000 audit[3456]: AVC avc: denied { bpf } for pid=3456 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:06.983000 audit: BPF prog-id=137 op=LOAD Jul 10 00:45:06.983000 audit[3456]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c00029fc00 items=0 ppid=3417 pid=3456 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:06.983000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6235353962373937633236303838323036373865643561363635313964 Jul 10 00:45:06.983000 audit[3456]: AVC avc: denied { bpf } for pid=3456 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:06.983000 audit[3456]: AVC avc: denied { bpf } for pid=3456 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:06.983000 audit[3456]: AVC avc: denied { perfmon } for pid=3456 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:06.983000 audit[3456]: AVC avc: denied { perfmon } for pid=3456 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:06.983000 audit[3456]: AVC avc: denied { perfmon } for pid=3456 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:06.983000 audit[3456]: AVC avc: denied { perfmon } for pid=3456 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:06.983000 audit[3456]: AVC avc: denied { perfmon } for pid=3456 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:06.983000 audit[3456]: AVC avc: denied { bpf } for pid=3456 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:06.983000 audit[3456]: AVC avc: denied { bpf } for pid=3456 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:06.983000 audit: BPF prog-id=138 op=LOAD Jul 10 00:45:06.983000 audit[3456]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c00029fc48 items=0 ppid=3417 pid=3456 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:06.983000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6235353962373937633236303838323036373865643561363635313964 Jul 10 00:45:06.983000 audit: BPF prog-id=138 op=UNLOAD Jul 10 00:45:06.983000 audit: BPF prog-id=137 op=UNLOAD Jul 10 00:45:06.983000 audit[3456]: AVC avc: denied { bpf } for pid=3456 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:06.983000 audit[3456]: AVC avc: denied { bpf } for pid=3456 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:06.983000 audit[3456]: AVC avc: denied { bpf } for pid=3456 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:06.983000 audit[3456]: AVC avc: denied { perfmon } for pid=3456 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:06.983000 audit[3456]: AVC avc: denied { perfmon } for pid=3456 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:06.983000 audit[3456]: AVC avc: denied { perfmon } for pid=3456 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:06.983000 audit[3456]: AVC avc: denied { perfmon } for pid=3456 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:06.983000 audit[3456]: AVC avc: denied { perfmon } for pid=3456 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:06.983000 audit[3456]: AVC avc: denied { bpf } for pid=3456 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:06.983000 audit[3456]: AVC avc: denied { bpf } for pid=3456 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:06.983000 audit: BPF prog-id=139 op=LOAD Jul 10 00:45:06.983000 audit[3456]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0002fc058 items=0 ppid=3417 pid=3456 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:06.983000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6235353962373937633236303838323036373865643561363635313964 Jul 10 00:45:06.989506 systemd-resolved[1143]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 10 00:45:07.018873 env[1210]: time="2025-07-10T00:45:07.018793916Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-57dc5c8b4-pkht6,Uid:016327fb-9cdf-427b-b736-19d1cc12e2c0,Namespace:calico-system,Attempt:0,} returns sandbox id \"b559b797c2608820678ed5a66519d0b090ac69eaa3e5795ac2b1af11ee396b61\"" Jul 10 00:45:07.020930 env[1210]: time="2025-07-10T00:45:07.020899069Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.2\"" Jul 10 00:45:07.684371 kubelet[2000]: I0710 00:45:07.684324 2000 kubelet_volumes.go:163] "Cleaned up orphaned pod volumes dir" podUID="9b2dff5b-398c-407e-b4b2-8a06e63be01e" path="/var/lib/kubelet/pods/9b2dff5b-398c-407e-b4b2-8a06e63be01e/volumes" Jul 10 00:45:07.700000 audit[3535]: AVC avc: denied { bpf } for pid=3535 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.700000 audit[3535]: AVC avc: denied { bpf } for pid=3535 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.700000 audit[3535]: AVC avc: denied { perfmon } for pid=3535 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.700000 audit[3535]: AVC avc: denied { perfmon } for pid=3535 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.700000 audit[3535]: AVC avc: denied { perfmon } for pid=3535 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.700000 audit[3535]: AVC avc: denied { perfmon } for pid=3535 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.700000 audit[3535]: AVC avc: denied { perfmon } for pid=3535 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.700000 audit[3535]: AVC avc: denied { bpf } for pid=3535 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.700000 audit[3535]: AVC avc: denied { bpf } for pid=3535 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.700000 audit: BPF prog-id=140 op=LOAD Jul 10 00:45:07.700000 audit[3535]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffdd868c680 a2=98 a3=1fffffffffffffff items=0 ppid=3373 pid=3535 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:07.700000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Jul 10 00:45:07.700000 audit: BPF prog-id=140 op=UNLOAD Jul 10 00:45:07.700000 audit[3535]: AVC avc: denied { bpf } for pid=3535 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.700000 audit[3535]: AVC avc: denied { bpf } for pid=3535 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.700000 audit[3535]: AVC avc: denied { perfmon } for pid=3535 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.700000 audit[3535]: AVC avc: denied { perfmon } for pid=3535 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.700000 audit[3535]: AVC avc: denied { perfmon } for pid=3535 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.700000 audit[3535]: AVC avc: denied { perfmon } for pid=3535 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.700000 audit[3535]: AVC avc: denied { perfmon } for pid=3535 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.700000 audit[3535]: AVC avc: denied { bpf } for pid=3535 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.700000 audit[3535]: AVC avc: denied { bpf } for pid=3535 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.700000 audit: BPF prog-id=141 op=LOAD Jul 10 00:45:07.700000 audit[3535]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffdd868c560 a2=94 a3=3 items=0 ppid=3373 pid=3535 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:07.700000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Jul 10 00:45:07.701000 audit: BPF prog-id=141 op=UNLOAD Jul 10 00:45:07.701000 audit[3535]: AVC avc: denied { bpf } for pid=3535 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.701000 audit[3535]: AVC avc: denied { bpf } for pid=3535 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.701000 audit[3535]: AVC avc: denied { perfmon } for pid=3535 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.701000 audit[3535]: AVC avc: denied { perfmon } for pid=3535 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.701000 audit[3535]: AVC avc: denied { perfmon } for pid=3535 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.701000 audit[3535]: AVC avc: denied { perfmon } for pid=3535 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.701000 audit[3535]: AVC avc: denied { perfmon } for pid=3535 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.701000 audit[3535]: AVC avc: denied { bpf } for pid=3535 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.701000 audit[3535]: AVC avc: denied { bpf } for pid=3535 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.701000 audit: BPF prog-id=142 op=LOAD Jul 10 00:45:07.701000 audit[3535]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffdd868c5a0 a2=94 a3=7ffdd868c780 items=0 ppid=3373 pid=3535 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:07.701000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Jul 10 00:45:07.701000 audit: BPF prog-id=142 op=UNLOAD Jul 10 00:45:07.701000 audit[3535]: AVC avc: denied { perfmon } for pid=3535 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.701000 audit[3535]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=0 a1=7ffdd868c670 a2=50 a3=a000000085 items=0 ppid=3373 pid=3535 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:07.701000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Jul 10 00:45:07.702000 audit[3536]: AVC avc: denied { bpf } for pid=3536 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.702000 audit[3536]: AVC avc: denied { bpf } for pid=3536 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.702000 audit[3536]: AVC avc: denied { perfmon } for pid=3536 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.702000 audit[3536]: AVC avc: denied { perfmon } for pid=3536 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.702000 audit[3536]: AVC avc: denied { perfmon } for pid=3536 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.702000 audit[3536]: AVC avc: denied { perfmon } for pid=3536 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.702000 audit[3536]: AVC avc: denied { perfmon } for pid=3536 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.702000 audit[3536]: AVC avc: denied { bpf } for pid=3536 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.702000 audit[3536]: AVC avc: denied { bpf } for pid=3536 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.702000 audit: BPF prog-id=143 op=LOAD Jul 10 00:45:07.702000 audit[3536]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffc90d4ce70 a2=98 a3=3 items=0 ppid=3373 pid=3536 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:07.702000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 00:45:07.702000 audit: BPF prog-id=143 op=UNLOAD Jul 10 00:45:07.702000 audit[3536]: AVC avc: denied { bpf } for pid=3536 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.702000 audit[3536]: AVC avc: denied { bpf } for pid=3536 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.702000 audit[3536]: AVC avc: denied { perfmon } for pid=3536 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.702000 audit[3536]: AVC avc: denied { perfmon } for pid=3536 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.702000 audit[3536]: AVC avc: denied { perfmon } for pid=3536 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.702000 audit[3536]: AVC avc: denied { perfmon } for pid=3536 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.702000 audit[3536]: AVC avc: denied { perfmon } for pid=3536 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.702000 audit[3536]: AVC avc: denied { bpf } for pid=3536 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.702000 audit[3536]: AVC avc: denied { bpf } for pid=3536 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.702000 audit: BPF prog-id=144 op=LOAD Jul 10 00:45:07.702000 audit[3536]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffc90d4cc60 a2=94 a3=54428f items=0 ppid=3373 pid=3536 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:07.702000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 00:45:07.702000 audit: BPF prog-id=144 op=UNLOAD Jul 10 00:45:07.702000 audit[3536]: AVC avc: denied { bpf } for pid=3536 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.702000 audit[3536]: AVC avc: denied { bpf } for pid=3536 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.702000 audit[3536]: AVC avc: denied { perfmon } for pid=3536 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.702000 audit[3536]: AVC avc: denied { perfmon } for pid=3536 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.702000 audit[3536]: AVC avc: denied { perfmon } for pid=3536 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.702000 audit[3536]: AVC avc: denied { perfmon } for pid=3536 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.702000 audit[3536]: AVC avc: denied { perfmon } for pid=3536 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.702000 audit[3536]: AVC avc: denied { bpf } for pid=3536 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.702000 audit[3536]: AVC avc: denied { bpf } for pid=3536 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.702000 audit: BPF prog-id=145 op=LOAD Jul 10 00:45:07.702000 audit[3536]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffc90d4cc90 a2=94 a3=2 items=0 ppid=3373 pid=3536 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:07.702000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 00:45:07.702000 audit: BPF prog-id=145 op=UNLOAD Jul 10 00:45:07.816000 audit[3536]: AVC avc: denied { bpf } for pid=3536 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.816000 audit[3536]: AVC avc: denied { bpf } for pid=3536 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.816000 audit[3536]: AVC avc: denied { perfmon } for pid=3536 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.816000 audit[3536]: AVC avc: denied { perfmon } for pid=3536 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.816000 audit[3536]: AVC avc: denied { perfmon } for pid=3536 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.816000 audit[3536]: AVC avc: denied { perfmon } for pid=3536 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.816000 audit[3536]: AVC avc: denied { perfmon } for pid=3536 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.816000 audit[3536]: AVC avc: denied { bpf } for pid=3536 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.816000 audit[3536]: AVC avc: denied { bpf } for pid=3536 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.816000 audit: BPF prog-id=146 op=LOAD Jul 10 00:45:07.816000 audit[3536]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffc90d4cb50 a2=94 a3=1 items=0 ppid=3373 pid=3536 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:07.816000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 00:45:07.816000 audit: BPF prog-id=146 op=UNLOAD Jul 10 00:45:07.816000 audit[3536]: AVC avc: denied { perfmon } for pid=3536 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.816000 audit[3536]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=0 a1=7ffc90d4cc20 a2=50 a3=7ffc90d4cd00 items=0 ppid=3373 pid=3536 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:07.816000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 00:45:07.824000 audit[3536]: AVC avc: denied { bpf } for pid=3536 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.824000 audit[3536]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffc90d4cb60 a2=28 a3=0 items=0 ppid=3373 pid=3536 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:07.824000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 00:45:07.824000 audit[3536]: AVC avc: denied { bpf } for pid=3536 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.824000 audit[3536]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffc90d4cb90 a2=28 a3=0 items=0 ppid=3373 pid=3536 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:07.824000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 00:45:07.824000 audit[3536]: AVC avc: denied { bpf } for pid=3536 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.824000 audit[3536]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffc90d4caa0 a2=28 a3=0 items=0 ppid=3373 pid=3536 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:07.824000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 00:45:07.824000 audit[3536]: AVC avc: denied { bpf } for pid=3536 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.824000 audit[3536]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffc90d4cbb0 a2=28 a3=0 items=0 ppid=3373 pid=3536 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:07.824000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 00:45:07.824000 audit[3536]: AVC avc: denied { bpf } for pid=3536 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.824000 audit[3536]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffc90d4cb90 a2=28 a3=0 items=0 ppid=3373 pid=3536 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:07.824000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 00:45:07.824000 audit[3536]: AVC avc: denied { bpf } for pid=3536 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.824000 audit[3536]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffc90d4cb80 a2=28 a3=0 items=0 ppid=3373 pid=3536 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:07.824000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 00:45:07.824000 audit[3536]: AVC avc: denied { bpf } for pid=3536 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.824000 audit[3536]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffc90d4cbb0 a2=28 a3=0 items=0 ppid=3373 pid=3536 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:07.824000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 00:45:07.824000 audit[3536]: AVC avc: denied { bpf } for pid=3536 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.824000 audit[3536]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffc90d4cb90 a2=28 a3=0 items=0 ppid=3373 pid=3536 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:07.824000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 00:45:07.824000 audit[3536]: AVC avc: denied { bpf } for pid=3536 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.824000 audit[3536]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffc90d4cbb0 a2=28 a3=0 items=0 ppid=3373 pid=3536 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:07.824000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 00:45:07.824000 audit[3536]: AVC avc: denied { bpf } for pid=3536 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.824000 audit[3536]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffc90d4cb80 a2=28 a3=0 items=0 ppid=3373 pid=3536 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:07.824000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 00:45:07.825000 audit[3536]: AVC avc: denied { bpf } for pid=3536 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.825000 audit[3536]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffc90d4cbf0 a2=28 a3=0 items=0 ppid=3373 pid=3536 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:07.825000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 00:45:07.825000 audit[3536]: AVC avc: denied { perfmon } for pid=3536 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.825000 audit[3536]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=0 a1=7ffc90d4c9a0 a2=50 a3=1 items=0 ppid=3373 pid=3536 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:07.825000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 00:45:07.825000 audit[3536]: AVC avc: denied { bpf } for pid=3536 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.825000 audit[3536]: AVC avc: denied { bpf } for pid=3536 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.825000 audit[3536]: AVC avc: denied { perfmon } for pid=3536 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.825000 audit[3536]: AVC avc: denied { perfmon } for pid=3536 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.825000 audit[3536]: AVC avc: denied { perfmon } for pid=3536 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.825000 audit[3536]: AVC avc: denied { perfmon } for pid=3536 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.825000 audit[3536]: AVC avc: denied { perfmon } for pid=3536 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.825000 audit[3536]: AVC avc: denied { bpf } for pid=3536 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.825000 audit[3536]: AVC avc: denied { bpf } for pid=3536 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.825000 audit: BPF prog-id=147 op=LOAD Jul 10 00:45:07.825000 audit[3536]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7ffc90d4c9a0 a2=94 a3=5 items=0 ppid=3373 pid=3536 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:07.825000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 00:45:07.825000 audit: BPF prog-id=147 op=UNLOAD Jul 10 00:45:07.825000 audit[3536]: AVC avc: denied { perfmon } for pid=3536 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.825000 audit[3536]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=0 a1=7ffc90d4ca50 a2=50 a3=1 items=0 ppid=3373 pid=3536 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:07.825000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 00:45:07.825000 audit[3536]: AVC avc: denied { bpf } for pid=3536 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.825000 audit[3536]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=16 a1=7ffc90d4cb70 a2=4 a3=38 items=0 ppid=3373 pid=3536 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:07.825000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 00:45:07.825000 audit[3536]: AVC avc: denied { bpf } for pid=3536 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.825000 audit[3536]: AVC avc: denied { bpf } for pid=3536 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.825000 audit[3536]: AVC avc: denied { perfmon } for pid=3536 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.825000 audit[3536]: AVC avc: denied { bpf } for pid=3536 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.825000 audit[3536]: AVC avc: denied { perfmon } for pid=3536 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.825000 audit[3536]: AVC avc: denied { perfmon } for pid=3536 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.825000 audit[3536]: AVC avc: denied { perfmon } for pid=3536 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.825000 audit[3536]: AVC avc: denied { perfmon } for pid=3536 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.825000 audit[3536]: AVC avc: denied { perfmon } for pid=3536 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.825000 audit[3536]: AVC avc: denied { bpf } for pid=3536 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.825000 audit[3536]: AVC avc: denied { confidentiality } for pid=3536 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 10 00:45:07.825000 audit[3536]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7ffc90d4cbc0 a2=94 a3=6 items=0 ppid=3373 pid=3536 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:07.825000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 00:45:07.825000 audit[3536]: AVC avc: denied { bpf } for pid=3536 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.825000 audit[3536]: AVC avc: denied { bpf } for pid=3536 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.825000 audit[3536]: AVC avc: denied { perfmon } for pid=3536 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.825000 audit[3536]: AVC avc: denied { bpf } for pid=3536 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.825000 audit[3536]: AVC avc: denied { perfmon } for pid=3536 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.825000 audit[3536]: AVC avc: denied { perfmon } for pid=3536 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.825000 audit[3536]: AVC avc: denied { perfmon } for pid=3536 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.825000 audit[3536]: AVC avc: denied { perfmon } for pid=3536 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.825000 audit[3536]: AVC avc: denied { perfmon } for pid=3536 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.825000 audit[3536]: AVC avc: denied { bpf } for pid=3536 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.825000 audit[3536]: AVC avc: denied { confidentiality } for pid=3536 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 10 00:45:07.825000 audit[3536]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7ffc90d4c370 a2=94 a3=88 items=0 ppid=3373 pid=3536 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:07.825000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 00:45:07.825000 audit[3536]: AVC avc: denied { bpf } for pid=3536 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.825000 audit[3536]: AVC avc: denied { bpf } for pid=3536 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.825000 audit[3536]: AVC avc: denied { perfmon } for pid=3536 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.825000 audit[3536]: AVC avc: denied { bpf } for pid=3536 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.825000 audit[3536]: AVC avc: denied { perfmon } for pid=3536 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.825000 audit[3536]: AVC avc: denied { perfmon } for pid=3536 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.825000 audit[3536]: AVC avc: denied { perfmon } for pid=3536 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.825000 audit[3536]: AVC avc: denied { perfmon } for pid=3536 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.825000 audit[3536]: AVC avc: denied { perfmon } for pid=3536 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.825000 audit[3536]: AVC avc: denied { bpf } for pid=3536 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.825000 audit[3536]: AVC avc: denied { confidentiality } for pid=3536 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 10 00:45:07.825000 audit[3536]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7ffc90d4c370 a2=94 a3=88 items=0 ppid=3373 pid=3536 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:07.825000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 00:45:07.832000 audit[3539]: AVC avc: denied { bpf } for pid=3539 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.832000 audit[3539]: AVC avc: denied { bpf } for pid=3539 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.832000 audit[3539]: AVC avc: denied { perfmon } for pid=3539 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.832000 audit[3539]: AVC avc: denied { perfmon } for pid=3539 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.832000 audit[3539]: AVC avc: denied { perfmon } for pid=3539 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.832000 audit[3539]: AVC avc: denied { perfmon } for pid=3539 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.832000 audit[3539]: AVC avc: denied { perfmon } for pid=3539 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.832000 audit[3539]: AVC avc: denied { bpf } for pid=3539 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.832000 audit[3539]: AVC avc: denied { bpf } for pid=3539 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.832000 audit: BPF prog-id=148 op=LOAD Jul 10 00:45:07.832000 audit[3539]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffc0875f580 a2=98 a3=1999999999999999 items=0 ppid=3373 pid=3539 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:07.832000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Jul 10 00:45:07.833000 audit: BPF prog-id=148 op=UNLOAD Jul 10 00:45:07.833000 audit[3539]: AVC avc: denied { bpf } for pid=3539 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.833000 audit[3539]: AVC avc: denied { bpf } for pid=3539 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.833000 audit[3539]: AVC avc: denied { perfmon } for pid=3539 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.833000 audit[3539]: AVC avc: denied { perfmon } for pid=3539 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.833000 audit[3539]: AVC avc: denied { perfmon } for pid=3539 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.833000 audit[3539]: AVC avc: denied { perfmon } for pid=3539 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.833000 audit[3539]: AVC avc: denied { perfmon } for pid=3539 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.833000 audit[3539]: AVC avc: denied { bpf } for pid=3539 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.833000 audit[3539]: AVC avc: denied { bpf } for pid=3539 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.833000 audit: BPF prog-id=149 op=LOAD Jul 10 00:45:07.833000 audit[3539]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffc0875f460 a2=94 a3=ffff items=0 ppid=3373 pid=3539 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:07.833000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Jul 10 00:45:07.833000 audit: BPF prog-id=149 op=UNLOAD Jul 10 00:45:07.833000 audit[3539]: AVC avc: denied { bpf } for pid=3539 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.833000 audit[3539]: AVC avc: denied { bpf } for pid=3539 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.833000 audit[3539]: AVC avc: denied { perfmon } for pid=3539 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.833000 audit[3539]: AVC avc: denied { perfmon } for pid=3539 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.833000 audit[3539]: AVC avc: denied { perfmon } for pid=3539 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.833000 audit[3539]: AVC avc: denied { perfmon } for pid=3539 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.833000 audit[3539]: AVC avc: denied { perfmon } for pid=3539 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.833000 audit[3539]: AVC avc: denied { bpf } for pid=3539 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.833000 audit[3539]: AVC avc: denied { bpf } for pid=3539 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.833000 audit: BPF prog-id=150 op=LOAD Jul 10 00:45:07.833000 audit[3539]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffc0875f4a0 a2=94 a3=7ffc0875f680 items=0 ppid=3373 pid=3539 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:07.833000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Jul 10 00:45:07.833000 audit: BPF prog-id=150 op=UNLOAD Jul 10 00:45:07.883910 systemd-networkd[1027]: vxlan.calico: Link UP Jul 10 00:45:07.883917 systemd-networkd[1027]: vxlan.calico: Gained carrier Jul 10 00:45:07.902950 systemd-networkd[1027]: calic50fadf0416: Gained IPv6LL Jul 10 00:45:07.906000 audit[3565]: AVC avc: denied { bpf } for pid=3565 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.906000 audit[3565]: AVC avc: denied { bpf } for pid=3565 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.906000 audit[3565]: AVC avc: denied { perfmon } for pid=3565 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.906000 audit[3565]: AVC avc: denied { perfmon } for pid=3565 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.906000 audit[3565]: AVC avc: denied { perfmon } for pid=3565 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.906000 audit[3565]: AVC avc: denied { perfmon } for pid=3565 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.906000 audit[3565]: AVC avc: denied { perfmon } for pid=3565 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.906000 audit[3565]: AVC avc: denied { bpf } for pid=3565 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.906000 audit[3565]: AVC avc: denied { bpf } for pid=3565 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.906000 audit: BPF prog-id=151 op=LOAD Jul 10 00:45:07.906000 audit[3565]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffe2e3d2ea0 a2=98 a3=0 items=0 ppid=3373 pid=3565 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:07.906000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 10 00:45:07.907000 audit: BPF prog-id=151 op=UNLOAD Jul 10 00:45:07.907000 audit[3565]: AVC avc: denied { bpf } for pid=3565 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.907000 audit[3565]: AVC avc: denied { bpf } for pid=3565 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.907000 audit[3565]: AVC avc: denied { perfmon } for pid=3565 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.907000 audit[3565]: AVC avc: denied { perfmon } for pid=3565 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.907000 audit[3565]: AVC avc: denied { perfmon } for pid=3565 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.907000 audit[3565]: AVC avc: denied { perfmon } for pid=3565 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.907000 audit[3565]: AVC avc: denied { perfmon } for pid=3565 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.907000 audit[3565]: AVC avc: denied { bpf } for pid=3565 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.907000 audit[3565]: AVC avc: denied { bpf } for pid=3565 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.907000 audit: BPF prog-id=152 op=LOAD Jul 10 00:45:07.907000 audit[3565]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffe2e3d2cb0 a2=94 a3=54428f items=0 ppid=3373 pid=3565 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:07.907000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 10 00:45:07.907000 audit: BPF prog-id=152 op=UNLOAD Jul 10 00:45:07.907000 audit[3565]: AVC avc: denied { bpf } for pid=3565 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.907000 audit[3565]: AVC avc: denied { bpf } for pid=3565 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.907000 audit[3565]: AVC avc: denied { perfmon } for pid=3565 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.907000 audit[3565]: AVC avc: denied { perfmon } for pid=3565 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.907000 audit[3565]: AVC avc: denied { perfmon } for pid=3565 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.907000 audit[3565]: AVC avc: denied { perfmon } for pid=3565 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.907000 audit[3565]: AVC avc: denied { perfmon } for pid=3565 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.907000 audit[3565]: AVC avc: denied { bpf } for pid=3565 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.907000 audit[3565]: AVC avc: denied { bpf } for pid=3565 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.907000 audit: BPF prog-id=153 op=LOAD Jul 10 00:45:07.907000 audit[3565]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffe2e3d2ce0 a2=94 a3=2 items=0 ppid=3373 pid=3565 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:07.907000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 10 00:45:07.907000 audit: BPF prog-id=153 op=UNLOAD Jul 10 00:45:07.907000 audit[3565]: AVC avc: denied { bpf } for pid=3565 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.907000 audit[3565]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7ffe2e3d2bb0 a2=28 a3=0 items=0 ppid=3373 pid=3565 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:07.907000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 10 00:45:07.907000 audit[3565]: AVC avc: denied { bpf } for pid=3565 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.907000 audit[3565]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffe2e3d2be0 a2=28 a3=0 items=0 ppid=3373 pid=3565 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:07.907000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 10 00:45:07.907000 audit[3565]: AVC avc: denied { bpf } for pid=3565 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.907000 audit[3565]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffe2e3d2af0 a2=28 a3=0 items=0 ppid=3373 pid=3565 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:07.907000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 10 00:45:07.907000 audit[3565]: AVC avc: denied { bpf } for pid=3565 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.907000 audit[3565]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7ffe2e3d2c00 a2=28 a3=0 items=0 ppid=3373 pid=3565 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:07.907000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 10 00:45:07.907000 audit[3565]: AVC avc: denied { bpf } for pid=3565 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.907000 audit[3565]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7ffe2e3d2be0 a2=28 a3=0 items=0 ppid=3373 pid=3565 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:07.907000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 10 00:45:07.907000 audit[3565]: AVC avc: denied { bpf } for pid=3565 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.907000 audit[3565]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7ffe2e3d2bd0 a2=28 a3=0 items=0 ppid=3373 pid=3565 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:07.907000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 10 00:45:07.907000 audit[3565]: AVC avc: denied { bpf } for pid=3565 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.907000 audit[3565]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7ffe2e3d2c00 a2=28 a3=0 items=0 ppid=3373 pid=3565 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:07.907000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 10 00:45:07.907000 audit[3565]: AVC avc: denied { bpf } for pid=3565 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.907000 audit[3565]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffe2e3d2be0 a2=28 a3=0 items=0 ppid=3373 pid=3565 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:07.907000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 10 00:45:07.907000 audit[3565]: AVC avc: denied { bpf } for pid=3565 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.907000 audit[3565]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffe2e3d2c00 a2=28 a3=0 items=0 ppid=3373 pid=3565 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:07.907000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 10 00:45:07.907000 audit[3565]: AVC avc: denied { bpf } for pid=3565 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.907000 audit[3565]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffe2e3d2bd0 a2=28 a3=0 items=0 ppid=3373 pid=3565 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:07.907000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 10 00:45:07.907000 audit[3565]: AVC avc: denied { bpf } for pid=3565 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.907000 audit[3565]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7ffe2e3d2c40 a2=28 a3=0 items=0 ppid=3373 pid=3565 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:07.907000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 10 00:45:07.907000 audit[3565]: AVC avc: denied { bpf } for pid=3565 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.907000 audit[3565]: AVC avc: denied { bpf } for pid=3565 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.907000 audit[3565]: AVC avc: denied { perfmon } for pid=3565 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.907000 audit[3565]: AVC avc: denied { perfmon } for pid=3565 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.907000 audit[3565]: AVC avc: denied { perfmon } for pid=3565 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.907000 audit[3565]: AVC avc: denied { perfmon } for pid=3565 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.907000 audit[3565]: AVC avc: denied { perfmon } for pid=3565 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.907000 audit[3565]: AVC avc: denied { bpf } for pid=3565 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.907000 audit[3565]: AVC avc: denied { bpf } for pid=3565 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.907000 audit: BPF prog-id=154 op=LOAD Jul 10 00:45:07.907000 audit[3565]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7ffe2e3d2ab0 a2=94 a3=0 items=0 ppid=3373 pid=3565 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:07.907000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 10 00:45:07.907000 audit: BPF prog-id=154 op=UNLOAD Jul 10 00:45:07.908000 audit[3565]: AVC avc: denied { bpf } for pid=3565 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.908000 audit[3565]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=0 a1=7ffe2e3d2aa0 a2=50 a3=2800 items=0 ppid=3373 pid=3565 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:07.908000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 10 00:45:07.908000 audit[3565]: AVC avc: denied { bpf } for pid=3565 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.908000 audit[3565]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=0 a1=7ffe2e3d2aa0 a2=50 a3=2800 items=0 ppid=3373 pid=3565 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:07.908000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 10 00:45:07.908000 audit[3565]: AVC avc: denied { bpf } for pid=3565 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.908000 audit[3565]: AVC avc: denied { bpf } for pid=3565 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.908000 audit[3565]: AVC avc: denied { bpf } for pid=3565 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.908000 audit[3565]: AVC avc: denied { perfmon } for pid=3565 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.908000 audit[3565]: AVC avc: denied { perfmon } for pid=3565 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.908000 audit[3565]: AVC avc: denied { perfmon } for pid=3565 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.908000 audit[3565]: AVC avc: denied { perfmon } for pid=3565 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.908000 audit[3565]: AVC avc: denied { perfmon } for pid=3565 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.908000 audit[3565]: AVC avc: denied { bpf } for pid=3565 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.908000 audit[3565]: AVC avc: denied { bpf } for pid=3565 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.908000 audit: BPF prog-id=155 op=LOAD Jul 10 00:45:07.908000 audit[3565]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7ffe2e3d22c0 a2=94 a3=2 items=0 ppid=3373 pid=3565 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:07.908000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 10 00:45:07.911000 audit: BPF prog-id=155 op=UNLOAD Jul 10 00:45:07.911000 audit[3565]: AVC avc: denied { bpf } for pid=3565 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.911000 audit[3565]: AVC avc: denied { bpf } for pid=3565 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.911000 audit[3565]: AVC avc: denied { bpf } for pid=3565 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.911000 audit[3565]: AVC avc: denied { perfmon } for pid=3565 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.911000 audit[3565]: AVC avc: denied { perfmon } for pid=3565 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.911000 audit[3565]: AVC avc: denied { perfmon } for pid=3565 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.911000 audit[3565]: AVC avc: denied { perfmon } for pid=3565 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.911000 audit[3565]: AVC avc: denied { perfmon } for pid=3565 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.911000 audit[3565]: AVC avc: denied { bpf } for pid=3565 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.911000 audit[3565]: AVC avc: denied { bpf } for pid=3565 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.911000 audit: BPF prog-id=156 op=LOAD Jul 10 00:45:07.911000 audit[3565]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7ffe2e3d23c0 a2=94 a3=30 items=0 ppid=3373 pid=3565 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:07.911000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 10 00:45:07.918000 audit[3574]: AVC avc: denied { bpf } for pid=3574 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.918000 audit[3574]: AVC avc: denied { bpf } for pid=3574 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.918000 audit[3574]: AVC avc: denied { perfmon } for pid=3574 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.918000 audit[3574]: AVC avc: denied { perfmon } for pid=3574 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.918000 audit[3574]: AVC avc: denied { perfmon } for pid=3574 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.918000 audit[3574]: AVC avc: denied { perfmon } for pid=3574 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.918000 audit[3574]: AVC avc: denied { perfmon } for pid=3574 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.918000 audit[3574]: AVC avc: denied { bpf } for pid=3574 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.918000 audit[3574]: AVC avc: denied { bpf } for pid=3574 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.918000 audit: BPF prog-id=157 op=LOAD Jul 10 00:45:07.918000 audit[3574]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffda05cb600 a2=98 a3=0 items=0 ppid=3373 pid=3574 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:07.918000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:45:07.918000 audit: BPF prog-id=157 op=UNLOAD Jul 10 00:45:07.919000 audit[3574]: AVC avc: denied { bpf } for pid=3574 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.919000 audit[3574]: AVC avc: denied { bpf } for pid=3574 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.919000 audit[3574]: AVC avc: denied { perfmon } for pid=3574 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.919000 audit[3574]: AVC avc: denied { perfmon } for pid=3574 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.919000 audit[3574]: AVC avc: denied { perfmon } for pid=3574 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.919000 audit[3574]: AVC avc: denied { perfmon } for pid=3574 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.919000 audit[3574]: AVC avc: denied { perfmon } for pid=3574 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.919000 audit[3574]: AVC avc: denied { bpf } for pid=3574 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.919000 audit[3574]: AVC avc: denied { bpf } for pid=3574 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.919000 audit: BPF prog-id=158 op=LOAD Jul 10 00:45:07.919000 audit[3574]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffda05cb3f0 a2=94 a3=54428f items=0 ppid=3373 pid=3574 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:07.919000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:45:07.919000 audit: BPF prog-id=158 op=UNLOAD Jul 10 00:45:07.919000 audit[3574]: AVC avc: denied { bpf } for pid=3574 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.919000 audit[3574]: AVC avc: denied { bpf } for pid=3574 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.919000 audit[3574]: AVC avc: denied { perfmon } for pid=3574 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.919000 audit[3574]: AVC avc: denied { perfmon } for pid=3574 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.919000 audit[3574]: AVC avc: denied { perfmon } for pid=3574 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.919000 audit[3574]: AVC avc: denied { perfmon } for pid=3574 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.919000 audit[3574]: AVC avc: denied { perfmon } for pid=3574 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.919000 audit[3574]: AVC avc: denied { bpf } for pid=3574 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.919000 audit[3574]: AVC avc: denied { bpf } for pid=3574 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:07.919000 audit: BPF prog-id=159 op=LOAD Jul 10 00:45:07.919000 audit[3574]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffda05cb420 a2=94 a3=2 items=0 ppid=3373 pid=3574 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:07.919000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:45:07.919000 audit: BPF prog-id=159 op=UNLOAD Jul 10 00:45:08.025000 audit[3574]: AVC avc: denied { bpf } for pid=3574 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:08.025000 audit[3574]: AVC avc: denied { bpf } for pid=3574 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:08.025000 audit[3574]: AVC avc: denied { perfmon } for pid=3574 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:08.025000 audit[3574]: AVC avc: denied { perfmon } for pid=3574 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:08.025000 audit[3574]: AVC avc: denied { perfmon } for pid=3574 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:08.025000 audit[3574]: AVC avc: denied { perfmon } for pid=3574 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:08.025000 audit[3574]: AVC avc: denied { perfmon } for pid=3574 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:08.025000 audit[3574]: AVC avc: denied { bpf } for pid=3574 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:08.025000 audit[3574]: AVC avc: denied { bpf } for pid=3574 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:08.025000 audit: BPF prog-id=160 op=LOAD Jul 10 00:45:08.025000 audit[3574]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffda05cb2e0 a2=94 a3=1 items=0 ppid=3373 pid=3574 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:08.025000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:45:08.025000 audit: BPF prog-id=160 op=UNLOAD Jul 10 00:45:08.025000 audit[3574]: AVC avc: denied { perfmon } for pid=3574 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:08.025000 audit[3574]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=0 a1=7ffda05cb3b0 a2=50 a3=7ffda05cb490 items=0 ppid=3373 pid=3574 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:08.025000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:45:08.033000 audit[3574]: AVC avc: denied { bpf } for pid=3574 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:08.033000 audit[3574]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffda05cb2f0 a2=28 a3=0 items=0 ppid=3373 pid=3574 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:08.033000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:45:08.033000 audit[3574]: AVC avc: denied { bpf } for pid=3574 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:08.033000 audit[3574]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffda05cb320 a2=28 a3=0 items=0 ppid=3373 pid=3574 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:08.033000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:45:08.033000 audit[3574]: AVC avc: denied { bpf } for pid=3574 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:08.033000 audit[3574]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffda05cb230 a2=28 a3=0 items=0 ppid=3373 pid=3574 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:08.033000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:45:08.033000 audit[3574]: AVC avc: denied { bpf } for pid=3574 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:08.033000 audit[3574]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffda05cb340 a2=28 a3=0 items=0 ppid=3373 pid=3574 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:08.033000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:45:08.033000 audit[3574]: AVC avc: denied { bpf } for pid=3574 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:08.033000 audit[3574]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffda05cb320 a2=28 a3=0 items=0 ppid=3373 pid=3574 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:08.033000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:45:08.033000 audit[3574]: AVC avc: denied { bpf } for pid=3574 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:08.033000 audit[3574]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffda05cb310 a2=28 a3=0 items=0 ppid=3373 pid=3574 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:08.033000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:45:08.033000 audit[3574]: AVC avc: denied { bpf } for pid=3574 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:08.033000 audit[3574]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffda05cb340 a2=28 a3=0 items=0 ppid=3373 pid=3574 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:08.033000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:45:08.033000 audit[3574]: AVC avc: denied { bpf } for pid=3574 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:08.033000 audit[3574]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffda05cb320 a2=28 a3=0 items=0 ppid=3373 pid=3574 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:08.033000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:45:08.033000 audit[3574]: AVC avc: denied { bpf } for pid=3574 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:08.033000 audit[3574]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffda05cb340 a2=28 a3=0 items=0 ppid=3373 pid=3574 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:08.033000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:45:08.033000 audit[3574]: AVC avc: denied { bpf } for pid=3574 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:08.033000 audit[3574]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffda05cb310 a2=28 a3=0 items=0 ppid=3373 pid=3574 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:08.033000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:45:08.033000 audit[3574]: AVC avc: denied { bpf } for pid=3574 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:08.033000 audit[3574]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffda05cb380 a2=28 a3=0 items=0 ppid=3373 pid=3574 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:08.033000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:45:08.033000 audit[3574]: AVC avc: denied { perfmon } for pid=3574 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:08.033000 audit[3574]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=0 a1=7ffda05cb130 a2=50 a3=1 items=0 ppid=3373 pid=3574 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:08.033000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:45:08.033000 audit[3574]: AVC avc: denied { bpf } for pid=3574 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:08.033000 audit[3574]: AVC avc: denied { bpf } for pid=3574 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:08.033000 audit[3574]: AVC avc: denied { perfmon } for pid=3574 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:08.033000 audit[3574]: AVC avc: denied { perfmon } for pid=3574 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:08.033000 audit[3574]: AVC avc: denied { perfmon } for pid=3574 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:08.033000 audit[3574]: AVC avc: denied { perfmon } for pid=3574 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:08.033000 audit[3574]: AVC avc: denied { perfmon } for pid=3574 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:08.033000 audit[3574]: AVC avc: denied { bpf } for pid=3574 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:08.033000 audit[3574]: AVC avc: denied { bpf } for pid=3574 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:08.033000 audit: BPF prog-id=161 op=LOAD Jul 10 00:45:08.033000 audit[3574]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7ffda05cb130 a2=94 a3=5 items=0 ppid=3373 pid=3574 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:08.033000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:45:08.033000 audit: BPF prog-id=161 op=UNLOAD Jul 10 00:45:08.033000 audit[3574]: AVC avc: denied { perfmon } for pid=3574 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:08.033000 audit[3574]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=0 a1=7ffda05cb1e0 a2=50 a3=1 items=0 ppid=3373 pid=3574 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:08.033000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:45:08.033000 audit[3574]: AVC avc: denied { bpf } for pid=3574 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:08.033000 audit[3574]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=16 a1=7ffda05cb300 a2=4 a3=38 items=0 ppid=3373 pid=3574 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:08.033000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:45:08.033000 audit[3574]: AVC avc: denied { bpf } for pid=3574 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:08.033000 audit[3574]: AVC avc: denied { bpf } for pid=3574 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:08.033000 audit[3574]: AVC avc: denied { perfmon } for pid=3574 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:08.033000 audit[3574]: AVC avc: denied { bpf } for pid=3574 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:08.033000 audit[3574]: AVC avc: denied { perfmon } for pid=3574 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:08.033000 audit[3574]: AVC avc: denied { perfmon } for pid=3574 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:08.033000 audit[3574]: AVC avc: denied { perfmon } for pid=3574 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:08.033000 audit[3574]: AVC avc: denied { perfmon } for pid=3574 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:08.033000 audit[3574]: AVC avc: denied { perfmon } for pid=3574 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:08.033000 audit[3574]: AVC avc: denied { bpf } for pid=3574 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:08.033000 audit[3574]: AVC avc: denied { confidentiality } for pid=3574 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 10 00:45:08.033000 audit[3574]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7ffda05cb350 a2=94 a3=6 items=0 ppid=3373 pid=3574 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:08.033000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:45:08.033000 audit[3574]: AVC avc: denied { bpf } for pid=3574 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:08.033000 audit[3574]: AVC avc: denied { bpf } for pid=3574 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:08.033000 audit[3574]: AVC avc: denied { perfmon } for pid=3574 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:08.033000 audit[3574]: AVC avc: denied { bpf } for pid=3574 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:08.033000 audit[3574]: AVC avc: denied { perfmon } for pid=3574 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:08.033000 audit[3574]: AVC avc: denied { perfmon } for pid=3574 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:08.033000 audit[3574]: AVC avc: denied { perfmon } for pid=3574 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:08.033000 audit[3574]: AVC avc: denied { perfmon } for pid=3574 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:08.033000 audit[3574]: AVC avc: denied { perfmon } for pid=3574 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:08.033000 audit[3574]: AVC avc: denied { bpf } for pid=3574 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:08.033000 audit[3574]: AVC avc: denied { confidentiality } for pid=3574 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 10 00:45:08.033000 audit[3574]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7ffda05cab00 a2=94 a3=88 items=0 ppid=3373 pid=3574 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:08.033000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:45:08.033000 audit[3574]: AVC avc: denied { bpf } for pid=3574 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:08.033000 audit[3574]: AVC avc: denied { bpf } for pid=3574 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:08.033000 audit[3574]: AVC avc: denied { perfmon } for pid=3574 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:08.033000 audit[3574]: AVC avc: denied { bpf } for pid=3574 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:08.033000 audit[3574]: AVC avc: denied { perfmon } for pid=3574 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:08.033000 audit[3574]: AVC avc: denied { perfmon } for pid=3574 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:08.033000 audit[3574]: AVC avc: denied { perfmon } for pid=3574 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:08.033000 audit[3574]: AVC avc: denied { perfmon } for pid=3574 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:08.033000 audit[3574]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7ffda05cab00 a2=94 a3=88 items=0 ppid=3373 pid=3574 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:08.033000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:45:08.035000 audit[3574]: AVC avc: denied { bpf } for pid=3574 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:08.035000 audit[3574]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7ffda05cc530 a2=10 a3=208 items=0 ppid=3373 pid=3574 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:08.035000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:45:08.035000 audit[3574]: AVC avc: denied { bpf } for pid=3574 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:08.035000 audit[3574]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7ffda05cc3d0 a2=10 a3=3 items=0 ppid=3373 pid=3574 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:08.035000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:45:08.035000 audit[3574]: AVC avc: denied { bpf } for pid=3574 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:08.035000 audit[3574]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7ffda05cc370 a2=10 a3=3 items=0 ppid=3373 pid=3574 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:08.035000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:45:08.035000 audit[3574]: AVC avc: denied { bpf } for pid=3574 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:08.035000 audit[3574]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7ffda05cc370 a2=10 a3=7 items=0 ppid=3373 pid=3574 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:08.035000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:45:08.043000 audit: BPF prog-id=156 op=UNLOAD Jul 10 00:45:08.682763 env[1210]: time="2025-07-10T00:45:08.682709934Z" level=info msg="StopPodSandbox for \"1607d724730937f239d497e65803ea949f79c495541c34cdbc1f84732fa42959\"" Jul 10 00:45:08.683213 env[1210]: time="2025-07-10T00:45:08.682937553Z" level=info msg="StopPodSandbox for \"b84b082488c498ee101edac9ccb074ef00c948da04c445ef1696aa4916ed2382\"" Jul 10 00:45:08.888000 audit[3636]: NETFILTER_CFG table=nat:101 family=2 entries=15 op=nft_register_chain pid=3636 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 10 00:45:08.888000 audit[3636]: SYSCALL arch=c000003e syscall=46 success=yes exit=5084 a0=3 a1=7ffca5a67380 a2=0 a3=7ffca5a6736c items=0 ppid=3373 pid=3636 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:08.888000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 10 00:45:08.890000 audit[3640]: NETFILTER_CFG table=mangle:102 family=2 entries=16 op=nft_register_chain pid=3640 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 10 00:45:08.890000 audit[3640]: SYSCALL arch=c000003e syscall=46 success=yes exit=6868 a0=3 a1=7ffc035d0b70 a2=0 a3=7ffc035d0b5c items=0 ppid=3373 pid=3640 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:08.890000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 10 00:45:08.897000 audit[3635]: NETFILTER_CFG table=raw:103 family=2 entries=21 op=nft_register_chain pid=3635 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 10 00:45:08.897000 audit[3635]: SYSCALL arch=c000003e syscall=46 success=yes exit=8452 a0=3 a1=7fff4e9100e0 a2=0 a3=7fff4e9100cc items=0 ppid=3373 pid=3635 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:08.897000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 10 00:45:08.898000 audit[3637]: NETFILTER_CFG table=filter:104 family=2 entries=94 op=nft_register_chain pid=3637 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 10 00:45:08.898000 audit[3637]: SYSCALL arch=c000003e syscall=46 success=yes exit=53116 a0=3 a1=7ffe72de0b90 a2=0 a3=557d0e307000 items=0 ppid=3373 pid=3637 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:08.898000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 10 00:45:09.024663 env[1210]: 2025-07-10 00:45:08.918 [INFO][3602] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="1607d724730937f239d497e65803ea949f79c495541c34cdbc1f84732fa42959" Jul 10 00:45:09.024663 env[1210]: 2025-07-10 00:45:08.918 [INFO][3602] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="1607d724730937f239d497e65803ea949f79c495541c34cdbc1f84732fa42959" iface="eth0" netns="/var/run/netns/cni-12e05cc8-4154-cc55-0190-039c9736ba3f" Jul 10 00:45:09.024663 env[1210]: 2025-07-10 00:45:08.919 [INFO][3602] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="1607d724730937f239d497e65803ea949f79c495541c34cdbc1f84732fa42959" iface="eth0" netns="/var/run/netns/cni-12e05cc8-4154-cc55-0190-039c9736ba3f" Jul 10 00:45:09.024663 env[1210]: 2025-07-10 00:45:08.919 [INFO][3602] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="1607d724730937f239d497e65803ea949f79c495541c34cdbc1f84732fa42959" iface="eth0" netns="/var/run/netns/cni-12e05cc8-4154-cc55-0190-039c9736ba3f" Jul 10 00:45:09.024663 env[1210]: 2025-07-10 00:45:08.919 [INFO][3602] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="1607d724730937f239d497e65803ea949f79c495541c34cdbc1f84732fa42959" Jul 10 00:45:09.024663 env[1210]: 2025-07-10 00:45:08.919 [INFO][3602] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="1607d724730937f239d497e65803ea949f79c495541c34cdbc1f84732fa42959" Jul 10 00:45:09.024663 env[1210]: 2025-07-10 00:45:09.008 [INFO][3651] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="1607d724730937f239d497e65803ea949f79c495541c34cdbc1f84732fa42959" HandleID="k8s-pod-network.1607d724730937f239d497e65803ea949f79c495541c34cdbc1f84732fa42959" Workload="localhost-k8s-calico--apiserver--7b8bd7bfc9--7mdpn-eth0" Jul 10 00:45:09.024663 env[1210]: 2025-07-10 00:45:09.008 [INFO][3651] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:45:09.024663 env[1210]: 2025-07-10 00:45:09.009 [INFO][3651] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:45:09.024663 env[1210]: 2025-07-10 00:45:09.014 [WARNING][3651] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="1607d724730937f239d497e65803ea949f79c495541c34cdbc1f84732fa42959" HandleID="k8s-pod-network.1607d724730937f239d497e65803ea949f79c495541c34cdbc1f84732fa42959" Workload="localhost-k8s-calico--apiserver--7b8bd7bfc9--7mdpn-eth0" Jul 10 00:45:09.024663 env[1210]: 2025-07-10 00:45:09.014 [INFO][3651] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="1607d724730937f239d497e65803ea949f79c495541c34cdbc1f84732fa42959" HandleID="k8s-pod-network.1607d724730937f239d497e65803ea949f79c495541c34cdbc1f84732fa42959" Workload="localhost-k8s-calico--apiserver--7b8bd7bfc9--7mdpn-eth0" Jul 10 00:45:09.024663 env[1210]: 2025-07-10 00:45:09.019 [INFO][3651] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:45:09.024663 env[1210]: 2025-07-10 00:45:09.022 [INFO][3602] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="1607d724730937f239d497e65803ea949f79c495541c34cdbc1f84732fa42959" Jul 10 00:45:09.028659 systemd[1]: run-netns-cni\x2d12e05cc8\x2d4154\x2dcc55\x2d0190\x2d039c9736ba3f.mount: Deactivated successfully. Jul 10 00:45:09.029676 env[1210]: time="2025-07-10T00:45:09.029605186Z" level=info msg="TearDown network for sandbox \"1607d724730937f239d497e65803ea949f79c495541c34cdbc1f84732fa42959\" successfully" Jul 10 00:45:09.029676 env[1210]: time="2025-07-10T00:45:09.029661561Z" level=info msg="StopPodSandbox for \"1607d724730937f239d497e65803ea949f79c495541c34cdbc1f84732fa42959\" returns successfully" Jul 10 00:45:09.030544 env[1210]: time="2025-07-10T00:45:09.030509131Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-7b8bd7bfc9-7mdpn,Uid:bd35914e-3d9d-48a8-9a13-4f3678b36e0a,Namespace:calico-apiserver,Attempt:1,}" Jul 10 00:45:09.033899 env[1210]: 2025-07-10 00:45:08.926 [INFO][3603] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="b84b082488c498ee101edac9ccb074ef00c948da04c445ef1696aa4916ed2382" Jul 10 00:45:09.033899 env[1210]: 2025-07-10 00:45:08.926 [INFO][3603] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="b84b082488c498ee101edac9ccb074ef00c948da04c445ef1696aa4916ed2382" iface="eth0" netns="/var/run/netns/cni-1c0da5f7-3632-ae2b-2ed2-0797b196fbea" Jul 10 00:45:09.033899 env[1210]: 2025-07-10 00:45:08.926 [INFO][3603] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="b84b082488c498ee101edac9ccb074ef00c948da04c445ef1696aa4916ed2382" iface="eth0" netns="/var/run/netns/cni-1c0da5f7-3632-ae2b-2ed2-0797b196fbea" Jul 10 00:45:09.033899 env[1210]: 2025-07-10 00:45:08.926 [INFO][3603] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="b84b082488c498ee101edac9ccb074ef00c948da04c445ef1696aa4916ed2382" iface="eth0" netns="/var/run/netns/cni-1c0da5f7-3632-ae2b-2ed2-0797b196fbea" Jul 10 00:45:09.033899 env[1210]: 2025-07-10 00:45:08.926 [INFO][3603] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="b84b082488c498ee101edac9ccb074ef00c948da04c445ef1696aa4916ed2382" Jul 10 00:45:09.033899 env[1210]: 2025-07-10 00:45:08.926 [INFO][3603] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="b84b082488c498ee101edac9ccb074ef00c948da04c445ef1696aa4916ed2382" Jul 10 00:45:09.033899 env[1210]: 2025-07-10 00:45:09.009 [INFO][3653] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="b84b082488c498ee101edac9ccb074ef00c948da04c445ef1696aa4916ed2382" HandleID="k8s-pod-network.b84b082488c498ee101edac9ccb074ef00c948da04c445ef1696aa4916ed2382" Workload="localhost-k8s-coredns--674b8bbfcf--ffnv5-eth0" Jul 10 00:45:09.033899 env[1210]: 2025-07-10 00:45:09.009 [INFO][3653] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:45:09.033899 env[1210]: 2025-07-10 00:45:09.019 [INFO][3653] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:45:09.033899 env[1210]: 2025-07-10 00:45:09.026 [WARNING][3653] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="b84b082488c498ee101edac9ccb074ef00c948da04c445ef1696aa4916ed2382" HandleID="k8s-pod-network.b84b082488c498ee101edac9ccb074ef00c948da04c445ef1696aa4916ed2382" Workload="localhost-k8s-coredns--674b8bbfcf--ffnv5-eth0" Jul 10 00:45:09.033899 env[1210]: 2025-07-10 00:45:09.026 [INFO][3653] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="b84b082488c498ee101edac9ccb074ef00c948da04c445ef1696aa4916ed2382" HandleID="k8s-pod-network.b84b082488c498ee101edac9ccb074ef00c948da04c445ef1696aa4916ed2382" Workload="localhost-k8s-coredns--674b8bbfcf--ffnv5-eth0" Jul 10 00:45:09.033899 env[1210]: 2025-07-10 00:45:09.027 [INFO][3653] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:45:09.033899 env[1210]: 2025-07-10 00:45:09.032 [INFO][3603] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="b84b082488c498ee101edac9ccb074ef00c948da04c445ef1696aa4916ed2382" Jul 10 00:45:09.038957 env[1210]: time="2025-07-10T00:45:09.034277651Z" level=info msg="TearDown network for sandbox \"b84b082488c498ee101edac9ccb074ef00c948da04c445ef1696aa4916ed2382\" successfully" Jul 10 00:45:09.038957 env[1210]: time="2025-07-10T00:45:09.034307398Z" level=info msg="StopPodSandbox for \"b84b082488c498ee101edac9ccb074ef00c948da04c445ef1696aa4916ed2382\" returns successfully" Jul 10 00:45:09.038957 env[1210]: time="2025-07-10T00:45:09.036127192Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-ffnv5,Uid:987d308c-16d4-4ea4-ad48-1ba4d53a2918,Namespace:kube-system,Attempt:1,}" Jul 10 00:45:09.037381 systemd[1]: run-netns-cni\x2d1c0da5f7\x2d3632\x2dae2b\x2d2ed2\x2d0797b196fbea.mount: Deactivated successfully. Jul 10 00:45:09.039223 kubelet[2000]: E0710 00:45:09.034764 2000 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:45:09.246020 systemd-networkd[1027]: cali8c808e80f7a: Link UP Jul 10 00:45:09.248325 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Jul 10 00:45:09.248420 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali8c808e80f7a: link becomes ready Jul 10 00:45:09.249136 systemd-networkd[1027]: cali8c808e80f7a: Gained carrier Jul 10 00:45:09.421795 env[1210]: 2025-07-10 00:45:09.099 [INFO][3676] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-coredns--674b8bbfcf--ffnv5-eth0 coredns-674b8bbfcf- kube-system 987d308c-16d4-4ea4-ad48-1ba4d53a2918 941 0 2025-07-10 00:44:28 +0000 UTC map[k8s-app:kube-dns pod-template-hash:674b8bbfcf projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s localhost coredns-674b8bbfcf-ffnv5 eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] cali8c808e80f7a [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] [] }} ContainerID="b0690a82ff123fa42219ea64b9905bff608ead64d83930ef00d63d37b782deb0" Namespace="kube-system" Pod="coredns-674b8bbfcf-ffnv5" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--ffnv5-" Jul 10 00:45:09.421795 env[1210]: 2025-07-10 00:45:09.100 [INFO][3676] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="b0690a82ff123fa42219ea64b9905bff608ead64d83930ef00d63d37b782deb0" Namespace="kube-system" Pod="coredns-674b8bbfcf-ffnv5" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--ffnv5-eth0" Jul 10 00:45:09.421795 env[1210]: 2025-07-10 00:45:09.127 [INFO][3702] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="b0690a82ff123fa42219ea64b9905bff608ead64d83930ef00d63d37b782deb0" HandleID="k8s-pod-network.b0690a82ff123fa42219ea64b9905bff608ead64d83930ef00d63d37b782deb0" Workload="localhost-k8s-coredns--674b8bbfcf--ffnv5-eth0" Jul 10 00:45:09.421795 env[1210]: 2025-07-10 00:45:09.127 [INFO][3702] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="b0690a82ff123fa42219ea64b9905bff608ead64d83930ef00d63d37b782deb0" HandleID="k8s-pod-network.b0690a82ff123fa42219ea64b9905bff608ead64d83930ef00d63d37b782deb0" Workload="localhost-k8s-coredns--674b8bbfcf--ffnv5-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc00052eb30), Attrs:map[string]string{"namespace":"kube-system", "node":"localhost", "pod":"coredns-674b8bbfcf-ffnv5", "timestamp":"2025-07-10 00:45:09.127106836 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 10 00:45:09.421795 env[1210]: 2025-07-10 00:45:09.127 [INFO][3702] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:45:09.421795 env[1210]: 2025-07-10 00:45:09.127 [INFO][3702] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:45:09.421795 env[1210]: 2025-07-10 00:45:09.127 [INFO][3702] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 10 00:45:09.421795 env[1210]: 2025-07-10 00:45:09.134 [INFO][3702] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.b0690a82ff123fa42219ea64b9905bff608ead64d83930ef00d63d37b782deb0" host="localhost" Jul 10 00:45:09.421795 env[1210]: 2025-07-10 00:45:09.142 [INFO][3702] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 10 00:45:09.421795 env[1210]: 2025-07-10 00:45:09.147 [INFO][3702] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 10 00:45:09.421795 env[1210]: 2025-07-10 00:45:09.148 [INFO][3702] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 10 00:45:09.421795 env[1210]: 2025-07-10 00:45:09.150 [INFO][3702] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 10 00:45:09.421795 env[1210]: 2025-07-10 00:45:09.150 [INFO][3702] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.b0690a82ff123fa42219ea64b9905bff608ead64d83930ef00d63d37b782deb0" host="localhost" Jul 10 00:45:09.421795 env[1210]: 2025-07-10 00:45:09.151 [INFO][3702] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.b0690a82ff123fa42219ea64b9905bff608ead64d83930ef00d63d37b782deb0 Jul 10 00:45:09.421795 env[1210]: 2025-07-10 00:45:09.198 [INFO][3702] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.b0690a82ff123fa42219ea64b9905bff608ead64d83930ef00d63d37b782deb0" host="localhost" Jul 10 00:45:09.421795 env[1210]: 2025-07-10 00:45:09.241 [INFO][3702] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.130/26] block=192.168.88.128/26 handle="k8s-pod-network.b0690a82ff123fa42219ea64b9905bff608ead64d83930ef00d63d37b782deb0" host="localhost" Jul 10 00:45:09.421795 env[1210]: 2025-07-10 00:45:09.241 [INFO][3702] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.130/26] handle="k8s-pod-network.b0690a82ff123fa42219ea64b9905bff608ead64d83930ef00d63d37b782deb0" host="localhost" Jul 10 00:45:09.421795 env[1210]: 2025-07-10 00:45:09.241 [INFO][3702] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:45:09.421795 env[1210]: 2025-07-10 00:45:09.241 [INFO][3702] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.130/26] IPv6=[] ContainerID="b0690a82ff123fa42219ea64b9905bff608ead64d83930ef00d63d37b782deb0" HandleID="k8s-pod-network.b0690a82ff123fa42219ea64b9905bff608ead64d83930ef00d63d37b782deb0" Workload="localhost-k8s-coredns--674b8bbfcf--ffnv5-eth0" Jul 10 00:45:09.422674 env[1210]: 2025-07-10 00:45:09.243 [INFO][3676] cni-plugin/k8s.go 418: Populated endpoint ContainerID="b0690a82ff123fa42219ea64b9905bff608ead64d83930ef00d63d37b782deb0" Namespace="kube-system" Pod="coredns-674b8bbfcf-ffnv5" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--ffnv5-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--674b8bbfcf--ffnv5-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"987d308c-16d4-4ea4-ad48-1ba4d53a2918", ResourceVersion:"941", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 44, 28, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"coredns-674b8bbfcf-ffnv5", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali8c808e80f7a", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:45:09.422674 env[1210]: 2025-07-10 00:45:09.243 [INFO][3676] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.130/32] ContainerID="b0690a82ff123fa42219ea64b9905bff608ead64d83930ef00d63d37b782deb0" Namespace="kube-system" Pod="coredns-674b8bbfcf-ffnv5" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--ffnv5-eth0" Jul 10 00:45:09.422674 env[1210]: 2025-07-10 00:45:09.243 [INFO][3676] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali8c808e80f7a ContainerID="b0690a82ff123fa42219ea64b9905bff608ead64d83930ef00d63d37b782deb0" Namespace="kube-system" Pod="coredns-674b8bbfcf-ffnv5" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--ffnv5-eth0" Jul 10 00:45:09.422674 env[1210]: 2025-07-10 00:45:09.248 [INFO][3676] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="b0690a82ff123fa42219ea64b9905bff608ead64d83930ef00d63d37b782deb0" Namespace="kube-system" Pod="coredns-674b8bbfcf-ffnv5" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--ffnv5-eth0" Jul 10 00:45:09.422674 env[1210]: 2025-07-10 00:45:09.249 [INFO][3676] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="b0690a82ff123fa42219ea64b9905bff608ead64d83930ef00d63d37b782deb0" Namespace="kube-system" Pod="coredns-674b8bbfcf-ffnv5" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--ffnv5-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--674b8bbfcf--ffnv5-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"987d308c-16d4-4ea4-ad48-1ba4d53a2918", ResourceVersion:"941", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 44, 28, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"b0690a82ff123fa42219ea64b9905bff608ead64d83930ef00d63d37b782deb0", Pod:"coredns-674b8bbfcf-ffnv5", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali8c808e80f7a", MAC:"16:15:20:d0:af:b7", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:45:09.422674 env[1210]: 2025-07-10 00:45:09.419 [INFO][3676] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="b0690a82ff123fa42219ea64b9905bff608ead64d83930ef00d63d37b782deb0" Namespace="kube-system" Pod="coredns-674b8bbfcf-ffnv5" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--ffnv5-eth0" Jul 10 00:45:09.434000 audit[3720]: NETFILTER_CFG table=filter:105 family=2 entries=42 op=nft_register_chain pid=3720 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 10 00:45:09.434000 audit[3720]: SYSCALL arch=c000003e syscall=46 success=yes exit=22552 a0=3 a1=7ffc0597c990 a2=0 a3=7ffc0597c97c items=0 ppid=3373 pid=3720 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:09.434000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 10 00:45:09.438776 env[1210]: time="2025-07-10T00:45:09.438682330Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 10 00:45:09.438776 env[1210]: time="2025-07-10T00:45:09.438738746Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 10 00:45:09.438776 env[1210]: time="2025-07-10T00:45:09.438755407Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 10 00:45:09.439188 env[1210]: time="2025-07-10T00:45:09.439010389Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/b0690a82ff123fa42219ea64b9905bff608ead64d83930ef00d63d37b782deb0 pid=3728 runtime=io.containerd.runc.v2 Jul 10 00:45:09.450526 systemd[1]: Started cri-containerd-b0690a82ff123fa42219ea64b9905bff608ead64d83930ef00d63d37b782deb0.scope. Jul 10 00:45:09.461000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:09.461000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:09.461000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:09.461000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:09.461000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:09.461000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:09.461000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:09.461000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:09.461000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:09.461000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:09.461000 audit: BPF prog-id=162 op=LOAD Jul 10 00:45:09.462000 audit[3738]: AVC avc: denied { bpf } for pid=3738 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:09.462000 audit[3738]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=3728 pid=3738 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:09.462000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6230363930613832666631323366613432323139656136346239393035 Jul 10 00:45:09.462000 audit[3738]: AVC avc: denied { perfmon } for pid=3738 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:09.462000 audit[3738]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=3728 pid=3738 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:09.462000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6230363930613832666631323366613432323139656136346239393035 Jul 10 00:45:09.462000 audit[3738]: AVC avc: denied { bpf } for pid=3738 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:09.462000 audit[3738]: AVC avc: denied { bpf } for pid=3738 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:09.462000 audit[3738]: AVC avc: denied { bpf } for pid=3738 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:09.462000 audit[3738]: AVC avc: denied { perfmon } for pid=3738 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:09.462000 audit[3738]: AVC avc: denied { perfmon } for pid=3738 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:09.462000 audit[3738]: AVC avc: denied { perfmon } for pid=3738 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:09.462000 audit[3738]: AVC avc: denied { perfmon } for pid=3738 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:09.462000 audit[3738]: AVC avc: denied { perfmon } for pid=3738 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:09.462000 audit[3738]: AVC avc: denied { bpf } for pid=3738 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:09.462000 audit[3738]: AVC avc: denied { bpf } for pid=3738 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:09.462000 audit: BPF prog-id=163 op=LOAD Jul 10 00:45:09.462000 audit[3738]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c000394090 items=0 ppid=3728 pid=3738 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:09.462000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6230363930613832666631323366613432323139656136346239393035 Jul 10 00:45:09.462000 audit[3738]: AVC avc: denied { bpf } for pid=3738 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:09.462000 audit[3738]: AVC avc: denied { bpf } for pid=3738 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:09.462000 audit[3738]: AVC avc: denied { perfmon } for pid=3738 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:09.462000 audit[3738]: AVC avc: denied { perfmon } for pid=3738 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:09.462000 audit[3738]: AVC avc: denied { perfmon } for pid=3738 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:09.462000 audit[3738]: AVC avc: denied { perfmon } for pid=3738 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:09.462000 audit[3738]: AVC avc: denied { perfmon } for pid=3738 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:09.462000 audit[3738]: AVC avc: denied { bpf } for pid=3738 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:09.462000 audit[3738]: AVC avc: denied { bpf } for pid=3738 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:09.462000 audit: BPF prog-id=164 op=LOAD Jul 10 00:45:09.462000 audit[3738]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0003940d8 items=0 ppid=3728 pid=3738 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:09.462000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6230363930613832666631323366613432323139656136346239393035 Jul 10 00:45:09.462000 audit: BPF prog-id=164 op=UNLOAD Jul 10 00:45:09.462000 audit: BPF prog-id=163 op=UNLOAD Jul 10 00:45:09.462000 audit[3738]: AVC avc: denied { bpf } for pid=3738 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:09.462000 audit[3738]: AVC avc: denied { bpf } for pid=3738 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:09.462000 audit[3738]: AVC avc: denied { bpf } for pid=3738 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:09.462000 audit[3738]: AVC avc: denied { perfmon } for pid=3738 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:09.462000 audit[3738]: AVC avc: denied { perfmon } for pid=3738 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:09.462000 audit[3738]: AVC avc: denied { perfmon } for pid=3738 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:09.462000 audit[3738]: AVC avc: denied { perfmon } for pid=3738 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:09.462000 audit[3738]: AVC avc: denied { perfmon } for pid=3738 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:09.462000 audit[3738]: AVC avc: denied { bpf } for pid=3738 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:09.462000 audit[3738]: AVC avc: denied { bpf } for pid=3738 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:09.462000 audit: BPF prog-id=165 op=LOAD Jul 10 00:45:09.462000 audit[3738]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0003944e8 items=0 ppid=3728 pid=3738 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:09.462000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6230363930613832666631323366613432323139656136346239393035 Jul 10 00:45:09.464447 systemd-resolved[1143]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 10 00:45:09.485283 env[1210]: time="2025-07-10T00:45:09.485229006Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-ffnv5,Uid:987d308c-16d4-4ea4-ad48-1ba4d53a2918,Namespace:kube-system,Attempt:1,} returns sandbox id \"b0690a82ff123fa42219ea64b9905bff608ead64d83930ef00d63d37b782deb0\"" Jul 10 00:45:09.490054 kubelet[2000]: E0710 00:45:09.486142 2000 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:45:09.502971 systemd-networkd[1027]: vxlan.calico: Gained IPv6LL Jul 10 00:45:09.580154 env[1210]: time="2025-07-10T00:45:09.580109881Z" level=info msg="CreateContainer within sandbox \"b0690a82ff123fa42219ea64b9905bff608ead64d83930ef00d63d37b782deb0\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Jul 10 00:45:09.682202 env[1210]: time="2025-07-10T00:45:09.682092487Z" level=info msg="StopPodSandbox for \"e088b4fa64ce58bd102e89b3e973569ef5f7d0da6d336068407c752f60657218\"" Jul 10 00:45:09.682786 env[1210]: time="2025-07-10T00:45:09.682096074Z" level=info msg="StopPodSandbox for \"a6a871d605560fe8d98e2baf90bb42a3dd9c1190ff7c730774a37205b055ca5c\"" Jul 10 00:45:09.994561 systemd-networkd[1027]: cali5d4beb0d598: Link UP Jul 10 00:45:10.062027 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali5d4beb0d598: link becomes ready Jul 10 00:45:10.063172 systemd-networkd[1027]: cali5d4beb0d598: Gained carrier Jul 10 00:45:10.151827 env[1210]: 2025-07-10 00:45:09.093 [INFO][3666] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-calico--apiserver--7b8bd7bfc9--7mdpn-eth0 calico-apiserver-7b8bd7bfc9- calico-apiserver bd35914e-3d9d-48a8-9a13-4f3678b36e0a 940 0 2025-07-10 00:44:39 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:7b8bd7bfc9 projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s localhost calico-apiserver-7b8bd7bfc9-7mdpn eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] cali5d4beb0d598 [] [] }} ContainerID="a3b5605e69aecaece53871d945d3ed5f4e877b2983ad2800667e08edae6e3267" Namespace="calico-apiserver" Pod="calico-apiserver-7b8bd7bfc9-7mdpn" WorkloadEndpoint="localhost-k8s-calico--apiserver--7b8bd7bfc9--7mdpn-" Jul 10 00:45:10.151827 env[1210]: 2025-07-10 00:45:09.093 [INFO][3666] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="a3b5605e69aecaece53871d945d3ed5f4e877b2983ad2800667e08edae6e3267" Namespace="calico-apiserver" Pod="calico-apiserver-7b8bd7bfc9-7mdpn" WorkloadEndpoint="localhost-k8s-calico--apiserver--7b8bd7bfc9--7mdpn-eth0" Jul 10 00:45:10.151827 env[1210]: 2025-07-10 00:45:09.132 [INFO][3694] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="a3b5605e69aecaece53871d945d3ed5f4e877b2983ad2800667e08edae6e3267" HandleID="k8s-pod-network.a3b5605e69aecaece53871d945d3ed5f4e877b2983ad2800667e08edae6e3267" Workload="localhost-k8s-calico--apiserver--7b8bd7bfc9--7mdpn-eth0" Jul 10 00:45:10.151827 env[1210]: 2025-07-10 00:45:09.133 [INFO][3694] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="a3b5605e69aecaece53871d945d3ed5f4e877b2983ad2800667e08edae6e3267" HandleID="k8s-pod-network.a3b5605e69aecaece53871d945d3ed5f4e877b2983ad2800667e08edae6e3267" Workload="localhost-k8s-calico--apiserver--7b8bd7bfc9--7mdpn-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc00035fd80), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"localhost", "pod":"calico-apiserver-7b8bd7bfc9-7mdpn", "timestamp":"2025-07-10 00:45:09.132729695 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 10 00:45:10.151827 env[1210]: 2025-07-10 00:45:09.133 [INFO][3694] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:45:10.151827 env[1210]: 2025-07-10 00:45:09.241 [INFO][3694] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:45:10.151827 env[1210]: 2025-07-10 00:45:09.242 [INFO][3694] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 10 00:45:10.151827 env[1210]: 2025-07-10 00:45:09.252 [INFO][3694] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.a3b5605e69aecaece53871d945d3ed5f4e877b2983ad2800667e08edae6e3267" host="localhost" Jul 10 00:45:10.151827 env[1210]: 2025-07-10 00:45:09.423 [INFO][3694] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 10 00:45:10.151827 env[1210]: 2025-07-10 00:45:09.431 [INFO][3694] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 10 00:45:10.151827 env[1210]: 2025-07-10 00:45:09.433 [INFO][3694] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 10 00:45:10.151827 env[1210]: 2025-07-10 00:45:09.435 [INFO][3694] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 10 00:45:10.151827 env[1210]: 2025-07-10 00:45:09.435 [INFO][3694] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.a3b5605e69aecaece53871d945d3ed5f4e877b2983ad2800667e08edae6e3267" host="localhost" Jul 10 00:45:10.151827 env[1210]: 2025-07-10 00:45:09.437 [INFO][3694] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.a3b5605e69aecaece53871d945d3ed5f4e877b2983ad2800667e08edae6e3267 Jul 10 00:45:10.151827 env[1210]: 2025-07-10 00:45:09.702 [INFO][3694] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.a3b5605e69aecaece53871d945d3ed5f4e877b2983ad2800667e08edae6e3267" host="localhost" Jul 10 00:45:10.151827 env[1210]: 2025-07-10 00:45:09.989 [INFO][3694] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.131/26] block=192.168.88.128/26 handle="k8s-pod-network.a3b5605e69aecaece53871d945d3ed5f4e877b2983ad2800667e08edae6e3267" host="localhost" Jul 10 00:45:10.151827 env[1210]: 2025-07-10 00:45:09.989 [INFO][3694] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.131/26] handle="k8s-pod-network.a3b5605e69aecaece53871d945d3ed5f4e877b2983ad2800667e08edae6e3267" host="localhost" Jul 10 00:45:10.151827 env[1210]: 2025-07-10 00:45:09.989 [INFO][3694] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:45:10.151827 env[1210]: 2025-07-10 00:45:09.989 [INFO][3694] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.131/26] IPv6=[] ContainerID="a3b5605e69aecaece53871d945d3ed5f4e877b2983ad2800667e08edae6e3267" HandleID="k8s-pod-network.a3b5605e69aecaece53871d945d3ed5f4e877b2983ad2800667e08edae6e3267" Workload="localhost-k8s-calico--apiserver--7b8bd7bfc9--7mdpn-eth0" Jul 10 00:45:10.152568 env[1210]: 2025-07-10 00:45:09.992 [INFO][3666] cni-plugin/k8s.go 418: Populated endpoint ContainerID="a3b5605e69aecaece53871d945d3ed5f4e877b2983ad2800667e08edae6e3267" Namespace="calico-apiserver" Pod="calico-apiserver-7b8bd7bfc9-7mdpn" WorkloadEndpoint="localhost-k8s-calico--apiserver--7b8bd7bfc9--7mdpn-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--7b8bd7bfc9--7mdpn-eth0", GenerateName:"calico-apiserver-7b8bd7bfc9-", Namespace:"calico-apiserver", SelfLink:"", UID:"bd35914e-3d9d-48a8-9a13-4f3678b36e0a", ResourceVersion:"940", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 44, 39, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"7b8bd7bfc9", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"calico-apiserver-7b8bd7bfc9-7mdpn", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali5d4beb0d598", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:45:10.152568 env[1210]: 2025-07-10 00:45:09.992 [INFO][3666] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.131/32] ContainerID="a3b5605e69aecaece53871d945d3ed5f4e877b2983ad2800667e08edae6e3267" Namespace="calico-apiserver" Pod="calico-apiserver-7b8bd7bfc9-7mdpn" WorkloadEndpoint="localhost-k8s-calico--apiserver--7b8bd7bfc9--7mdpn-eth0" Jul 10 00:45:10.152568 env[1210]: 2025-07-10 00:45:09.992 [INFO][3666] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali5d4beb0d598 ContainerID="a3b5605e69aecaece53871d945d3ed5f4e877b2983ad2800667e08edae6e3267" Namespace="calico-apiserver" Pod="calico-apiserver-7b8bd7bfc9-7mdpn" WorkloadEndpoint="localhost-k8s-calico--apiserver--7b8bd7bfc9--7mdpn-eth0" Jul 10 00:45:10.152568 env[1210]: 2025-07-10 00:45:10.062 [INFO][3666] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="a3b5605e69aecaece53871d945d3ed5f4e877b2983ad2800667e08edae6e3267" Namespace="calico-apiserver" Pod="calico-apiserver-7b8bd7bfc9-7mdpn" WorkloadEndpoint="localhost-k8s-calico--apiserver--7b8bd7bfc9--7mdpn-eth0" Jul 10 00:45:10.152568 env[1210]: 2025-07-10 00:45:10.063 [INFO][3666] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="a3b5605e69aecaece53871d945d3ed5f4e877b2983ad2800667e08edae6e3267" Namespace="calico-apiserver" Pod="calico-apiserver-7b8bd7bfc9-7mdpn" WorkloadEndpoint="localhost-k8s-calico--apiserver--7b8bd7bfc9--7mdpn-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--7b8bd7bfc9--7mdpn-eth0", GenerateName:"calico-apiserver-7b8bd7bfc9-", Namespace:"calico-apiserver", SelfLink:"", UID:"bd35914e-3d9d-48a8-9a13-4f3678b36e0a", ResourceVersion:"940", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 44, 39, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"7b8bd7bfc9", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"a3b5605e69aecaece53871d945d3ed5f4e877b2983ad2800667e08edae6e3267", Pod:"calico-apiserver-7b8bd7bfc9-7mdpn", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali5d4beb0d598", MAC:"ae:91:99:10:3d:bf", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:45:10.152568 env[1210]: 2025-07-10 00:45:10.149 [INFO][3666] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="a3b5605e69aecaece53871d945d3ed5f4e877b2983ad2800667e08edae6e3267" Namespace="calico-apiserver" Pod="calico-apiserver-7b8bd7bfc9-7mdpn" WorkloadEndpoint="localhost-k8s-calico--apiserver--7b8bd7bfc9--7mdpn-eth0" Jul 10 00:45:10.170816 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1512194389.mount: Deactivated successfully. Jul 10 00:45:10.186545 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1592485869.mount: Deactivated successfully. Jul 10 00:45:10.187000 audit[3822]: NETFILTER_CFG table=filter:106 family=2 entries=54 op=nft_register_chain pid=3822 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 10 00:45:10.187000 audit[3822]: SYSCALL arch=c000003e syscall=46 success=yes exit=29396 a0=3 a1=7fffa2f6def0 a2=0 a3=7fffa2f6dedc items=0 ppid=3373 pid=3822 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:10.187000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 10 00:45:10.196029 env[1210]: time="2025-07-10T00:45:10.195962020Z" level=info msg="CreateContainer within sandbox \"b0690a82ff123fa42219ea64b9905bff608ead64d83930ef00d63d37b782deb0\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"ed1ac0419d407b523ba283ba565fe6ed584b4e6064ca8da5229f5fb471a35fd0\"" Jul 10 00:45:10.197343 env[1210]: time="2025-07-10T00:45:10.197309021Z" level=info msg="StartContainer for \"ed1ac0419d407b523ba283ba565fe6ed584b4e6064ca8da5229f5fb471a35fd0\"" Jul 10 00:45:10.202002 env[1210]: time="2025-07-10T00:45:10.201898379Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 10 00:45:10.202216 env[1210]: time="2025-07-10T00:45:10.201999250Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 10 00:45:10.202216 env[1210]: time="2025-07-10T00:45:10.202019759Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 10 00:45:10.202355 env[1210]: time="2025-07-10T00:45:10.202308183Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/a3b5605e69aecaece53871d945d3ed5f4e877b2983ad2800667e08edae6e3267 pid=3832 runtime=io.containerd.runc.v2 Jul 10 00:45:10.208132 env[1210]: 2025-07-10 00:45:10.148 [INFO][3782] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="e088b4fa64ce58bd102e89b3e973569ef5f7d0da6d336068407c752f60657218" Jul 10 00:45:10.208132 env[1210]: 2025-07-10 00:45:10.148 [INFO][3782] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="e088b4fa64ce58bd102e89b3e973569ef5f7d0da6d336068407c752f60657218" iface="eth0" netns="/var/run/netns/cni-2b0a76ea-b6a0-496b-8569-cc2a99b5a9da" Jul 10 00:45:10.208132 env[1210]: 2025-07-10 00:45:10.148 [INFO][3782] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="e088b4fa64ce58bd102e89b3e973569ef5f7d0da6d336068407c752f60657218" iface="eth0" netns="/var/run/netns/cni-2b0a76ea-b6a0-496b-8569-cc2a99b5a9da" Jul 10 00:45:10.208132 env[1210]: 2025-07-10 00:45:10.165 [INFO][3782] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="e088b4fa64ce58bd102e89b3e973569ef5f7d0da6d336068407c752f60657218" iface="eth0" netns="/var/run/netns/cni-2b0a76ea-b6a0-496b-8569-cc2a99b5a9da" Jul 10 00:45:10.208132 env[1210]: 2025-07-10 00:45:10.165 [INFO][3782] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="e088b4fa64ce58bd102e89b3e973569ef5f7d0da6d336068407c752f60657218" Jul 10 00:45:10.208132 env[1210]: 2025-07-10 00:45:10.165 [INFO][3782] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="e088b4fa64ce58bd102e89b3e973569ef5f7d0da6d336068407c752f60657218" Jul 10 00:45:10.208132 env[1210]: 2025-07-10 00:45:10.190 [INFO][3808] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="e088b4fa64ce58bd102e89b3e973569ef5f7d0da6d336068407c752f60657218" HandleID="k8s-pod-network.e088b4fa64ce58bd102e89b3e973569ef5f7d0da6d336068407c752f60657218" Workload="localhost-k8s-calico--kube--controllers--6fbf996c46--f5zkt-eth0" Jul 10 00:45:10.208132 env[1210]: 2025-07-10 00:45:10.190 [INFO][3808] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:45:10.208132 env[1210]: 2025-07-10 00:45:10.190 [INFO][3808] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:45:10.208132 env[1210]: 2025-07-10 00:45:10.196 [WARNING][3808] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="e088b4fa64ce58bd102e89b3e973569ef5f7d0da6d336068407c752f60657218" HandleID="k8s-pod-network.e088b4fa64ce58bd102e89b3e973569ef5f7d0da6d336068407c752f60657218" Workload="localhost-k8s-calico--kube--controllers--6fbf996c46--f5zkt-eth0" Jul 10 00:45:10.208132 env[1210]: 2025-07-10 00:45:10.196 [INFO][3808] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="e088b4fa64ce58bd102e89b3e973569ef5f7d0da6d336068407c752f60657218" HandleID="k8s-pod-network.e088b4fa64ce58bd102e89b3e973569ef5f7d0da6d336068407c752f60657218" Workload="localhost-k8s-calico--kube--controllers--6fbf996c46--f5zkt-eth0" Jul 10 00:45:10.208132 env[1210]: 2025-07-10 00:45:10.200 [INFO][3808] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:45:10.208132 env[1210]: 2025-07-10 00:45:10.204 [INFO][3782] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="e088b4fa64ce58bd102e89b3e973569ef5f7d0da6d336068407c752f60657218" Jul 10 00:45:10.208867 env[1210]: time="2025-07-10T00:45:10.208819488Z" level=info msg="TearDown network for sandbox \"e088b4fa64ce58bd102e89b3e973569ef5f7d0da6d336068407c752f60657218\" successfully" Jul 10 00:45:10.208951 env[1210]: time="2025-07-10T00:45:10.208928894Z" level=info msg="StopPodSandbox for \"e088b4fa64ce58bd102e89b3e973569ef5f7d0da6d336068407c752f60657218\" returns successfully" Jul 10 00:45:10.209789 env[1210]: time="2025-07-10T00:45:10.209753370Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-6fbf996c46-f5zkt,Uid:ddc62d5a-12e9-476f-81ea-fecce29e2a58,Namespace:calico-system,Attempt:1,}" Jul 10 00:45:10.220303 systemd[1]: Started cri-containerd-ed1ac0419d407b523ba283ba565fe6ed584b4e6064ca8da5229f5fb471a35fd0.scope. Jul 10 00:45:10.226562 env[1210]: 2025-07-10 00:45:10.166 [INFO][3783] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="a6a871d605560fe8d98e2baf90bb42a3dd9c1190ff7c730774a37205b055ca5c" Jul 10 00:45:10.226562 env[1210]: 2025-07-10 00:45:10.167 [INFO][3783] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="a6a871d605560fe8d98e2baf90bb42a3dd9c1190ff7c730774a37205b055ca5c" iface="eth0" netns="/var/run/netns/cni-db6f3b11-40f3-aca2-2844-d0958badeb97" Jul 10 00:45:10.226562 env[1210]: 2025-07-10 00:45:10.167 [INFO][3783] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="a6a871d605560fe8d98e2baf90bb42a3dd9c1190ff7c730774a37205b055ca5c" iface="eth0" netns="/var/run/netns/cni-db6f3b11-40f3-aca2-2844-d0958badeb97" Jul 10 00:45:10.226562 env[1210]: 2025-07-10 00:45:10.168 [INFO][3783] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="a6a871d605560fe8d98e2baf90bb42a3dd9c1190ff7c730774a37205b055ca5c" iface="eth0" netns="/var/run/netns/cni-db6f3b11-40f3-aca2-2844-d0958badeb97" Jul 10 00:45:10.226562 env[1210]: 2025-07-10 00:45:10.168 [INFO][3783] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="a6a871d605560fe8d98e2baf90bb42a3dd9c1190ff7c730774a37205b055ca5c" Jul 10 00:45:10.226562 env[1210]: 2025-07-10 00:45:10.168 [INFO][3783] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="a6a871d605560fe8d98e2baf90bb42a3dd9c1190ff7c730774a37205b055ca5c" Jul 10 00:45:10.226562 env[1210]: 2025-07-10 00:45:10.211 [INFO][3811] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="a6a871d605560fe8d98e2baf90bb42a3dd9c1190ff7c730774a37205b055ca5c" HandleID="k8s-pod-network.a6a871d605560fe8d98e2baf90bb42a3dd9c1190ff7c730774a37205b055ca5c" Workload="localhost-k8s-csi--node--driver--2mgd9-eth0" Jul 10 00:45:10.226562 env[1210]: 2025-07-10 00:45:10.211 [INFO][3811] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:45:10.226562 env[1210]: 2025-07-10 00:45:10.211 [INFO][3811] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:45:10.226562 env[1210]: 2025-07-10 00:45:10.218 [WARNING][3811] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="a6a871d605560fe8d98e2baf90bb42a3dd9c1190ff7c730774a37205b055ca5c" HandleID="k8s-pod-network.a6a871d605560fe8d98e2baf90bb42a3dd9c1190ff7c730774a37205b055ca5c" Workload="localhost-k8s-csi--node--driver--2mgd9-eth0" Jul 10 00:45:10.226562 env[1210]: 2025-07-10 00:45:10.218 [INFO][3811] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="a6a871d605560fe8d98e2baf90bb42a3dd9c1190ff7c730774a37205b055ca5c" HandleID="k8s-pod-network.a6a871d605560fe8d98e2baf90bb42a3dd9c1190ff7c730774a37205b055ca5c" Workload="localhost-k8s-csi--node--driver--2mgd9-eth0" Jul 10 00:45:10.226562 env[1210]: 2025-07-10 00:45:10.221 [INFO][3811] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:45:10.226562 env[1210]: 2025-07-10 00:45:10.224 [INFO][3783] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="a6a871d605560fe8d98e2baf90bb42a3dd9c1190ff7c730774a37205b055ca5c" Jul 10 00:45:10.230359 env[1210]: time="2025-07-10T00:45:10.226693692Z" level=info msg="TearDown network for sandbox \"a6a871d605560fe8d98e2baf90bb42a3dd9c1190ff7c730774a37205b055ca5c\" successfully" Jul 10 00:45:10.230359 env[1210]: time="2025-07-10T00:45:10.226723758Z" level=info msg="StopPodSandbox for \"a6a871d605560fe8d98e2baf90bb42a3dd9c1190ff7c730774a37205b055ca5c\" returns successfully" Jul 10 00:45:10.230359 env[1210]: time="2025-07-10T00:45:10.227418299Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-2mgd9,Uid:8653425f-9c3b-4f40-adcd-044ce9ce6d7e,Namespace:calico-system,Attempt:1,}" Jul 10 00:45:10.247763 kernel: kauditd_printk_skb: 716 callbacks suppressed Jul 10 00:45:10.247907 kernel: audit: type=1400 audit(1752108310.242:1151): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:10.247948 kernel: audit: type=1400 audit(1752108310.242:1152): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:10.242000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:10.242000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:10.240648 systemd[1]: Started cri-containerd-a3b5605e69aecaece53871d945d3ed5f4e877b2983ad2800667e08edae6e3267.scope. Jul 10 00:45:10.242000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:10.254737 kernel: audit: type=1400 audit(1752108310.242:1153): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:10.242000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:10.259092 kernel: audit: type=1400 audit(1752108310.242:1154): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:10.242000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:10.269510 kernel: audit: type=1400 audit(1752108310.242:1155): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:10.269730 kernel: audit: type=1400 audit(1752108310.242:1156): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:10.242000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:10.242000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:10.278144 kernel: audit: type=1400 audit(1752108310.242:1157): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:10.278216 kernel: audit: type=1400 audit(1752108310.242:1158): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:10.242000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:10.283054 kernel: audit: type=1400 audit(1752108310.242:1159): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:10.242000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:10.288298 kernel: audit: type=1400 audit(1752108310.243:1160): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:10.243000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:10.243000 audit: BPF prog-id=166 op=LOAD Jul 10 00:45:10.243000 audit[3849]: AVC avc: denied { bpf } for pid=3849 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:10.243000 audit[3849]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=3728 pid=3849 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:10.243000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6564316163303431396434303762353233626132383362613536356665 Jul 10 00:45:10.243000 audit[3849]: AVC avc: denied { perfmon } for pid=3849 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:10.243000 audit[3849]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=3728 pid=3849 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:10.243000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6564316163303431396434303762353233626132383362613536356665 Jul 10 00:45:10.243000 audit[3849]: AVC avc: denied { bpf } for pid=3849 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:10.243000 audit[3849]: AVC avc: denied { bpf } for pid=3849 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:10.243000 audit[3849]: AVC avc: denied { bpf } for pid=3849 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:10.243000 audit[3849]: AVC avc: denied { perfmon } for pid=3849 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:10.243000 audit[3849]: AVC avc: denied { perfmon } for pid=3849 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:10.243000 audit[3849]: AVC avc: denied { perfmon } for pid=3849 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:10.243000 audit[3849]: AVC avc: denied { perfmon } for pid=3849 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:10.243000 audit[3849]: AVC avc: denied { perfmon } for pid=3849 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:10.243000 audit[3849]: AVC avc: denied { bpf } for pid=3849 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:10.243000 audit[3849]: AVC avc: denied { bpf } for pid=3849 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:10.243000 audit: BPF prog-id=167 op=LOAD Jul 10 00:45:10.243000 audit[3849]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0003aa2a0 items=0 ppid=3728 pid=3849 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:10.243000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6564316163303431396434303762353233626132383362613536356665 Jul 10 00:45:10.246000 audit[3849]: AVC avc: denied { bpf } for pid=3849 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:10.246000 audit[3849]: AVC avc: denied { bpf } for pid=3849 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:10.246000 audit[3849]: AVC avc: denied { perfmon } for pid=3849 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:10.246000 audit[3849]: AVC avc: denied { perfmon } for pid=3849 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:10.246000 audit[3849]: AVC avc: denied { perfmon } for pid=3849 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:10.246000 audit[3849]: AVC avc: denied { perfmon } for pid=3849 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:10.246000 audit[3849]: AVC avc: denied { perfmon } for pid=3849 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:10.246000 audit[3849]: AVC avc: denied { bpf } for pid=3849 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:10.246000 audit[3849]: AVC avc: denied { bpf } for pid=3849 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:10.246000 audit: BPF prog-id=168 op=LOAD Jul 10 00:45:10.246000 audit[3849]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0003aa2e8 items=0 ppid=3728 pid=3849 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:10.246000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6564316163303431396434303762353233626132383362613536356665 Jul 10 00:45:10.254000 audit: BPF prog-id=168 op=UNLOAD Jul 10 00:45:10.254000 audit: BPF prog-id=167 op=UNLOAD Jul 10 00:45:10.254000 audit[3849]: AVC avc: denied { bpf } for pid=3849 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:10.254000 audit[3849]: AVC avc: denied { bpf } for pid=3849 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:10.254000 audit[3849]: AVC avc: denied { bpf } for pid=3849 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:10.254000 audit[3849]: AVC avc: denied { perfmon } for pid=3849 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:10.254000 audit[3849]: AVC avc: denied { perfmon } for pid=3849 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:10.254000 audit[3849]: AVC avc: denied { perfmon } for pid=3849 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:10.254000 audit[3849]: AVC avc: denied { perfmon } for pid=3849 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:10.254000 audit[3849]: AVC avc: denied { perfmon } for pid=3849 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:10.254000 audit[3849]: AVC avc: denied { bpf } for pid=3849 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:10.254000 audit[3849]: AVC avc: denied { bpf } for pid=3849 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:10.254000 audit: BPF prog-id=169 op=LOAD Jul 10 00:45:10.254000 audit[3849]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0003aa6f8 items=0 ppid=3728 pid=3849 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:10.254000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6564316163303431396434303762353233626132383362613536356665 Jul 10 00:45:10.273000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:10.273000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:10.273000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:10.273000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:10.273000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:10.273000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:10.273000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:10.273000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:10.273000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:10.277000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:10.277000 audit: BPF prog-id=170 op=LOAD Jul 10 00:45:10.277000 audit[3868]: AVC avc: denied { bpf } for pid=3868 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:10.277000 audit[3868]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=3832 pid=3868 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:10.277000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6133623536303565363961656361656365353338373164393435643365 Jul 10 00:45:10.291000 audit[3868]: AVC avc: denied { perfmon } for pid=3868 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:10.291000 audit[3868]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=3832 pid=3868 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:10.291000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6133623536303565363961656361656365353338373164393435643365 Jul 10 00:45:10.291000 audit[3868]: AVC avc: denied { bpf } for pid=3868 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:10.291000 audit[3868]: AVC avc: denied { bpf } for pid=3868 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:10.291000 audit[3868]: AVC avc: denied { bpf } for pid=3868 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:10.291000 audit[3868]: AVC avc: denied { perfmon } for pid=3868 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:10.291000 audit[3868]: AVC avc: denied { perfmon } for pid=3868 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:10.291000 audit[3868]: AVC avc: denied { perfmon } for pid=3868 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:10.291000 audit[3868]: AVC avc: denied { perfmon } for pid=3868 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:10.291000 audit[3868]: AVC avc: denied { perfmon } for pid=3868 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:10.291000 audit[3868]: AVC avc: denied { bpf } for pid=3868 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:10.291000 audit[3868]: AVC avc: denied { bpf } for pid=3868 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:10.291000 audit: BPF prog-id=171 op=LOAD Jul 10 00:45:10.291000 audit[3868]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001979d8 a2=78 a3=c000225df0 items=0 ppid=3832 pid=3868 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:10.291000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6133623536303565363961656361656365353338373164393435643365 Jul 10 00:45:10.291000 audit[3868]: AVC avc: denied { bpf } for pid=3868 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:10.291000 audit[3868]: AVC avc: denied { bpf } for pid=3868 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:10.291000 audit[3868]: AVC avc: denied { perfmon } for pid=3868 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:10.291000 audit[3868]: AVC avc: denied { perfmon } for pid=3868 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:10.291000 audit[3868]: AVC avc: denied { perfmon } for pid=3868 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:10.291000 audit[3868]: AVC avc: denied { perfmon } for pid=3868 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:10.291000 audit[3868]: AVC avc: denied { perfmon } for pid=3868 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:10.291000 audit[3868]: AVC avc: denied { bpf } for pid=3868 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:10.291000 audit[3868]: AVC avc: denied { bpf } for pid=3868 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:10.291000 audit: BPF prog-id=172 op=LOAD Jul 10 00:45:10.291000 audit[3868]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000197770 a2=78 a3=c000225e38 items=0 ppid=3832 pid=3868 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:10.291000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6133623536303565363961656361656365353338373164393435643365 Jul 10 00:45:10.291000 audit: BPF prog-id=172 op=UNLOAD Jul 10 00:45:10.291000 audit: BPF prog-id=171 op=UNLOAD Jul 10 00:45:10.291000 audit[3868]: AVC avc: denied { bpf } for pid=3868 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:10.291000 audit[3868]: AVC avc: denied { bpf } for pid=3868 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:10.291000 audit[3868]: AVC avc: denied { bpf } for pid=3868 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:10.291000 audit[3868]: AVC avc: denied { perfmon } for pid=3868 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:10.291000 audit[3868]: AVC avc: denied { perfmon } for pid=3868 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:10.291000 audit[3868]: AVC avc: denied { perfmon } for pid=3868 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:10.291000 audit[3868]: AVC avc: denied { perfmon } for pid=3868 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:10.291000 audit[3868]: AVC avc: denied { perfmon } for pid=3868 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:10.291000 audit[3868]: AVC avc: denied { bpf } for pid=3868 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:10.291000 audit[3868]: AVC avc: denied { bpf } for pid=3868 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:10.291000 audit: BPF prog-id=173 op=LOAD Jul 10 00:45:10.291000 audit[3868]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000197c30 a2=78 a3=c0003aa248 items=0 ppid=3832 pid=3868 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:10.291000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6133623536303565363961656361656365353338373164393435643365 Jul 10 00:45:10.318502 systemd-resolved[1143]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 10 00:45:10.354936 env[1210]: time="2025-07-10T00:45:10.354879265Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-7b8bd7bfc9-7mdpn,Uid:bd35914e-3d9d-48a8-9a13-4f3678b36e0a,Namespace:calico-apiserver,Attempt:1,} returns sandbox id \"a3b5605e69aecaece53871d945d3ed5f4e877b2983ad2800667e08edae6e3267\"" Jul 10 00:45:10.666360 env[1210]: time="2025-07-10T00:45:10.666278123Z" level=info msg="StartContainer for \"ed1ac0419d407b523ba283ba565fe6ed584b4e6064ca8da5229f5fb471a35fd0\" returns successfully" Jul 10 00:45:10.682538 env[1210]: time="2025-07-10T00:45:10.682497645Z" level=info msg="StopPodSandbox for \"317a222f2045d2f01f5e1d9fdc4c36d61e4148988f0f93c66864ab12afa61081\"" Jul 10 00:45:10.890504 kubelet[2000]: E0710 00:45:10.890235 2000 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:45:10.911073 systemd-networkd[1027]: cali8c808e80f7a: Gained IPv6LL Jul 10 00:45:11.031277 systemd[1]: run-netns-cni\x2d2b0a76ea\x2db6a0\x2d496b\x2d8569\x2dcc2a99b5a9da.mount: Deactivated successfully. Jul 10 00:45:11.031366 systemd[1]: run-netns-cni\x2ddb6f3b11\x2d40f3\x2daca2\x2d2844\x2dd0958badeb97.mount: Deactivated successfully. Jul 10 00:45:11.049121 systemd[1]: Started sshd@9-10.0.0.116:22-10.0.0.1:42400.service. Jul 10 00:45:11.048000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.0.0.116:22-10.0.0.1:42400 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:11.070723 kubelet[2000]: I0710 00:45:11.066428 2000 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/coredns-674b8bbfcf-ffnv5" podStartSLOduration=43.066408772 podStartE2EDuration="43.066408772s" podCreationTimestamp="2025-07-10 00:44:28 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-10 00:45:11.063375198 +0000 UTC m=+47.469330843" watchObservedRunningTime="2025-07-10 00:45:11.066408772 +0000 UTC m=+47.472364407" Jul 10 00:45:11.077000 audit[3973]: NETFILTER_CFG table=filter:107 family=2 entries=20 op=nft_register_rule pid=3973 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:45:11.077000 audit[3973]: SYSCALL arch=c000003e syscall=46 success=yes exit=7480 a0=3 a1=7fff2cc55180 a2=0 a3=7fff2cc5516c items=0 ppid=2141 pid=3973 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:11.077000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:45:11.084000 audit[3973]: NETFILTER_CFG table=nat:108 family=2 entries=14 op=nft_register_rule pid=3973 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:45:11.084000 audit[3973]: SYSCALL arch=c000003e syscall=46 success=yes exit=3468 a0=3 a1=7fff2cc55180 a2=0 a3=0 items=0 ppid=2141 pid=3973 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:11.084000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:45:11.099000 audit[3952]: USER_ACCT pid=3952 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:45:11.100000 audit[3952]: CRED_ACQ pid=3952 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:45:11.101574 sshd[3952]: Accepted publickey for core from 10.0.0.1 port 42400 ssh2: RSA SHA256:suUhWV759MqU0C+Dl6JG8TPW8PqnqlsB4qushdi9Ejw Jul 10 00:45:11.101000 audit[3952]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff8dd61700 a2=3 a3=0 items=0 ppid=1 pid=3952 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:11.101000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 10 00:45:11.102836 sshd[3952]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 00:45:11.111396 systemd[1]: Started session-10.scope. Jul 10 00:45:11.111935 systemd-logind[1194]: New session 10 of user core. Jul 10 00:45:11.117000 audit[3952]: USER_START pid=3952 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:45:11.118000 audit[3978]: CRED_ACQ pid=3978 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:45:11.131000 audit[3863]: AVC avc: denied { getattr } for pid=3863 comm="coredns" path="cgroup:[4026532474]" dev="nsfs" ino=4026532474 scontext=system_u:system_r:svirt_lxc_net_t:s0:c272,c312 tcontext=system_u:object_r:nsfs_t:s0 tclass=file permissive=0 Jul 10 00:45:11.131000 audit[3863]: SYSCALL arch=c000003e syscall=262 success=no exit=-13 a0=ffffffffffffff9c a1=c000146ac8 a2=c0002ad558 a3=0 items=0 ppid=3728 pid=3863 auid=4294967295 uid=65532 gid=65532 euid=65532 suid=65532 fsuid=65532 egid=65532 sgid=65532 fsgid=65532 tty=(none) ses=4294967295 comm="coredns" exe="/coredns" subj=system_u:system_r:svirt_lxc_net_t:s0:c272,c312 key=(null) Jul 10 00:45:11.131000 audit: PROCTITLE proctitle=2F636F7265646E73002D636F6E66002F6574632F636F7265646E732F436F726566696C65 Jul 10 00:45:11.144037 env[1210]: 2025-07-10 00:45:11.069 [INFO][3943] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="317a222f2045d2f01f5e1d9fdc4c36d61e4148988f0f93c66864ab12afa61081" Jul 10 00:45:11.144037 env[1210]: 2025-07-10 00:45:11.070 [INFO][3943] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="317a222f2045d2f01f5e1d9fdc4c36d61e4148988f0f93c66864ab12afa61081" iface="eth0" netns="/var/run/netns/cni-67cddb1f-d4a4-d4de-0ccd-12c8713dd530" Jul 10 00:45:11.144037 env[1210]: 2025-07-10 00:45:11.070 [INFO][3943] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="317a222f2045d2f01f5e1d9fdc4c36d61e4148988f0f93c66864ab12afa61081" iface="eth0" netns="/var/run/netns/cni-67cddb1f-d4a4-d4de-0ccd-12c8713dd530" Jul 10 00:45:11.144037 env[1210]: 2025-07-10 00:45:11.070 [INFO][3943] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="317a222f2045d2f01f5e1d9fdc4c36d61e4148988f0f93c66864ab12afa61081" iface="eth0" netns="/var/run/netns/cni-67cddb1f-d4a4-d4de-0ccd-12c8713dd530" Jul 10 00:45:11.144037 env[1210]: 2025-07-10 00:45:11.070 [INFO][3943] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="317a222f2045d2f01f5e1d9fdc4c36d61e4148988f0f93c66864ab12afa61081" Jul 10 00:45:11.144037 env[1210]: 2025-07-10 00:45:11.070 [INFO][3943] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="317a222f2045d2f01f5e1d9fdc4c36d61e4148988f0f93c66864ab12afa61081" Jul 10 00:45:11.144037 env[1210]: 2025-07-10 00:45:11.121 [INFO][3964] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="317a222f2045d2f01f5e1d9fdc4c36d61e4148988f0f93c66864ab12afa61081" HandleID="k8s-pod-network.317a222f2045d2f01f5e1d9fdc4c36d61e4148988f0f93c66864ab12afa61081" Workload="localhost-k8s-goldmane--768f4c5c69--vbht5-eth0" Jul 10 00:45:11.144037 env[1210]: 2025-07-10 00:45:11.121 [INFO][3964] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:45:11.144037 env[1210]: 2025-07-10 00:45:11.121 [INFO][3964] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:45:11.144037 env[1210]: 2025-07-10 00:45:11.128 [WARNING][3964] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="317a222f2045d2f01f5e1d9fdc4c36d61e4148988f0f93c66864ab12afa61081" HandleID="k8s-pod-network.317a222f2045d2f01f5e1d9fdc4c36d61e4148988f0f93c66864ab12afa61081" Workload="localhost-k8s-goldmane--768f4c5c69--vbht5-eth0" Jul 10 00:45:11.144037 env[1210]: 2025-07-10 00:45:11.128 [INFO][3964] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="317a222f2045d2f01f5e1d9fdc4c36d61e4148988f0f93c66864ab12afa61081" HandleID="k8s-pod-network.317a222f2045d2f01f5e1d9fdc4c36d61e4148988f0f93c66864ab12afa61081" Workload="localhost-k8s-goldmane--768f4c5c69--vbht5-eth0" Jul 10 00:45:11.144037 env[1210]: 2025-07-10 00:45:11.129 [INFO][3964] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:45:11.144037 env[1210]: 2025-07-10 00:45:11.136 [INFO][3943] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="317a222f2045d2f01f5e1d9fdc4c36d61e4148988f0f93c66864ab12afa61081" Jul 10 00:45:11.146787 systemd[1]: run-netns-cni\x2d67cddb1f\x2dd4a4\x2dd4de\x2d0ccd\x2d12c8713dd530.mount: Deactivated successfully. Jul 10 00:45:11.148139 env[1210]: time="2025-07-10T00:45:11.148088772Z" level=info msg="TearDown network for sandbox \"317a222f2045d2f01f5e1d9fdc4c36d61e4148988f0f93c66864ab12afa61081\" successfully" Jul 10 00:45:11.148139 env[1210]: time="2025-07-10T00:45:11.148132896Z" level=info msg="StopPodSandbox for \"317a222f2045d2f01f5e1d9fdc4c36d61e4148988f0f93c66864ab12afa61081\" returns successfully" Jul 10 00:45:11.148895 env[1210]: time="2025-07-10T00:45:11.148867201Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-768f4c5c69-vbht5,Uid:990e1b75-6549-43f4-a7d2-6561d110faed,Namespace:calico-system,Attempt:1,}" Jul 10 00:45:11.210321 systemd-networkd[1027]: cali11a95a4ae14: Link UP Jul 10 00:45:11.234935 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali11a95a4ae14: link becomes ready Jul 10 00:45:11.235715 systemd-networkd[1027]: cali11a95a4ae14: Gained carrier Jul 10 00:45:11.284836 env[1210]: 2025-07-10 00:45:10.795 [INFO][3896] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-csi--node--driver--2mgd9-eth0 csi-node-driver- calico-system 8653425f-9c3b-4f40-adcd-044ce9ce6d7e 954 0 2025-07-10 00:44:42 +0000 UTC map[app.kubernetes.io/name:csi-node-driver controller-revision-hash:8967bcb6f k8s-app:csi-node-driver name:csi-node-driver pod-template-generation:1 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:csi-node-driver] map[] [] [] []} {k8s localhost csi-node-driver-2mgd9 eth0 csi-node-driver [] [] [kns.calico-system ksa.calico-system.csi-node-driver] cali11a95a4ae14 [] [] }} ContainerID="ae506496c119ec793aa67da57fea2cb24d235d0d207908600c4f38fb3c2ce0f9" Namespace="calico-system" Pod="csi-node-driver-2mgd9" WorkloadEndpoint="localhost-k8s-csi--node--driver--2mgd9-" Jul 10 00:45:11.284836 env[1210]: 2025-07-10 00:45:10.795 [INFO][3896] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="ae506496c119ec793aa67da57fea2cb24d235d0d207908600c4f38fb3c2ce0f9" Namespace="calico-system" Pod="csi-node-driver-2mgd9" WorkloadEndpoint="localhost-k8s-csi--node--driver--2mgd9-eth0" Jul 10 00:45:11.284836 env[1210]: 2025-07-10 00:45:11.123 [INFO][3954] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="ae506496c119ec793aa67da57fea2cb24d235d0d207908600c4f38fb3c2ce0f9" HandleID="k8s-pod-network.ae506496c119ec793aa67da57fea2cb24d235d0d207908600c4f38fb3c2ce0f9" Workload="localhost-k8s-csi--node--driver--2mgd9-eth0" Jul 10 00:45:11.284836 env[1210]: 2025-07-10 00:45:11.123 [INFO][3954] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="ae506496c119ec793aa67da57fea2cb24d235d0d207908600c4f38fb3c2ce0f9" HandleID="k8s-pod-network.ae506496c119ec793aa67da57fea2cb24d235d0d207908600c4f38fb3c2ce0f9" Workload="localhost-k8s-csi--node--driver--2mgd9-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc000325490), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"csi-node-driver-2mgd9", "timestamp":"2025-07-10 00:45:11.123399893 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 10 00:45:11.284836 env[1210]: 2025-07-10 00:45:11.124 [INFO][3954] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:45:11.284836 env[1210]: 2025-07-10 00:45:11.129 [INFO][3954] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:45:11.284836 env[1210]: 2025-07-10 00:45:11.129 [INFO][3954] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 10 00:45:11.284836 env[1210]: 2025-07-10 00:45:11.139 [INFO][3954] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.ae506496c119ec793aa67da57fea2cb24d235d0d207908600c4f38fb3c2ce0f9" host="localhost" Jul 10 00:45:11.284836 env[1210]: 2025-07-10 00:45:11.145 [INFO][3954] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 10 00:45:11.284836 env[1210]: 2025-07-10 00:45:11.149 [INFO][3954] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 10 00:45:11.284836 env[1210]: 2025-07-10 00:45:11.150 [INFO][3954] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 10 00:45:11.284836 env[1210]: 2025-07-10 00:45:11.161 [INFO][3954] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 10 00:45:11.284836 env[1210]: 2025-07-10 00:45:11.170 [INFO][3954] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.ae506496c119ec793aa67da57fea2cb24d235d0d207908600c4f38fb3c2ce0f9" host="localhost" Jul 10 00:45:11.284836 env[1210]: 2025-07-10 00:45:11.172 [INFO][3954] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.ae506496c119ec793aa67da57fea2cb24d235d0d207908600c4f38fb3c2ce0f9 Jul 10 00:45:11.284836 env[1210]: 2025-07-10 00:45:11.191 [INFO][3954] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.ae506496c119ec793aa67da57fea2cb24d235d0d207908600c4f38fb3c2ce0f9" host="localhost" Jul 10 00:45:11.284836 env[1210]: 2025-07-10 00:45:11.202 [INFO][3954] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.132/26] block=192.168.88.128/26 handle="k8s-pod-network.ae506496c119ec793aa67da57fea2cb24d235d0d207908600c4f38fb3c2ce0f9" host="localhost" Jul 10 00:45:11.284836 env[1210]: 2025-07-10 00:45:11.202 [INFO][3954] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.132/26] handle="k8s-pod-network.ae506496c119ec793aa67da57fea2cb24d235d0d207908600c4f38fb3c2ce0f9" host="localhost" Jul 10 00:45:11.284836 env[1210]: 2025-07-10 00:45:11.202 [INFO][3954] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:45:11.284836 env[1210]: 2025-07-10 00:45:11.202 [INFO][3954] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.132/26] IPv6=[] ContainerID="ae506496c119ec793aa67da57fea2cb24d235d0d207908600c4f38fb3c2ce0f9" HandleID="k8s-pod-network.ae506496c119ec793aa67da57fea2cb24d235d0d207908600c4f38fb3c2ce0f9" Workload="localhost-k8s-csi--node--driver--2mgd9-eth0" Jul 10 00:45:11.285629 env[1210]: 2025-07-10 00:45:11.207 [INFO][3896] cni-plugin/k8s.go 418: Populated endpoint ContainerID="ae506496c119ec793aa67da57fea2cb24d235d0d207908600c4f38fb3c2ce0f9" Namespace="calico-system" Pod="csi-node-driver-2mgd9" WorkloadEndpoint="localhost-k8s-csi--node--driver--2mgd9-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--2mgd9-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"8653425f-9c3b-4f40-adcd-044ce9ce6d7e", ResourceVersion:"954", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 44, 42, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"8967bcb6f", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"csi-node-driver-2mgd9", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali11a95a4ae14", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:45:11.285629 env[1210]: 2025-07-10 00:45:11.207 [INFO][3896] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.132/32] ContainerID="ae506496c119ec793aa67da57fea2cb24d235d0d207908600c4f38fb3c2ce0f9" Namespace="calico-system" Pod="csi-node-driver-2mgd9" WorkloadEndpoint="localhost-k8s-csi--node--driver--2mgd9-eth0" Jul 10 00:45:11.285629 env[1210]: 2025-07-10 00:45:11.207 [INFO][3896] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali11a95a4ae14 ContainerID="ae506496c119ec793aa67da57fea2cb24d235d0d207908600c4f38fb3c2ce0f9" Namespace="calico-system" Pod="csi-node-driver-2mgd9" WorkloadEndpoint="localhost-k8s-csi--node--driver--2mgd9-eth0" Jul 10 00:45:11.285629 env[1210]: 2025-07-10 00:45:11.236 [INFO][3896] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="ae506496c119ec793aa67da57fea2cb24d235d0d207908600c4f38fb3c2ce0f9" Namespace="calico-system" Pod="csi-node-driver-2mgd9" WorkloadEndpoint="localhost-k8s-csi--node--driver--2mgd9-eth0" Jul 10 00:45:11.285629 env[1210]: 2025-07-10 00:45:11.237 [INFO][3896] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="ae506496c119ec793aa67da57fea2cb24d235d0d207908600c4f38fb3c2ce0f9" Namespace="calico-system" Pod="csi-node-driver-2mgd9" WorkloadEndpoint="localhost-k8s-csi--node--driver--2mgd9-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--2mgd9-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"8653425f-9c3b-4f40-adcd-044ce9ce6d7e", ResourceVersion:"954", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 44, 42, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"8967bcb6f", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"ae506496c119ec793aa67da57fea2cb24d235d0d207908600c4f38fb3c2ce0f9", Pod:"csi-node-driver-2mgd9", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali11a95a4ae14", MAC:"92:2b:e7:4f:e3:ba", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:45:11.285629 env[1210]: 2025-07-10 00:45:11.282 [INFO][3896] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="ae506496c119ec793aa67da57fea2cb24d235d0d207908600c4f38fb3c2ce0f9" Namespace="calico-system" Pod="csi-node-driver-2mgd9" WorkloadEndpoint="localhost-k8s-csi--node--driver--2mgd9-eth0" Jul 10 00:45:11.305752 env[1210]: time="2025-07-10T00:45:11.305625819Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 10 00:45:11.306043 env[1210]: time="2025-07-10T00:45:11.306017507Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 10 00:45:11.306242 env[1210]: time="2025-07-10T00:45:11.306216383Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 10 00:45:11.306528 env[1210]: time="2025-07-10T00:45:11.306500820Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/ae506496c119ec793aa67da57fea2cb24d235d0d207908600c4f38fb3c2ce0f9 pid=4022 runtime=io.containerd.runc.v2 Jul 10 00:45:11.336036 systemd[1]: Started cri-containerd-ae506496c119ec793aa67da57fea2cb24d235d0d207908600c4f38fb3c2ce0f9.scope. Jul 10 00:45:11.348000 audit[4051]: NETFILTER_CFG table=filter:109 family=2 entries=44 op=nft_register_chain pid=4051 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 10 00:45:11.348000 audit[4051]: SYSCALL arch=c000003e syscall=46 success=yes exit=21952 a0=3 a1=7ffcda75b5f0 a2=0 a3=7ffcda75b5dc items=0 ppid=3373 pid=4051 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:11.348000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 10 00:45:11.363431 systemd-networkd[1027]: calie97dd92203e: Link UP Jul 10 00:45:11.366584 systemd-networkd[1027]: calie97dd92203e: Gained carrier Jul 10 00:45:11.366894 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calie97dd92203e: link becomes ready Jul 10 00:45:11.369063 sshd[3952]: pam_unix(sshd:session): session closed for user core Jul 10 00:45:11.372000 audit[3952]: USER_END pid=3952 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:45:11.373000 audit[3952]: CRED_DISP pid=3952 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:45:11.376000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.0.0.116:22-10.0.0.1:42400 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:11.376514 systemd[1]: sshd@9-10.0.0.116:22-10.0.0.1:42400.service: Deactivated successfully. Jul 10 00:45:11.377510 systemd[1]: session-10.scope: Deactivated successfully. Jul 10 00:45:11.378272 systemd-logind[1194]: Session 10 logged out. Waiting for processes to exit. Jul 10 00:45:11.379118 systemd-logind[1194]: Removed session 10. Jul 10 00:45:11.380976 env[1210]: 2025-07-10 00:45:11.038 [INFO][3874] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-calico--kube--controllers--6fbf996c46--f5zkt-eth0 calico-kube-controllers-6fbf996c46- calico-system ddc62d5a-12e9-476f-81ea-fecce29e2a58 957 0 2025-07-10 00:44:42 +0000 UTC map[app.kubernetes.io/name:calico-kube-controllers k8s-app:calico-kube-controllers pod-template-hash:6fbf996c46 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-kube-controllers] map[] [] [] []} {k8s localhost calico-kube-controllers-6fbf996c46-f5zkt eth0 calico-kube-controllers [] [] [kns.calico-system ksa.calico-system.calico-kube-controllers] calie97dd92203e [] [] }} ContainerID="1fe806f6d822570fa546b740555c0e6093d9ca374e78b51dc3a88de9e54b8ead" Namespace="calico-system" Pod="calico-kube-controllers-6fbf996c46-f5zkt" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--6fbf996c46--f5zkt-" Jul 10 00:45:11.380976 env[1210]: 2025-07-10 00:45:11.040 [INFO][3874] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="1fe806f6d822570fa546b740555c0e6093d9ca374e78b51dc3a88de9e54b8ead" Namespace="calico-system" Pod="calico-kube-controllers-6fbf996c46-f5zkt" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--6fbf996c46--f5zkt-eth0" Jul 10 00:45:11.380976 env[1210]: 2025-07-10 00:45:11.153 [INFO][3960] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="1fe806f6d822570fa546b740555c0e6093d9ca374e78b51dc3a88de9e54b8ead" HandleID="k8s-pod-network.1fe806f6d822570fa546b740555c0e6093d9ca374e78b51dc3a88de9e54b8ead" Workload="localhost-k8s-calico--kube--controllers--6fbf996c46--f5zkt-eth0" Jul 10 00:45:11.380976 env[1210]: 2025-07-10 00:45:11.153 [INFO][3960] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="1fe806f6d822570fa546b740555c0e6093d9ca374e78b51dc3a88de9e54b8ead" HandleID="k8s-pod-network.1fe806f6d822570fa546b740555c0e6093d9ca374e78b51dc3a88de9e54b8ead" Workload="localhost-k8s-calico--kube--controllers--6fbf996c46--f5zkt-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0001399d0), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"calico-kube-controllers-6fbf996c46-f5zkt", "timestamp":"2025-07-10 00:45:11.153646137 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 10 00:45:11.380976 env[1210]: 2025-07-10 00:45:11.153 [INFO][3960] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:45:11.380976 env[1210]: 2025-07-10 00:45:11.205 [INFO][3960] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:45:11.380976 env[1210]: 2025-07-10 00:45:11.205 [INFO][3960] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 10 00:45:11.380976 env[1210]: 2025-07-10 00:45:11.241 [INFO][3960] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.1fe806f6d822570fa546b740555c0e6093d9ca374e78b51dc3a88de9e54b8ead" host="localhost" Jul 10 00:45:11.380976 env[1210]: 2025-07-10 00:45:11.289 [INFO][3960] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 10 00:45:11.380976 env[1210]: 2025-07-10 00:45:11.298 [INFO][3960] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 10 00:45:11.380976 env[1210]: 2025-07-10 00:45:11.302 [INFO][3960] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 10 00:45:11.380976 env[1210]: 2025-07-10 00:45:11.314 [INFO][3960] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 10 00:45:11.380976 env[1210]: 2025-07-10 00:45:11.314 [INFO][3960] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.1fe806f6d822570fa546b740555c0e6093d9ca374e78b51dc3a88de9e54b8ead" host="localhost" Jul 10 00:45:11.380976 env[1210]: 2025-07-10 00:45:11.323 [INFO][3960] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.1fe806f6d822570fa546b740555c0e6093d9ca374e78b51dc3a88de9e54b8ead Jul 10 00:45:11.380976 env[1210]: 2025-07-10 00:45:11.341 [INFO][3960] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.1fe806f6d822570fa546b740555c0e6093d9ca374e78b51dc3a88de9e54b8ead" host="localhost" Jul 10 00:45:11.380976 env[1210]: 2025-07-10 00:45:11.351 [INFO][3960] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.133/26] block=192.168.88.128/26 handle="k8s-pod-network.1fe806f6d822570fa546b740555c0e6093d9ca374e78b51dc3a88de9e54b8ead" host="localhost" Jul 10 00:45:11.380976 env[1210]: 2025-07-10 00:45:11.351 [INFO][3960] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.133/26] handle="k8s-pod-network.1fe806f6d822570fa546b740555c0e6093d9ca374e78b51dc3a88de9e54b8ead" host="localhost" Jul 10 00:45:11.380976 env[1210]: 2025-07-10 00:45:11.351 [INFO][3960] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:45:11.380976 env[1210]: 2025-07-10 00:45:11.351 [INFO][3960] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.133/26] IPv6=[] ContainerID="1fe806f6d822570fa546b740555c0e6093d9ca374e78b51dc3a88de9e54b8ead" HandleID="k8s-pod-network.1fe806f6d822570fa546b740555c0e6093d9ca374e78b51dc3a88de9e54b8ead" Workload="localhost-k8s-calico--kube--controllers--6fbf996c46--f5zkt-eth0" Jul 10 00:45:11.381604 env[1210]: 2025-07-10 00:45:11.361 [INFO][3874] cni-plugin/k8s.go 418: Populated endpoint ContainerID="1fe806f6d822570fa546b740555c0e6093d9ca374e78b51dc3a88de9e54b8ead" Namespace="calico-system" Pod="calico-kube-controllers-6fbf996c46-f5zkt" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--6fbf996c46--f5zkt-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--6fbf996c46--f5zkt-eth0", GenerateName:"calico-kube-controllers-6fbf996c46-", Namespace:"calico-system", SelfLink:"", UID:"ddc62d5a-12e9-476f-81ea-fecce29e2a58", ResourceVersion:"957", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 44, 42, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"6fbf996c46", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"calico-kube-controllers-6fbf996c46-f5zkt", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"calie97dd92203e", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:45:11.381604 env[1210]: 2025-07-10 00:45:11.361 [INFO][3874] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.133/32] ContainerID="1fe806f6d822570fa546b740555c0e6093d9ca374e78b51dc3a88de9e54b8ead" Namespace="calico-system" Pod="calico-kube-controllers-6fbf996c46-f5zkt" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--6fbf996c46--f5zkt-eth0" Jul 10 00:45:11.381604 env[1210]: 2025-07-10 00:45:11.361 [INFO][3874] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calie97dd92203e ContainerID="1fe806f6d822570fa546b740555c0e6093d9ca374e78b51dc3a88de9e54b8ead" Namespace="calico-system" Pod="calico-kube-controllers-6fbf996c46-f5zkt" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--6fbf996c46--f5zkt-eth0" Jul 10 00:45:11.381604 env[1210]: 2025-07-10 00:45:11.367 [INFO][3874] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="1fe806f6d822570fa546b740555c0e6093d9ca374e78b51dc3a88de9e54b8ead" Namespace="calico-system" Pod="calico-kube-controllers-6fbf996c46-f5zkt" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--6fbf996c46--f5zkt-eth0" Jul 10 00:45:11.381604 env[1210]: 2025-07-10 00:45:11.368 [INFO][3874] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="1fe806f6d822570fa546b740555c0e6093d9ca374e78b51dc3a88de9e54b8ead" Namespace="calico-system" Pod="calico-kube-controllers-6fbf996c46-f5zkt" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--6fbf996c46--f5zkt-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--6fbf996c46--f5zkt-eth0", GenerateName:"calico-kube-controllers-6fbf996c46-", Namespace:"calico-system", SelfLink:"", UID:"ddc62d5a-12e9-476f-81ea-fecce29e2a58", ResourceVersion:"957", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 44, 42, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"6fbf996c46", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"1fe806f6d822570fa546b740555c0e6093d9ca374e78b51dc3a88de9e54b8ead", Pod:"calico-kube-controllers-6fbf996c46-f5zkt", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"calie97dd92203e", MAC:"3a:07:53:fd:49:27", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:45:11.381604 env[1210]: 2025-07-10 00:45:11.377 [INFO][3874] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="1fe806f6d822570fa546b740555c0e6093d9ca374e78b51dc3a88de9e54b8ead" Namespace="calico-system" Pod="calico-kube-controllers-6fbf996c46-f5zkt" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--6fbf996c46--f5zkt-eth0" Jul 10 00:45:11.391000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:11.391000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:11.391000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:11.391000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:11.391000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:11.391000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:11.391000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:11.391000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:11.391000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:11.391000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:11.391000 audit: BPF prog-id=174 op=LOAD Jul 10 00:45:11.391000 audit[4038]: AVC avc: denied { bpf } for pid=4038 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:11.391000 audit[4038]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=4022 pid=4038 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:11.391000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6165353036343936633131396563373933616136376461353766656132 Jul 10 00:45:11.391000 audit[4038]: AVC avc: denied { perfmon } for pid=4038 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:11.391000 audit[4038]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=c items=0 ppid=4022 pid=4038 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:11.391000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6165353036343936633131396563373933616136376461353766656132 Jul 10 00:45:11.391000 audit[4038]: AVC avc: denied { bpf } for pid=4038 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:11.391000 audit[4038]: AVC avc: denied { bpf } for pid=4038 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:11.391000 audit[4038]: AVC avc: denied { bpf } for pid=4038 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:11.391000 audit[4038]: AVC avc: denied { perfmon } for pid=4038 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:11.391000 audit[4038]: AVC avc: denied { perfmon } for pid=4038 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:11.391000 audit[4038]: AVC avc: denied { perfmon } for pid=4038 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:11.391000 audit[4038]: AVC avc: denied { perfmon } for pid=4038 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:11.391000 audit[4038]: AVC avc: denied { perfmon } for pid=4038 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:11.391000 audit[4038]: AVC avc: denied { bpf } for pid=4038 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:11.391000 audit[4038]: AVC avc: denied { bpf } for pid=4038 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:11.391000 audit: BPF prog-id=175 op=LOAD Jul 10 00:45:11.391000 audit[4038]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c0003309d0 items=0 ppid=4022 pid=4038 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:11.391000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6165353036343936633131396563373933616136376461353766656132 Jul 10 00:45:11.392000 audit[4038]: AVC avc: denied { bpf } for pid=4038 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:11.392000 audit[4038]: AVC avc: denied { bpf } for pid=4038 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:11.392000 audit[4038]: AVC avc: denied { perfmon } for pid=4038 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:11.392000 audit[4038]: AVC avc: denied { perfmon } for pid=4038 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:11.392000 audit[4038]: AVC avc: denied { perfmon } for pid=4038 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:11.392000 audit[4038]: AVC avc: denied { perfmon } for pid=4038 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:11.392000 audit[4038]: AVC avc: denied { perfmon } for pid=4038 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:11.392000 audit[4038]: AVC avc: denied { bpf } for pid=4038 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:11.392000 audit[4038]: AVC avc: denied { bpf } for pid=4038 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:11.392000 audit: BPF prog-id=176 op=LOAD Jul 10 00:45:11.392000 audit[4038]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c000330a18 items=0 ppid=4022 pid=4038 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:11.392000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6165353036343936633131396563373933616136376461353766656132 Jul 10 00:45:11.392000 audit: BPF prog-id=176 op=UNLOAD Jul 10 00:45:11.392000 audit: BPF prog-id=175 op=UNLOAD Jul 10 00:45:11.392000 audit[4038]: AVC avc: denied { bpf } for pid=4038 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:11.392000 audit[4038]: AVC avc: denied { bpf } for pid=4038 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:11.392000 audit[4038]: AVC avc: denied { bpf } for pid=4038 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:11.392000 audit[4038]: AVC avc: denied { perfmon } for pid=4038 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:11.392000 audit[4038]: AVC avc: denied { perfmon } for pid=4038 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:11.392000 audit[4038]: AVC avc: denied { perfmon } for pid=4038 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:11.392000 audit[4038]: AVC avc: denied { perfmon } for pid=4038 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:11.392000 audit[4038]: AVC avc: denied { perfmon } for pid=4038 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:11.392000 audit[4038]: AVC avc: denied { bpf } for pid=4038 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:11.392000 audit[4038]: AVC avc: denied { bpf } for pid=4038 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:11.392000 audit: BPF prog-id=177 op=LOAD Jul 10 00:45:11.392000 audit[4038]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c000330e28 items=0 ppid=4022 pid=4038 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:11.392000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6165353036343936633131396563373933616136376461353766656132 Jul 10 00:45:11.397000 audit[4069]: NETFILTER_CFG table=filter:110 family=2 entries=48 op=nft_register_chain pid=4069 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 10 00:45:11.397000 audit[4069]: SYSCALL arch=c000003e syscall=46 success=yes exit=23140 a0=3 a1=7ffc1ecc9800 a2=0 a3=7ffc1ecc97ec items=0 ppid=3373 pid=4069 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:11.397000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 10 00:45:11.402891 systemd-resolved[1143]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 10 00:45:11.407984 env[1210]: time="2025-07-10T00:45:11.407884415Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 10 00:45:11.408181 env[1210]: time="2025-07-10T00:45:11.407947824Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 10 00:45:11.408181 env[1210]: time="2025-07-10T00:45:11.407959968Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 10 00:45:11.409838 env[1210]: time="2025-07-10T00:45:11.408605165Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/1fe806f6d822570fa546b740555c0e6093d9ca374e78b51dc3a88de9e54b8ead pid=4079 runtime=io.containerd.runc.v2 Jul 10 00:45:11.428812 systemd[1]: Started cri-containerd-1fe806f6d822570fa546b740555c0e6093d9ca374e78b51dc3a88de9e54b8ead.scope. Jul 10 00:45:11.438425 env[1210]: time="2025-07-10T00:45:11.438373045Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-2mgd9,Uid:8653425f-9c3b-4f40-adcd-044ce9ce6d7e,Namespace:calico-system,Attempt:1,} returns sandbox id \"ae506496c119ec793aa67da57fea2cb24d235d0d207908600c4f38fb3c2ce0f9\"" Jul 10 00:45:11.451034 systemd-networkd[1027]: calic631f52e3ca: Link UP Jul 10 00:45:11.452000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:11.452000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:11.452000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:11.452000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:11.452000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:11.452000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:11.452000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:11.452000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:11.452000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:11.452000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:11.452000 audit: BPF prog-id=178 op=LOAD Jul 10 00:45:11.452000 audit[4090]: AVC avc: denied { bpf } for pid=4090 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:11.452000 audit[4090]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=4079 pid=4090 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:11.452000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3166653830366636643832323537306661353436623734303535356330 Jul 10 00:45:11.452000 audit[4090]: AVC avc: denied { perfmon } for pid=4090 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:11.452000 audit[4090]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=4079 pid=4090 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:11.452000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3166653830366636643832323537306661353436623734303535356330 Jul 10 00:45:11.452000 audit[4090]: AVC avc: denied { bpf } for pid=4090 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:11.452000 audit[4090]: AVC avc: denied { bpf } for pid=4090 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:11.452000 audit[4090]: AVC avc: denied { bpf } for pid=4090 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:11.452000 audit[4090]: AVC avc: denied { perfmon } for pid=4090 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:11.452000 audit[4090]: AVC avc: denied { perfmon } for pid=4090 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:11.452000 audit[4090]: AVC avc: denied { perfmon } for pid=4090 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:11.452000 audit[4090]: AVC avc: denied { perfmon } for pid=4090 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:11.452000 audit[4090]: AVC avc: denied { perfmon } for pid=4090 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:11.452000 audit[4090]: AVC avc: denied { bpf } for pid=4090 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:11.452000 audit[4090]: AVC avc: denied { bpf } for pid=4090 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:11.452000 audit: BPF prog-id=179 op=LOAD Jul 10 00:45:11.452000 audit[4090]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0002d2c00 items=0 ppid=4079 pid=4090 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:11.452000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3166653830366636643832323537306661353436623734303535356330 Jul 10 00:45:11.452000 audit[4090]: AVC avc: denied { bpf } for pid=4090 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:11.452000 audit[4090]: AVC avc: denied { bpf } for pid=4090 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:11.452000 audit[4090]: AVC avc: denied { perfmon } for pid=4090 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:11.452000 audit[4090]: AVC avc: denied { perfmon } for pid=4090 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:11.452000 audit[4090]: AVC avc: denied { perfmon } for pid=4090 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:11.452000 audit[4090]: AVC avc: denied { perfmon } for pid=4090 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:11.452000 audit[4090]: AVC avc: denied { perfmon } for pid=4090 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:11.452000 audit[4090]: AVC avc: denied { bpf } for pid=4090 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:11.452000 audit[4090]: AVC avc: denied { bpf } for pid=4090 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:11.452000 audit: BPF prog-id=180 op=LOAD Jul 10 00:45:11.452000 audit[4090]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0002d2c48 items=0 ppid=4079 pid=4090 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:11.452000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3166653830366636643832323537306661353436623734303535356330 Jul 10 00:45:11.453000 audit: BPF prog-id=180 op=UNLOAD Jul 10 00:45:11.453000 audit: BPF prog-id=179 op=UNLOAD Jul 10 00:45:11.453000 audit[4090]: AVC avc: denied { bpf } for pid=4090 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:11.453000 audit[4090]: AVC avc: denied { bpf } for pid=4090 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:11.453000 audit[4090]: AVC avc: denied { bpf } for pid=4090 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:11.453000 audit[4090]: AVC avc: denied { perfmon } for pid=4090 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:11.453000 audit[4090]: AVC avc: denied { perfmon } for pid=4090 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:11.453000 audit[4090]: AVC avc: denied { perfmon } for pid=4090 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:11.453000 audit[4090]: AVC avc: denied { perfmon } for pid=4090 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:11.453000 audit[4090]: AVC avc: denied { perfmon } for pid=4090 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:11.453000 audit[4090]: AVC avc: denied { bpf } for pid=4090 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:11.453000 audit[4090]: AVC avc: denied { bpf } for pid=4090 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:11.453000 audit: BPF prog-id=181 op=LOAD Jul 10 00:45:11.453000 audit[4090]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0002d3058 items=0 ppid=4079 pid=4090 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:11.453000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3166653830366636643832323537306661353436623734303535356330 Jul 10 00:45:11.457776 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calic631f52e3ca: link becomes ready Jul 10 00:45:11.455617 systemd-networkd[1027]: calic631f52e3ca: Gained carrier Jul 10 00:45:11.457459 systemd-resolved[1143]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 10 00:45:11.470370 env[1210]: 2025-07-10 00:45:11.295 [INFO][3992] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-goldmane--768f4c5c69--vbht5-eth0 goldmane-768f4c5c69- calico-system 990e1b75-6549-43f4-a7d2-6561d110faed 994 0 2025-07-10 00:44:42 +0000 UTC map[app.kubernetes.io/name:goldmane k8s-app:goldmane pod-template-hash:768f4c5c69 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:goldmane] map[] [] [] []} {k8s localhost goldmane-768f4c5c69-vbht5 eth0 goldmane [] [] [kns.calico-system ksa.calico-system.goldmane] calic631f52e3ca [] [] }} ContainerID="c96bdfed1e9fb8f3e5e0b092f7b100732be1115e20ec0d222f0ff3866714a3bd" Namespace="calico-system" Pod="goldmane-768f4c5c69-vbht5" WorkloadEndpoint="localhost-k8s-goldmane--768f4c5c69--vbht5-" Jul 10 00:45:11.470370 env[1210]: 2025-07-10 00:45:11.295 [INFO][3992] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="c96bdfed1e9fb8f3e5e0b092f7b100732be1115e20ec0d222f0ff3866714a3bd" Namespace="calico-system" Pod="goldmane-768f4c5c69-vbht5" WorkloadEndpoint="localhost-k8s-goldmane--768f4c5c69--vbht5-eth0" Jul 10 00:45:11.470370 env[1210]: 2025-07-10 00:45:11.400 [INFO][4030] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="c96bdfed1e9fb8f3e5e0b092f7b100732be1115e20ec0d222f0ff3866714a3bd" HandleID="k8s-pod-network.c96bdfed1e9fb8f3e5e0b092f7b100732be1115e20ec0d222f0ff3866714a3bd" Workload="localhost-k8s-goldmane--768f4c5c69--vbht5-eth0" Jul 10 00:45:11.470370 env[1210]: 2025-07-10 00:45:11.400 [INFO][4030] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="c96bdfed1e9fb8f3e5e0b092f7b100732be1115e20ec0d222f0ff3866714a3bd" HandleID="k8s-pod-network.c96bdfed1e9fb8f3e5e0b092f7b100732be1115e20ec0d222f0ff3866714a3bd" Workload="localhost-k8s-goldmane--768f4c5c69--vbht5-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc00011f710), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"goldmane-768f4c5c69-vbht5", "timestamp":"2025-07-10 00:45:11.400057217 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 10 00:45:11.470370 env[1210]: 2025-07-10 00:45:11.400 [INFO][4030] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:45:11.470370 env[1210]: 2025-07-10 00:45:11.400 [INFO][4030] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:45:11.470370 env[1210]: 2025-07-10 00:45:11.400 [INFO][4030] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 10 00:45:11.470370 env[1210]: 2025-07-10 00:45:11.410 [INFO][4030] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.c96bdfed1e9fb8f3e5e0b092f7b100732be1115e20ec0d222f0ff3866714a3bd" host="localhost" Jul 10 00:45:11.470370 env[1210]: 2025-07-10 00:45:11.418 [INFO][4030] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 10 00:45:11.470370 env[1210]: 2025-07-10 00:45:11.423 [INFO][4030] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 10 00:45:11.470370 env[1210]: 2025-07-10 00:45:11.424 [INFO][4030] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 10 00:45:11.470370 env[1210]: 2025-07-10 00:45:11.431 [INFO][4030] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 10 00:45:11.470370 env[1210]: 2025-07-10 00:45:11.431 [INFO][4030] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.c96bdfed1e9fb8f3e5e0b092f7b100732be1115e20ec0d222f0ff3866714a3bd" host="localhost" Jul 10 00:45:11.470370 env[1210]: 2025-07-10 00:45:11.432 [INFO][4030] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.c96bdfed1e9fb8f3e5e0b092f7b100732be1115e20ec0d222f0ff3866714a3bd Jul 10 00:45:11.470370 env[1210]: 2025-07-10 00:45:11.437 [INFO][4030] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.c96bdfed1e9fb8f3e5e0b092f7b100732be1115e20ec0d222f0ff3866714a3bd" host="localhost" Jul 10 00:45:11.470370 env[1210]: 2025-07-10 00:45:11.444 [INFO][4030] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.134/26] block=192.168.88.128/26 handle="k8s-pod-network.c96bdfed1e9fb8f3e5e0b092f7b100732be1115e20ec0d222f0ff3866714a3bd" host="localhost" Jul 10 00:45:11.470370 env[1210]: 2025-07-10 00:45:11.444 [INFO][4030] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.134/26] handle="k8s-pod-network.c96bdfed1e9fb8f3e5e0b092f7b100732be1115e20ec0d222f0ff3866714a3bd" host="localhost" Jul 10 00:45:11.470370 env[1210]: 2025-07-10 00:45:11.444 [INFO][4030] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:45:11.470370 env[1210]: 2025-07-10 00:45:11.444 [INFO][4030] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.134/26] IPv6=[] ContainerID="c96bdfed1e9fb8f3e5e0b092f7b100732be1115e20ec0d222f0ff3866714a3bd" HandleID="k8s-pod-network.c96bdfed1e9fb8f3e5e0b092f7b100732be1115e20ec0d222f0ff3866714a3bd" Workload="localhost-k8s-goldmane--768f4c5c69--vbht5-eth0" Jul 10 00:45:11.471004 env[1210]: 2025-07-10 00:45:11.447 [INFO][3992] cni-plugin/k8s.go 418: Populated endpoint ContainerID="c96bdfed1e9fb8f3e5e0b092f7b100732be1115e20ec0d222f0ff3866714a3bd" Namespace="calico-system" Pod="goldmane-768f4c5c69-vbht5" WorkloadEndpoint="localhost-k8s-goldmane--768f4c5c69--vbht5-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-goldmane--768f4c5c69--vbht5-eth0", GenerateName:"goldmane-768f4c5c69-", Namespace:"calico-system", SelfLink:"", UID:"990e1b75-6549-43f4-a7d2-6561d110faed", ResourceVersion:"994", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 44, 42, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"768f4c5c69", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"goldmane-768f4c5c69-vbht5", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.88.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"calic631f52e3ca", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:45:11.471004 env[1210]: 2025-07-10 00:45:11.447 [INFO][3992] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.134/32] ContainerID="c96bdfed1e9fb8f3e5e0b092f7b100732be1115e20ec0d222f0ff3866714a3bd" Namespace="calico-system" Pod="goldmane-768f4c5c69-vbht5" WorkloadEndpoint="localhost-k8s-goldmane--768f4c5c69--vbht5-eth0" Jul 10 00:45:11.471004 env[1210]: 2025-07-10 00:45:11.447 [INFO][3992] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calic631f52e3ca ContainerID="c96bdfed1e9fb8f3e5e0b092f7b100732be1115e20ec0d222f0ff3866714a3bd" Namespace="calico-system" Pod="goldmane-768f4c5c69-vbht5" WorkloadEndpoint="localhost-k8s-goldmane--768f4c5c69--vbht5-eth0" Jul 10 00:45:11.471004 env[1210]: 2025-07-10 00:45:11.456 [INFO][3992] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="c96bdfed1e9fb8f3e5e0b092f7b100732be1115e20ec0d222f0ff3866714a3bd" Namespace="calico-system" Pod="goldmane-768f4c5c69-vbht5" WorkloadEndpoint="localhost-k8s-goldmane--768f4c5c69--vbht5-eth0" Jul 10 00:45:11.471004 env[1210]: 2025-07-10 00:45:11.459 [INFO][3992] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="c96bdfed1e9fb8f3e5e0b092f7b100732be1115e20ec0d222f0ff3866714a3bd" Namespace="calico-system" Pod="goldmane-768f4c5c69-vbht5" WorkloadEndpoint="localhost-k8s-goldmane--768f4c5c69--vbht5-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-goldmane--768f4c5c69--vbht5-eth0", GenerateName:"goldmane-768f4c5c69-", Namespace:"calico-system", SelfLink:"", UID:"990e1b75-6549-43f4-a7d2-6561d110faed", ResourceVersion:"994", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 44, 42, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"768f4c5c69", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"c96bdfed1e9fb8f3e5e0b092f7b100732be1115e20ec0d222f0ff3866714a3bd", Pod:"goldmane-768f4c5c69-vbht5", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.88.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"calic631f52e3ca", MAC:"7a:17:f3:3b:0b:12", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:45:11.471004 env[1210]: 2025-07-10 00:45:11.468 [INFO][3992] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="c96bdfed1e9fb8f3e5e0b092f7b100732be1115e20ec0d222f0ff3866714a3bd" Namespace="calico-system" Pod="goldmane-768f4c5c69-vbht5" WorkloadEndpoint="localhost-k8s-goldmane--768f4c5c69--vbht5-eth0" Jul 10 00:45:11.488551 systemd-networkd[1027]: cali5d4beb0d598: Gained IPv6LL Jul 10 00:45:11.491000 audit[4123]: NETFILTER_CFG table=filter:111 family=2 entries=66 op=nft_register_chain pid=4123 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 10 00:45:11.491000 audit[4123]: SYSCALL arch=c000003e syscall=46 success=yes exit=32784 a0=3 a1=7fff1f3c6630 a2=0 a3=7fff1f3c661c items=0 ppid=3373 pid=4123 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:11.491000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 10 00:45:11.502744 env[1210]: time="2025-07-10T00:45:11.502193332Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-6fbf996c46-f5zkt,Uid:ddc62d5a-12e9-476f-81ea-fecce29e2a58,Namespace:calico-system,Attempt:1,} returns sandbox id \"1fe806f6d822570fa546b740555c0e6093d9ca374e78b51dc3a88de9e54b8ead\"" Jul 10 00:45:11.505986 env[1210]: time="2025-07-10T00:45:11.505299372Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 10 00:45:11.505986 env[1210]: time="2025-07-10T00:45:11.505384212Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 10 00:45:11.505986 env[1210]: time="2025-07-10T00:45:11.505418407Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 10 00:45:11.505986 env[1210]: time="2025-07-10T00:45:11.505603306Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/c96bdfed1e9fb8f3e5e0b092f7b100732be1115e20ec0d222f0ff3866714a3bd pid=4134 runtime=io.containerd.runc.v2 Jul 10 00:45:11.525132 systemd[1]: Started cri-containerd-c96bdfed1e9fb8f3e5e0b092f7b100732be1115e20ec0d222f0ff3866714a3bd.scope. Jul 10 00:45:11.555000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:11.555000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:11.555000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:11.555000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:11.555000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:11.555000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:11.555000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:11.555000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:11.555000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:11.555000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:11.555000 audit: BPF prog-id=182 op=LOAD Jul 10 00:45:11.556000 audit[4144]: AVC avc: denied { bpf } for pid=4144 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:11.556000 audit[4144]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001c5c48 a2=10 a3=1c items=0 ppid=4134 pid=4144 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:11.556000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6339366264666564316539666238663365356530623039326637623130 Jul 10 00:45:11.556000 audit[4144]: AVC avc: denied { perfmon } for pid=4144 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:11.556000 audit[4144]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001c56b0 a2=3c a3=c items=0 ppid=4134 pid=4144 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:11.556000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6339366264666564316539666238663365356530623039326637623130 Jul 10 00:45:11.556000 audit[4144]: AVC avc: denied { bpf } for pid=4144 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:11.556000 audit[4144]: AVC avc: denied { bpf } for pid=4144 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:11.556000 audit[4144]: AVC avc: denied { bpf } for pid=4144 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:11.556000 audit[4144]: AVC avc: denied { perfmon } for pid=4144 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:11.556000 audit[4144]: AVC avc: denied { perfmon } for pid=4144 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:11.556000 audit[4144]: AVC avc: denied { perfmon } for pid=4144 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:11.556000 audit[4144]: AVC avc: denied { perfmon } for pid=4144 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:11.556000 audit[4144]: AVC avc: denied { perfmon } for pid=4144 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:11.556000 audit[4144]: AVC avc: denied { bpf } for pid=4144 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:11.556000 audit[4144]: AVC avc: denied { bpf } for pid=4144 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:11.556000 audit: BPF prog-id=183 op=LOAD Jul 10 00:45:11.556000 audit[4144]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001c59d8 a2=78 a3=c000091050 items=0 ppid=4134 pid=4144 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:11.556000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6339366264666564316539666238663365356530623039326637623130 Jul 10 00:45:11.556000 audit[4144]: AVC avc: denied { bpf } for pid=4144 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:11.556000 audit[4144]: AVC avc: denied { bpf } for pid=4144 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:11.556000 audit[4144]: AVC avc: denied { perfmon } for pid=4144 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:11.556000 audit[4144]: AVC avc: denied { perfmon } for pid=4144 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:11.556000 audit[4144]: AVC avc: denied { perfmon } for pid=4144 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:11.556000 audit[4144]: AVC avc: denied { perfmon } for pid=4144 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:11.556000 audit[4144]: AVC avc: denied { perfmon } for pid=4144 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:11.556000 audit[4144]: AVC avc: denied { bpf } for pid=4144 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:11.556000 audit[4144]: AVC avc: denied { bpf } for pid=4144 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:11.556000 audit: BPF prog-id=184 op=LOAD Jul 10 00:45:11.556000 audit[4144]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001c5770 a2=78 a3=c000091098 items=0 ppid=4134 pid=4144 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:11.556000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6339366264666564316539666238663365356530623039326637623130 Jul 10 00:45:11.556000 audit: BPF prog-id=184 op=UNLOAD Jul 10 00:45:11.556000 audit: BPF prog-id=183 op=UNLOAD Jul 10 00:45:11.556000 audit[4144]: AVC avc: denied { bpf } for pid=4144 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:11.556000 audit[4144]: AVC avc: denied { bpf } for pid=4144 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:11.556000 audit[4144]: AVC avc: denied { bpf } for pid=4144 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:11.556000 audit[4144]: AVC avc: denied { perfmon } for pid=4144 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:11.556000 audit[4144]: AVC avc: denied { perfmon } for pid=4144 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:11.556000 audit[4144]: AVC avc: denied { perfmon } for pid=4144 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:11.556000 audit[4144]: AVC avc: denied { perfmon } for pid=4144 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:11.556000 audit[4144]: AVC avc: denied { perfmon } for pid=4144 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:11.556000 audit[4144]: AVC avc: denied { bpf } for pid=4144 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:11.556000 audit[4144]: AVC avc: denied { bpf } for pid=4144 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:11.556000 audit: BPF prog-id=185 op=LOAD Jul 10 00:45:11.556000 audit[4144]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001c5c30 a2=78 a3=c0000914a8 items=0 ppid=4134 pid=4144 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:11.556000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6339366264666564316539666238663365356530623039326637623130 Jul 10 00:45:11.564170 systemd-resolved[1143]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 10 00:45:11.591354 env[1210]: time="2025-07-10T00:45:11.591294244Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-768f4c5c69-vbht5,Uid:990e1b75-6549-43f4-a7d2-6561d110faed,Namespace:calico-system,Attempt:1,} returns sandbox id \"c96bdfed1e9fb8f3e5e0b092f7b100732be1115e20ec0d222f0ff3866714a3bd\"" Jul 10 00:45:11.621515 env[1210]: time="2025-07-10T00:45:11.621450518Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:45:11.623576 env[1210]: time="2025-07-10T00:45:11.623537426Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:eb8f512acf9402730da120a7b0d47d3d9d451b56e6e5eb8bad53ab24f926f954,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:45:11.625327 env[1210]: time="2025-07-10T00:45:11.625273891Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/whisker:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:45:11.626760 env[1210]: time="2025-07-10T00:45:11.626728887Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker@sha256:31346d4524252a3b0d2a1d289c4985b8402b498b5ce82a12e682096ab7446678,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:45:11.627264 env[1210]: time="2025-07-10T00:45:11.627230783Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.2\" returns image reference \"sha256:eb8f512acf9402730da120a7b0d47d3d9d451b56e6e5eb8bad53ab24f926f954\"" Jul 10 00:45:11.628587 env[1210]: time="2025-07-10T00:45:11.628537378Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.2\"" Jul 10 00:45:11.682333 env[1210]: time="2025-07-10T00:45:11.682288187Z" level=info msg="StopPodSandbox for \"7ffa2b3c827ee5ba1786acf83241852e76af9ad68f8fd0a62b972cd27c7cbeea\"" Jul 10 00:45:11.682620 env[1210]: time="2025-07-10T00:45:11.682558567Z" level=info msg="StopPodSandbox for \"6f997f8f42875d0c5592191313f27a28488bd1115bcb1c7abc280db6bf054afa\"" Jul 10 00:45:11.710883 env[1210]: time="2025-07-10T00:45:11.710786213Z" level=info msg="CreateContainer within sandbox \"b559b797c2608820678ed5a66519d0b090ac69eaa3e5795ac2b1af11ee396b61\" for container &ContainerMetadata{Name:whisker,Attempt:0,}" Jul 10 00:45:11.769513 env[1210]: time="2025-07-10T00:45:11.769453958Z" level=info msg="CreateContainer within sandbox \"b559b797c2608820678ed5a66519d0b090ac69eaa3e5795ac2b1af11ee396b61\" for &ContainerMetadata{Name:whisker,Attempt:0,} returns container id \"e2d4221270f72990634e95d9882ee3586803f4bd0a8952616e8f0e02c63dffc8\"" Jul 10 00:45:11.770892 env[1210]: time="2025-07-10T00:45:11.770832979Z" level=info msg="StartContainer for \"e2d4221270f72990634e95d9882ee3586803f4bd0a8952616e8f0e02c63dffc8\"" Jul 10 00:45:11.807164 systemd[1]: Started cri-containerd-e2d4221270f72990634e95d9882ee3586803f4bd0a8952616e8f0e02c63dffc8.scope. Jul 10 00:45:11.814360 env[1210]: 2025-07-10 00:45:11.766 [INFO][4192] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="7ffa2b3c827ee5ba1786acf83241852e76af9ad68f8fd0a62b972cd27c7cbeea" Jul 10 00:45:11.814360 env[1210]: 2025-07-10 00:45:11.766 [INFO][4192] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="7ffa2b3c827ee5ba1786acf83241852e76af9ad68f8fd0a62b972cd27c7cbeea" iface="eth0" netns="/var/run/netns/cni-37c6f91d-30f2-8309-11f6-ebdddbb761b0" Jul 10 00:45:11.814360 env[1210]: 2025-07-10 00:45:11.766 [INFO][4192] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="7ffa2b3c827ee5ba1786acf83241852e76af9ad68f8fd0a62b972cd27c7cbeea" iface="eth0" netns="/var/run/netns/cni-37c6f91d-30f2-8309-11f6-ebdddbb761b0" Jul 10 00:45:11.814360 env[1210]: 2025-07-10 00:45:11.769 [INFO][4192] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="7ffa2b3c827ee5ba1786acf83241852e76af9ad68f8fd0a62b972cd27c7cbeea" iface="eth0" netns="/var/run/netns/cni-37c6f91d-30f2-8309-11f6-ebdddbb761b0" Jul 10 00:45:11.814360 env[1210]: 2025-07-10 00:45:11.769 [INFO][4192] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="7ffa2b3c827ee5ba1786acf83241852e76af9ad68f8fd0a62b972cd27c7cbeea" Jul 10 00:45:11.814360 env[1210]: 2025-07-10 00:45:11.769 [INFO][4192] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="7ffa2b3c827ee5ba1786acf83241852e76af9ad68f8fd0a62b972cd27c7cbeea" Jul 10 00:45:11.814360 env[1210]: 2025-07-10 00:45:11.793 [INFO][4217] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="7ffa2b3c827ee5ba1786acf83241852e76af9ad68f8fd0a62b972cd27c7cbeea" HandleID="k8s-pod-network.7ffa2b3c827ee5ba1786acf83241852e76af9ad68f8fd0a62b972cd27c7cbeea" Workload="localhost-k8s-coredns--674b8bbfcf--dgqq9-eth0" Jul 10 00:45:11.814360 env[1210]: 2025-07-10 00:45:11.794 [INFO][4217] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:45:11.814360 env[1210]: 2025-07-10 00:45:11.794 [INFO][4217] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:45:11.814360 env[1210]: 2025-07-10 00:45:11.802 [WARNING][4217] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="7ffa2b3c827ee5ba1786acf83241852e76af9ad68f8fd0a62b972cd27c7cbeea" HandleID="k8s-pod-network.7ffa2b3c827ee5ba1786acf83241852e76af9ad68f8fd0a62b972cd27c7cbeea" Workload="localhost-k8s-coredns--674b8bbfcf--dgqq9-eth0" Jul 10 00:45:11.814360 env[1210]: 2025-07-10 00:45:11.802 [INFO][4217] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="7ffa2b3c827ee5ba1786acf83241852e76af9ad68f8fd0a62b972cd27c7cbeea" HandleID="k8s-pod-network.7ffa2b3c827ee5ba1786acf83241852e76af9ad68f8fd0a62b972cd27c7cbeea" Workload="localhost-k8s-coredns--674b8bbfcf--dgqq9-eth0" Jul 10 00:45:11.814360 env[1210]: 2025-07-10 00:45:11.804 [INFO][4217] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:45:11.814360 env[1210]: 2025-07-10 00:45:11.807 [INFO][4192] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="7ffa2b3c827ee5ba1786acf83241852e76af9ad68f8fd0a62b972cd27c7cbeea" Jul 10 00:45:11.815443 env[1210]: time="2025-07-10T00:45:11.815367010Z" level=info msg="TearDown network for sandbox \"7ffa2b3c827ee5ba1786acf83241852e76af9ad68f8fd0a62b972cd27c7cbeea\" successfully" Jul 10 00:45:11.815606 env[1210]: time="2025-07-10T00:45:11.815552900Z" level=info msg="StopPodSandbox for \"7ffa2b3c827ee5ba1786acf83241852e76af9ad68f8fd0a62b972cd27c7cbeea\" returns successfully" Jul 10 00:45:11.816236 kubelet[2000]: E0710 00:45:11.816032 2000 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:45:11.816637 env[1210]: time="2025-07-10T00:45:11.816600447Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-dgqq9,Uid:d4134d3e-309e-4c16-a93c-0185dfd5a718,Namespace:kube-system,Attempt:1,}" Jul 10 00:45:11.821547 env[1210]: 2025-07-10 00:45:11.768 [INFO][4193] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="6f997f8f42875d0c5592191313f27a28488bd1115bcb1c7abc280db6bf054afa" Jul 10 00:45:11.821547 env[1210]: 2025-07-10 00:45:11.768 [INFO][4193] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="6f997f8f42875d0c5592191313f27a28488bd1115bcb1c7abc280db6bf054afa" iface="eth0" netns="/var/run/netns/cni-96c8ed9a-0222-2bc2-3599-29fcaa3156c5" Jul 10 00:45:11.821547 env[1210]: 2025-07-10 00:45:11.768 [INFO][4193] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="6f997f8f42875d0c5592191313f27a28488bd1115bcb1c7abc280db6bf054afa" iface="eth0" netns="/var/run/netns/cni-96c8ed9a-0222-2bc2-3599-29fcaa3156c5" Jul 10 00:45:11.821547 env[1210]: 2025-07-10 00:45:11.768 [INFO][4193] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="6f997f8f42875d0c5592191313f27a28488bd1115bcb1c7abc280db6bf054afa" iface="eth0" netns="/var/run/netns/cni-96c8ed9a-0222-2bc2-3599-29fcaa3156c5" Jul 10 00:45:11.821547 env[1210]: 2025-07-10 00:45:11.768 [INFO][4193] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="6f997f8f42875d0c5592191313f27a28488bd1115bcb1c7abc280db6bf054afa" Jul 10 00:45:11.821547 env[1210]: 2025-07-10 00:45:11.768 [INFO][4193] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="6f997f8f42875d0c5592191313f27a28488bd1115bcb1c7abc280db6bf054afa" Jul 10 00:45:11.821547 env[1210]: 2025-07-10 00:45:11.810 [INFO][4211] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="6f997f8f42875d0c5592191313f27a28488bd1115bcb1c7abc280db6bf054afa" HandleID="k8s-pod-network.6f997f8f42875d0c5592191313f27a28488bd1115bcb1c7abc280db6bf054afa" Workload="localhost-k8s-calico--apiserver--7b8bd7bfc9--9vccb-eth0" Jul 10 00:45:11.821547 env[1210]: 2025-07-10 00:45:11.810 [INFO][4211] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:45:11.821547 env[1210]: 2025-07-10 00:45:11.810 [INFO][4211] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:45:11.821547 env[1210]: 2025-07-10 00:45:11.816 [WARNING][4211] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="6f997f8f42875d0c5592191313f27a28488bd1115bcb1c7abc280db6bf054afa" HandleID="k8s-pod-network.6f997f8f42875d0c5592191313f27a28488bd1115bcb1c7abc280db6bf054afa" Workload="localhost-k8s-calico--apiserver--7b8bd7bfc9--9vccb-eth0" Jul 10 00:45:11.821547 env[1210]: 2025-07-10 00:45:11.816 [INFO][4211] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="6f997f8f42875d0c5592191313f27a28488bd1115bcb1c7abc280db6bf054afa" HandleID="k8s-pod-network.6f997f8f42875d0c5592191313f27a28488bd1115bcb1c7abc280db6bf054afa" Workload="localhost-k8s-calico--apiserver--7b8bd7bfc9--9vccb-eth0" Jul 10 00:45:11.821547 env[1210]: 2025-07-10 00:45:11.818 [INFO][4211] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:45:11.821547 env[1210]: 2025-07-10 00:45:11.820 [INFO][4193] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="6f997f8f42875d0c5592191313f27a28488bd1115bcb1c7abc280db6bf054afa" Jul 10 00:45:11.822209 env[1210]: time="2025-07-10T00:45:11.822164284Z" level=info msg="TearDown network for sandbox \"6f997f8f42875d0c5592191313f27a28488bd1115bcb1c7abc280db6bf054afa\" successfully" Jul 10 00:45:11.822294 env[1210]: time="2025-07-10T00:45:11.822271797Z" level=info msg="StopPodSandbox for \"6f997f8f42875d0c5592191313f27a28488bd1115bcb1c7abc280db6bf054afa\" returns successfully" Jul 10 00:45:11.823109 env[1210]: time="2025-07-10T00:45:11.823068470Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-7b8bd7bfc9-9vccb,Uid:dfde559b-7bf4-4977-8d25-29403f29347b,Namespace:calico-apiserver,Attempt:1,}" Jul 10 00:45:11.824000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:11.824000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:11.824000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:11.824000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:11.824000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:11.824000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:11.824000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:11.824000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:11.824000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:11.824000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:11.824000 audit: BPF prog-id=186 op=LOAD Jul 10 00:45:11.824000 audit[4233]: AVC avc: denied { bpf } for pid=4233 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:11.824000 audit[4233]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001c5c48 a2=10 a3=1c items=0 ppid=3417 pid=4233 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:11.824000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6532643432323132373066373239393036333465393564393838326565 Jul 10 00:45:11.824000 audit[4233]: AVC avc: denied { perfmon } for pid=4233 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:11.824000 audit[4233]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001c56b0 a2=3c a3=8 items=0 ppid=3417 pid=4233 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:11.824000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6532643432323132373066373239393036333465393564393838326565 Jul 10 00:45:11.824000 audit[4233]: AVC avc: denied { bpf } for pid=4233 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:11.824000 audit[4233]: AVC avc: denied { bpf } for pid=4233 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:11.824000 audit[4233]: AVC avc: denied { bpf } for pid=4233 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:11.824000 audit[4233]: AVC avc: denied { perfmon } for pid=4233 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:11.824000 audit[4233]: AVC avc: denied { perfmon } for pid=4233 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:11.824000 audit[4233]: AVC avc: denied { perfmon } for pid=4233 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:11.824000 audit[4233]: AVC avc: denied { perfmon } for pid=4233 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:11.824000 audit[4233]: AVC avc: denied { perfmon } for pid=4233 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:11.824000 audit[4233]: AVC avc: denied { bpf } for pid=4233 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:11.824000 audit[4233]: AVC avc: denied { bpf } for pid=4233 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:11.824000 audit: BPF prog-id=187 op=LOAD Jul 10 00:45:11.824000 audit[4233]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001c59d8 a2=78 a3=c0002a1410 items=0 ppid=3417 pid=4233 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:11.824000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6532643432323132373066373239393036333465393564393838326565 Jul 10 00:45:11.826000 audit[4233]: AVC avc: denied { bpf } for pid=4233 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:11.826000 audit[4233]: AVC avc: denied { bpf } for pid=4233 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:11.826000 audit[4233]: AVC avc: denied { perfmon } for pid=4233 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:11.826000 audit[4233]: AVC avc: denied { perfmon } for pid=4233 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:11.826000 audit[4233]: AVC avc: denied { perfmon } for pid=4233 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:11.826000 audit[4233]: AVC avc: denied { perfmon } for pid=4233 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:11.826000 audit[4233]: AVC avc: denied { perfmon } for pid=4233 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:11.826000 audit[4233]: AVC avc: denied { bpf } for pid=4233 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:11.826000 audit[4233]: AVC avc: denied { bpf } for pid=4233 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:11.826000 audit: BPF prog-id=188 op=LOAD Jul 10 00:45:11.826000 audit[4233]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001c5770 a2=78 a3=c0002a1458 items=0 ppid=3417 pid=4233 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:11.826000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6532643432323132373066373239393036333465393564393838326565 Jul 10 00:45:11.826000 audit: BPF prog-id=188 op=UNLOAD Jul 10 00:45:11.826000 audit: BPF prog-id=187 op=UNLOAD Jul 10 00:45:11.826000 audit[4233]: AVC avc: denied { bpf } for pid=4233 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:11.826000 audit[4233]: AVC avc: denied { bpf } for pid=4233 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:11.826000 audit[4233]: AVC avc: denied { bpf } for pid=4233 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:11.826000 audit[4233]: AVC avc: denied { perfmon } for pid=4233 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:11.826000 audit[4233]: AVC avc: denied { perfmon } for pid=4233 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:11.826000 audit[4233]: AVC avc: denied { perfmon } for pid=4233 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:11.826000 audit[4233]: AVC avc: denied { perfmon } for pid=4233 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:11.826000 audit[4233]: AVC avc: denied { perfmon } for pid=4233 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:11.826000 audit[4233]: AVC avc: denied { bpf } for pid=4233 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:11.826000 audit[4233]: AVC avc: denied { bpf } for pid=4233 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:11.826000 audit: BPF prog-id=189 op=LOAD Jul 10 00:45:11.826000 audit[4233]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001c5c30 a2=78 a3=c0002a1868 items=0 ppid=3417 pid=4233 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:11.826000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6532643432323132373066373239393036333465393564393838326565 Jul 10 00:45:11.862000 audit[4245]: AVC avc: denied { search } for pid=4245 comm="nginx" name="crypto" dev="proc" ino=29744 scontext=system_u:system_r:svirt_lxc_net_t:s0:c674,c710 tcontext=system_u:object_r:sysctl_crypto_t:s0 tclass=dir permissive=0 Jul 10 00:45:11.862000 audit[4245]: SYSCALL arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7ff74a502728 a2=0 a3=0 items=0 ppid=3417 pid=4245 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="nginx" exe="/usr/sbin/nginx" subj=system_u:system_r:svirt_lxc_net_t:s0:c674,c710 key=(null) Jul 10 00:45:11.862000 audit: PROCTITLE proctitle=2F7573722F7362696E2F6E67696E78002D67006461656D6F6E206F66663B Jul 10 00:45:11.872925 env[1210]: time="2025-07-10T00:45:11.872871420Z" level=info msg="StartContainer for \"e2d4221270f72990634e95d9882ee3586803f4bd0a8952616e8f0e02c63dffc8\" returns successfully" Jul 10 00:45:11.903622 kubelet[2000]: E0710 00:45:11.902838 2000 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:45:12.031969 systemd[1]: run-netns-cni\x2d96c8ed9a\x2d0222\x2d2bc2\x2d3599\x2d29fcaa3156c5.mount: Deactivated successfully. Jul 10 00:45:12.032068 systemd[1]: run-netns-cni\x2d37c6f91d\x2d30f2\x2d8309\x2d11f6\x2debdddbb761b0.mount: Deactivated successfully. Jul 10 00:45:12.229000 audit[4296]: NETFILTER_CFG table=filter:112 family=2 entries=17 op=nft_register_rule pid=4296 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:45:12.229000 audit[4296]: SYSCALL arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7ffd91d16ca0 a2=0 a3=7ffd91d16c8c items=0 ppid=2141 pid=4296 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:12.229000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:45:12.236000 audit[4296]: NETFILTER_CFG table=nat:113 family=2 entries=35 op=nft_register_chain pid=4296 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:45:12.236000 audit[4296]: SYSCALL arch=c000003e syscall=46 success=yes exit=14196 a0=3 a1=7ffd91d16ca0 a2=0 a3=7ffd91d16c8c items=0 ppid=2141 pid=4296 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:12.236000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:45:12.296396 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Jul 10 00:45:12.296826 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): caliedb5a38bee6: link becomes ready Jul 10 00:45:12.297736 systemd-networkd[1027]: caliedb5a38bee6: Link UP Jul 10 00:45:12.297948 systemd-networkd[1027]: caliedb5a38bee6: Gained carrier Jul 10 00:45:12.309463 env[1210]: 2025-07-10 00:45:12.226 [INFO][4263] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-coredns--674b8bbfcf--dgqq9-eth0 coredns-674b8bbfcf- kube-system d4134d3e-309e-4c16-a93c-0185dfd5a718 1016 0 2025-07-10 00:44:28 +0000 UTC map[k8s-app:kube-dns pod-template-hash:674b8bbfcf projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s localhost coredns-674b8bbfcf-dgqq9 eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] caliedb5a38bee6 [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] [] }} ContainerID="277513f0b06eb367a3c52878ab9e62d210d47f1e3d6f00ac9a0d23bb215715eb" Namespace="kube-system" Pod="coredns-674b8bbfcf-dgqq9" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--dgqq9-" Jul 10 00:45:12.309463 env[1210]: 2025-07-10 00:45:12.226 [INFO][4263] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="277513f0b06eb367a3c52878ab9e62d210d47f1e3d6f00ac9a0d23bb215715eb" Namespace="kube-system" Pod="coredns-674b8bbfcf-dgqq9" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--dgqq9-eth0" Jul 10 00:45:12.309463 env[1210]: 2025-07-10 00:45:12.259 [INFO][4300] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="277513f0b06eb367a3c52878ab9e62d210d47f1e3d6f00ac9a0d23bb215715eb" HandleID="k8s-pod-network.277513f0b06eb367a3c52878ab9e62d210d47f1e3d6f00ac9a0d23bb215715eb" Workload="localhost-k8s-coredns--674b8bbfcf--dgqq9-eth0" Jul 10 00:45:12.309463 env[1210]: 2025-07-10 00:45:12.259 [INFO][4300] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="277513f0b06eb367a3c52878ab9e62d210d47f1e3d6f00ac9a0d23bb215715eb" HandleID="k8s-pod-network.277513f0b06eb367a3c52878ab9e62d210d47f1e3d6f00ac9a0d23bb215715eb" Workload="localhost-k8s-coredns--674b8bbfcf--dgqq9-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0002c92d0), Attrs:map[string]string{"namespace":"kube-system", "node":"localhost", "pod":"coredns-674b8bbfcf-dgqq9", "timestamp":"2025-07-10 00:45:12.259248884 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 10 00:45:12.309463 env[1210]: 2025-07-10 00:45:12.259 [INFO][4300] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:45:12.309463 env[1210]: 2025-07-10 00:45:12.259 [INFO][4300] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:45:12.309463 env[1210]: 2025-07-10 00:45:12.259 [INFO][4300] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 10 00:45:12.309463 env[1210]: 2025-07-10 00:45:12.266 [INFO][4300] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.277513f0b06eb367a3c52878ab9e62d210d47f1e3d6f00ac9a0d23bb215715eb" host="localhost" Jul 10 00:45:12.309463 env[1210]: 2025-07-10 00:45:12.271 [INFO][4300] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 10 00:45:12.309463 env[1210]: 2025-07-10 00:45:12.276 [INFO][4300] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 10 00:45:12.309463 env[1210]: 2025-07-10 00:45:12.278 [INFO][4300] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 10 00:45:12.309463 env[1210]: 2025-07-10 00:45:12.279 [INFO][4300] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 10 00:45:12.309463 env[1210]: 2025-07-10 00:45:12.280 [INFO][4300] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.277513f0b06eb367a3c52878ab9e62d210d47f1e3d6f00ac9a0d23bb215715eb" host="localhost" Jul 10 00:45:12.309463 env[1210]: 2025-07-10 00:45:12.281 [INFO][4300] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.277513f0b06eb367a3c52878ab9e62d210d47f1e3d6f00ac9a0d23bb215715eb Jul 10 00:45:12.309463 env[1210]: 2025-07-10 00:45:12.284 [INFO][4300] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.277513f0b06eb367a3c52878ab9e62d210d47f1e3d6f00ac9a0d23bb215715eb" host="localhost" Jul 10 00:45:12.309463 env[1210]: 2025-07-10 00:45:12.290 [INFO][4300] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.135/26] block=192.168.88.128/26 handle="k8s-pod-network.277513f0b06eb367a3c52878ab9e62d210d47f1e3d6f00ac9a0d23bb215715eb" host="localhost" Jul 10 00:45:12.309463 env[1210]: 2025-07-10 00:45:12.290 [INFO][4300] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.135/26] handle="k8s-pod-network.277513f0b06eb367a3c52878ab9e62d210d47f1e3d6f00ac9a0d23bb215715eb" host="localhost" Jul 10 00:45:12.309463 env[1210]: 2025-07-10 00:45:12.290 [INFO][4300] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:45:12.309463 env[1210]: 2025-07-10 00:45:12.290 [INFO][4300] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.135/26] IPv6=[] ContainerID="277513f0b06eb367a3c52878ab9e62d210d47f1e3d6f00ac9a0d23bb215715eb" HandleID="k8s-pod-network.277513f0b06eb367a3c52878ab9e62d210d47f1e3d6f00ac9a0d23bb215715eb" Workload="localhost-k8s-coredns--674b8bbfcf--dgqq9-eth0" Jul 10 00:45:12.310263 env[1210]: 2025-07-10 00:45:12.292 [INFO][4263] cni-plugin/k8s.go 418: Populated endpoint ContainerID="277513f0b06eb367a3c52878ab9e62d210d47f1e3d6f00ac9a0d23bb215715eb" Namespace="kube-system" Pod="coredns-674b8bbfcf-dgqq9" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--dgqq9-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--674b8bbfcf--dgqq9-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"d4134d3e-309e-4c16-a93c-0185dfd5a718", ResourceVersion:"1016", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 44, 28, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"coredns-674b8bbfcf-dgqq9", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"caliedb5a38bee6", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:45:12.310263 env[1210]: 2025-07-10 00:45:12.292 [INFO][4263] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.135/32] ContainerID="277513f0b06eb367a3c52878ab9e62d210d47f1e3d6f00ac9a0d23bb215715eb" Namespace="kube-system" Pod="coredns-674b8bbfcf-dgqq9" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--dgqq9-eth0" Jul 10 00:45:12.310263 env[1210]: 2025-07-10 00:45:12.292 [INFO][4263] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to caliedb5a38bee6 ContainerID="277513f0b06eb367a3c52878ab9e62d210d47f1e3d6f00ac9a0d23bb215715eb" Namespace="kube-system" Pod="coredns-674b8bbfcf-dgqq9" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--dgqq9-eth0" Jul 10 00:45:12.310263 env[1210]: 2025-07-10 00:45:12.297 [INFO][4263] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="277513f0b06eb367a3c52878ab9e62d210d47f1e3d6f00ac9a0d23bb215715eb" Namespace="kube-system" Pod="coredns-674b8bbfcf-dgqq9" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--dgqq9-eth0" Jul 10 00:45:12.310263 env[1210]: 2025-07-10 00:45:12.297 [INFO][4263] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="277513f0b06eb367a3c52878ab9e62d210d47f1e3d6f00ac9a0d23bb215715eb" Namespace="kube-system" Pod="coredns-674b8bbfcf-dgqq9" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--dgqq9-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--674b8bbfcf--dgqq9-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"d4134d3e-309e-4c16-a93c-0185dfd5a718", ResourceVersion:"1016", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 44, 28, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"277513f0b06eb367a3c52878ab9e62d210d47f1e3d6f00ac9a0d23bb215715eb", Pod:"coredns-674b8bbfcf-dgqq9", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"caliedb5a38bee6", MAC:"ce:ba:bb:18:77:d7", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:45:12.310263 env[1210]: 2025-07-10 00:45:12.307 [INFO][4263] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="277513f0b06eb367a3c52878ab9e62d210d47f1e3d6f00ac9a0d23bb215715eb" Namespace="kube-system" Pod="coredns-674b8bbfcf-dgqq9" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--dgqq9-eth0" Jul 10 00:45:12.319491 env[1210]: time="2025-07-10T00:45:12.319319291Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 10 00:45:12.319491 env[1210]: time="2025-07-10T00:45:12.319356862Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 10 00:45:12.319491 env[1210]: time="2025-07-10T00:45:12.319366831Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 10 00:45:12.319809 env[1210]: time="2025-07-10T00:45:12.319730296Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/277513f0b06eb367a3c52878ab9e62d210d47f1e3d6f00ac9a0d23bb215715eb pid=4330 runtime=io.containerd.runc.v2 Jul 10 00:45:12.324965 systemd-networkd[1027]: cali11a95a4ae14: Gained IPv6LL Jul 10 00:45:12.325000 audit[4336]: NETFILTER_CFG table=filter:114 family=2 entries=54 op=nft_register_chain pid=4336 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 10 00:45:12.325000 audit[4336]: SYSCALL arch=c000003e syscall=46 success=yes exit=25556 a0=3 a1=7ffdf103b490 a2=0 a3=7ffdf103b47c items=0 ppid=3373 pid=4336 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:12.325000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 10 00:45:12.338666 systemd[1]: Started cri-containerd-277513f0b06eb367a3c52878ab9e62d210d47f1e3d6f00ac9a0d23bb215715eb.scope. Jul 10 00:45:12.352000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:12.352000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:12.352000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:12.352000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:12.352000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:12.352000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:12.352000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:12.352000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:12.352000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:12.352000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:12.352000 audit: BPF prog-id=190 op=LOAD Jul 10 00:45:12.352000 audit[4341]: AVC avc: denied { bpf } for pid=4341 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:12.352000 audit[4341]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=4330 pid=4341 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:12.352000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3237373531336630623036656233363761336335323837386162396536 Jul 10 00:45:12.352000 audit[4341]: AVC avc: denied { perfmon } for pid=4341 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:12.352000 audit[4341]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=4330 pid=4341 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:12.352000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3237373531336630623036656233363761336335323837386162396536 Jul 10 00:45:12.352000 audit[4341]: AVC avc: denied { bpf } for pid=4341 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:12.352000 audit[4341]: AVC avc: denied { bpf } for pid=4341 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:12.352000 audit[4341]: AVC avc: denied { bpf } for pid=4341 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:12.352000 audit[4341]: AVC avc: denied { perfmon } for pid=4341 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:12.352000 audit[4341]: AVC avc: denied { perfmon } for pid=4341 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:12.352000 audit[4341]: AVC avc: denied { perfmon } for pid=4341 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:12.352000 audit[4341]: AVC avc: denied { perfmon } for pid=4341 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:12.352000 audit[4341]: AVC avc: denied { perfmon } for pid=4341 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:12.352000 audit[4341]: AVC avc: denied { bpf } for pid=4341 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:12.352000 audit[4341]: AVC avc: denied { bpf } for pid=4341 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:12.352000 audit: BPF prog-id=191 op=LOAD Jul 10 00:45:12.352000 audit[4341]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0001cae50 items=0 ppid=4330 pid=4341 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:12.352000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3237373531336630623036656233363761336335323837386162396536 Jul 10 00:45:12.353000 audit[4341]: AVC avc: denied { bpf } for pid=4341 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:12.353000 audit[4341]: AVC avc: denied { bpf } for pid=4341 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:12.353000 audit[4341]: AVC avc: denied { perfmon } for pid=4341 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:12.353000 audit[4341]: AVC avc: denied { perfmon } for pid=4341 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:12.353000 audit[4341]: AVC avc: denied { perfmon } for pid=4341 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:12.353000 audit[4341]: AVC avc: denied { perfmon } for pid=4341 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:12.353000 audit[4341]: AVC avc: denied { perfmon } for pid=4341 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:12.353000 audit[4341]: AVC avc: denied { bpf } for pid=4341 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:12.353000 audit[4341]: AVC avc: denied { bpf } for pid=4341 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:12.353000 audit: BPF prog-id=192 op=LOAD Jul 10 00:45:12.353000 audit[4341]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0001cae98 items=0 ppid=4330 pid=4341 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:12.353000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3237373531336630623036656233363761336335323837386162396536 Jul 10 00:45:12.353000 audit: BPF prog-id=192 op=UNLOAD Jul 10 00:45:12.353000 audit: BPF prog-id=191 op=UNLOAD Jul 10 00:45:12.353000 audit[4341]: AVC avc: denied { bpf } for pid=4341 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:12.353000 audit[4341]: AVC avc: denied { bpf } for pid=4341 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:12.353000 audit[4341]: AVC avc: denied { bpf } for pid=4341 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:12.353000 audit[4341]: AVC avc: denied { perfmon } for pid=4341 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:12.353000 audit[4341]: AVC avc: denied { perfmon } for pid=4341 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:12.353000 audit[4341]: AVC avc: denied { perfmon } for pid=4341 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:12.353000 audit[4341]: AVC avc: denied { perfmon } for pid=4341 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:12.353000 audit[4341]: AVC avc: denied { perfmon } for pid=4341 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:12.353000 audit[4341]: AVC avc: denied { bpf } for pid=4341 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:12.353000 audit[4341]: AVC avc: denied { bpf } for pid=4341 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:12.353000 audit: BPF prog-id=193 op=LOAD Jul 10 00:45:12.353000 audit[4341]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0001cb2a8 items=0 ppid=4330 pid=4341 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:12.353000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3237373531336630623036656233363761336335323837386162396536 Jul 10 00:45:12.355309 systemd-resolved[1143]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 10 00:45:12.379956 env[1210]: time="2025-07-10T00:45:12.379904588Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-dgqq9,Uid:d4134d3e-309e-4c16-a93c-0185dfd5a718,Namespace:kube-system,Attempt:1,} returns sandbox id \"277513f0b06eb367a3c52878ab9e62d210d47f1e3d6f00ac9a0d23bb215715eb\"" Jul 10 00:45:12.380910 kubelet[2000]: E0710 00:45:12.380878 2000 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:45:12.388420 env[1210]: time="2025-07-10T00:45:12.388357215Z" level=info msg="CreateContainer within sandbox \"277513f0b06eb367a3c52878ab9e62d210d47f1e3d6f00ac9a0d23bb215715eb\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Jul 10 00:45:12.406647 env[1210]: time="2025-07-10T00:45:12.406587467Z" level=info msg="CreateContainer within sandbox \"277513f0b06eb367a3c52878ab9e62d210d47f1e3d6f00ac9a0d23bb215715eb\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"1ab231542ac79ade083f10e7a948389b6760e7a653731a12053fac414ae9c607\"" Jul 10 00:45:12.407624 env[1210]: time="2025-07-10T00:45:12.407590119Z" level=info msg="StartContainer for \"1ab231542ac79ade083f10e7a948389b6760e7a653731a12053fac414ae9c607\"" Jul 10 00:45:12.415213 systemd-networkd[1027]: cali81298c7dd45: Link UP Jul 10 00:45:12.420913 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali81298c7dd45: link becomes ready Jul 10 00:45:12.416746 systemd-networkd[1027]: cali81298c7dd45: Gained carrier Jul 10 00:45:12.431306 env[1210]: 2025-07-10 00:45:12.226 [INFO][4278] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-calico--apiserver--7b8bd7bfc9--9vccb-eth0 calico-apiserver-7b8bd7bfc9- calico-apiserver dfde559b-7bf4-4977-8d25-29403f29347b 1017 0 2025-07-10 00:44:39 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:7b8bd7bfc9 projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s localhost calico-apiserver-7b8bd7bfc9-9vccb eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] cali81298c7dd45 [] [] }} ContainerID="fca81c38492a8f67da7584ec999b6e3ea7d4a69a3dd41d4d17dfd64e20e24b31" Namespace="calico-apiserver" Pod="calico-apiserver-7b8bd7bfc9-9vccb" WorkloadEndpoint="localhost-k8s-calico--apiserver--7b8bd7bfc9--9vccb-" Jul 10 00:45:12.431306 env[1210]: 2025-07-10 00:45:12.226 [INFO][4278] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="fca81c38492a8f67da7584ec999b6e3ea7d4a69a3dd41d4d17dfd64e20e24b31" Namespace="calico-apiserver" Pod="calico-apiserver-7b8bd7bfc9-9vccb" WorkloadEndpoint="localhost-k8s-calico--apiserver--7b8bd7bfc9--9vccb-eth0" Jul 10 00:45:12.431306 env[1210]: 2025-07-10 00:45:12.263 [INFO][4298] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="fca81c38492a8f67da7584ec999b6e3ea7d4a69a3dd41d4d17dfd64e20e24b31" HandleID="k8s-pod-network.fca81c38492a8f67da7584ec999b6e3ea7d4a69a3dd41d4d17dfd64e20e24b31" Workload="localhost-k8s-calico--apiserver--7b8bd7bfc9--9vccb-eth0" Jul 10 00:45:12.431306 env[1210]: 2025-07-10 00:45:12.263 [INFO][4298] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="fca81c38492a8f67da7584ec999b6e3ea7d4a69a3dd41d4d17dfd64e20e24b31" HandleID="k8s-pod-network.fca81c38492a8f67da7584ec999b6e3ea7d4a69a3dd41d4d17dfd64e20e24b31" Workload="localhost-k8s-calico--apiserver--7b8bd7bfc9--9vccb-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0002df050), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"localhost", "pod":"calico-apiserver-7b8bd7bfc9-9vccb", "timestamp":"2025-07-10 00:45:12.263022294 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 10 00:45:12.431306 env[1210]: 2025-07-10 00:45:12.263 [INFO][4298] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:45:12.431306 env[1210]: 2025-07-10 00:45:12.290 [INFO][4298] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:45:12.431306 env[1210]: 2025-07-10 00:45:12.291 [INFO][4298] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 10 00:45:12.431306 env[1210]: 2025-07-10 00:45:12.368 [INFO][4298] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.fca81c38492a8f67da7584ec999b6e3ea7d4a69a3dd41d4d17dfd64e20e24b31" host="localhost" Jul 10 00:45:12.431306 env[1210]: 2025-07-10 00:45:12.375 [INFO][4298] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 10 00:45:12.431306 env[1210]: 2025-07-10 00:45:12.381 [INFO][4298] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 10 00:45:12.431306 env[1210]: 2025-07-10 00:45:12.383 [INFO][4298] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 10 00:45:12.431306 env[1210]: 2025-07-10 00:45:12.387 [INFO][4298] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 10 00:45:12.431306 env[1210]: 2025-07-10 00:45:12.387 [INFO][4298] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.fca81c38492a8f67da7584ec999b6e3ea7d4a69a3dd41d4d17dfd64e20e24b31" host="localhost" Jul 10 00:45:12.431306 env[1210]: 2025-07-10 00:45:12.390 [INFO][4298] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.fca81c38492a8f67da7584ec999b6e3ea7d4a69a3dd41d4d17dfd64e20e24b31 Jul 10 00:45:12.431306 env[1210]: 2025-07-10 00:45:12.395 [INFO][4298] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.fca81c38492a8f67da7584ec999b6e3ea7d4a69a3dd41d4d17dfd64e20e24b31" host="localhost" Jul 10 00:45:12.431306 env[1210]: 2025-07-10 00:45:12.410 [INFO][4298] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.136/26] block=192.168.88.128/26 handle="k8s-pod-network.fca81c38492a8f67da7584ec999b6e3ea7d4a69a3dd41d4d17dfd64e20e24b31" host="localhost" Jul 10 00:45:12.431306 env[1210]: 2025-07-10 00:45:12.410 [INFO][4298] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.136/26] handle="k8s-pod-network.fca81c38492a8f67da7584ec999b6e3ea7d4a69a3dd41d4d17dfd64e20e24b31" host="localhost" Jul 10 00:45:12.431306 env[1210]: 2025-07-10 00:45:12.410 [INFO][4298] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:45:12.431306 env[1210]: 2025-07-10 00:45:12.410 [INFO][4298] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.136/26] IPv6=[] ContainerID="fca81c38492a8f67da7584ec999b6e3ea7d4a69a3dd41d4d17dfd64e20e24b31" HandleID="k8s-pod-network.fca81c38492a8f67da7584ec999b6e3ea7d4a69a3dd41d4d17dfd64e20e24b31" Workload="localhost-k8s-calico--apiserver--7b8bd7bfc9--9vccb-eth0" Jul 10 00:45:12.431997 env[1210]: 2025-07-10 00:45:12.413 [INFO][4278] cni-plugin/k8s.go 418: Populated endpoint ContainerID="fca81c38492a8f67da7584ec999b6e3ea7d4a69a3dd41d4d17dfd64e20e24b31" Namespace="calico-apiserver" Pod="calico-apiserver-7b8bd7bfc9-9vccb" WorkloadEndpoint="localhost-k8s-calico--apiserver--7b8bd7bfc9--9vccb-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--7b8bd7bfc9--9vccb-eth0", GenerateName:"calico-apiserver-7b8bd7bfc9-", Namespace:"calico-apiserver", SelfLink:"", UID:"dfde559b-7bf4-4977-8d25-29403f29347b", ResourceVersion:"1017", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 44, 39, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"7b8bd7bfc9", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"calico-apiserver-7b8bd7bfc9-9vccb", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali81298c7dd45", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:45:12.431997 env[1210]: 2025-07-10 00:45:12.413 [INFO][4278] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.136/32] ContainerID="fca81c38492a8f67da7584ec999b6e3ea7d4a69a3dd41d4d17dfd64e20e24b31" Namespace="calico-apiserver" Pod="calico-apiserver-7b8bd7bfc9-9vccb" WorkloadEndpoint="localhost-k8s-calico--apiserver--7b8bd7bfc9--9vccb-eth0" Jul 10 00:45:12.431997 env[1210]: 2025-07-10 00:45:12.413 [INFO][4278] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali81298c7dd45 ContainerID="fca81c38492a8f67da7584ec999b6e3ea7d4a69a3dd41d4d17dfd64e20e24b31" Namespace="calico-apiserver" Pod="calico-apiserver-7b8bd7bfc9-9vccb" WorkloadEndpoint="localhost-k8s-calico--apiserver--7b8bd7bfc9--9vccb-eth0" Jul 10 00:45:12.431997 env[1210]: 2025-07-10 00:45:12.416 [INFO][4278] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="fca81c38492a8f67da7584ec999b6e3ea7d4a69a3dd41d4d17dfd64e20e24b31" Namespace="calico-apiserver" Pod="calico-apiserver-7b8bd7bfc9-9vccb" WorkloadEndpoint="localhost-k8s-calico--apiserver--7b8bd7bfc9--9vccb-eth0" Jul 10 00:45:12.431997 env[1210]: 2025-07-10 00:45:12.417 [INFO][4278] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="fca81c38492a8f67da7584ec999b6e3ea7d4a69a3dd41d4d17dfd64e20e24b31" Namespace="calico-apiserver" Pod="calico-apiserver-7b8bd7bfc9-9vccb" WorkloadEndpoint="localhost-k8s-calico--apiserver--7b8bd7bfc9--9vccb-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--7b8bd7bfc9--9vccb-eth0", GenerateName:"calico-apiserver-7b8bd7bfc9-", Namespace:"calico-apiserver", SelfLink:"", UID:"dfde559b-7bf4-4977-8d25-29403f29347b", ResourceVersion:"1017", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 44, 39, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"7b8bd7bfc9", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"fca81c38492a8f67da7584ec999b6e3ea7d4a69a3dd41d4d17dfd64e20e24b31", Pod:"calico-apiserver-7b8bd7bfc9-9vccb", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali81298c7dd45", MAC:"7e:4c:87:ff:a1:1b", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:45:12.431997 env[1210]: 2025-07-10 00:45:12.428 [INFO][4278] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="fca81c38492a8f67da7584ec999b6e3ea7d4a69a3dd41d4d17dfd64e20e24b31" Namespace="calico-apiserver" Pod="calico-apiserver-7b8bd7bfc9-9vccb" WorkloadEndpoint="localhost-k8s-calico--apiserver--7b8bd7bfc9--9vccb-eth0" Jul 10 00:45:12.434518 systemd[1]: Started cri-containerd-1ab231542ac79ade083f10e7a948389b6760e7a653731a12053fac414ae9c607.scope. Jul 10 00:45:12.447054 env[1210]: time="2025-07-10T00:45:12.446974090Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 10 00:45:12.447054 env[1210]: time="2025-07-10T00:45:12.447050975Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 10 00:45:12.447247 env[1210]: time="2025-07-10T00:45:12.447080421Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 10 00:45:12.448542 systemd-networkd[1027]: calie97dd92203e: Gained IPv6LL Jul 10 00:45:12.449346 env[1210]: time="2025-07-10T00:45:12.447301329Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/fca81c38492a8f67da7584ec999b6e3ea7d4a69a3dd41d4d17dfd64e20e24b31 pid=4409 runtime=io.containerd.runc.v2 Jul 10 00:45:12.448000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:12.448000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:12.448000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:12.448000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:12.448000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:12.448000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:12.448000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:12.448000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:12.448000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:12.449000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:12.449000 audit: BPF prog-id=194 op=LOAD Jul 10 00:45:12.449000 audit[4376]: AVC avc: denied { bpf } for pid=4376 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:12.449000 audit[4376]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=4330 pid=4376 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:12.449000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3161623233313534326163373961646530383366313065376139343833 Jul 10 00:45:12.449000 audit[4376]: AVC avc: denied { perfmon } for pid=4376 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:12.449000 audit[4376]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=4330 pid=4376 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:12.449000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3161623233313534326163373961646530383366313065376139343833 Jul 10 00:45:12.449000 audit[4376]: AVC avc: denied { bpf } for pid=4376 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:12.449000 audit[4376]: AVC avc: denied { bpf } for pid=4376 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:12.449000 audit[4376]: AVC avc: denied { bpf } for pid=4376 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:12.449000 audit[4376]: AVC avc: denied { perfmon } for pid=4376 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:12.449000 audit[4376]: AVC avc: denied { perfmon } for pid=4376 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:12.449000 audit[4376]: AVC avc: denied { perfmon } for pid=4376 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:12.449000 audit[4376]: AVC avc: denied { perfmon } for pid=4376 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:12.449000 audit[4376]: AVC avc: denied { perfmon } for pid=4376 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:12.449000 audit[4376]: AVC avc: denied { bpf } for pid=4376 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:12.449000 audit[4376]: AVC avc: denied { bpf } for pid=4376 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:12.449000 audit: BPF prog-id=195 op=LOAD Jul 10 00:45:12.449000 audit[4376]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c000226590 items=0 ppid=4330 pid=4376 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:12.449000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3161623233313534326163373961646530383366313065376139343833 Jul 10 00:45:12.449000 audit[4376]: AVC avc: denied { bpf } for pid=4376 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:12.449000 audit[4376]: AVC avc: denied { bpf } for pid=4376 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:12.449000 audit[4376]: AVC avc: denied { perfmon } for pid=4376 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:12.449000 audit[4376]: AVC avc: denied { perfmon } for pid=4376 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:12.449000 audit[4376]: AVC avc: denied { perfmon } for pid=4376 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:12.449000 audit[4376]: AVC avc: denied { perfmon } for pid=4376 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:12.449000 audit[4376]: AVC avc: denied { perfmon } for pid=4376 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:12.449000 audit[4376]: AVC avc: denied { bpf } for pid=4376 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:12.449000 audit[4376]: AVC avc: denied { bpf } for pid=4376 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:12.449000 audit: BPF prog-id=196 op=LOAD Jul 10 00:45:12.449000 audit[4376]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0002265d8 items=0 ppid=4330 pid=4376 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:12.449000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3161623233313534326163373961646530383366313065376139343833 Jul 10 00:45:12.450000 audit: BPF prog-id=196 op=UNLOAD Jul 10 00:45:12.450000 audit: BPF prog-id=195 op=UNLOAD Jul 10 00:45:12.450000 audit[4376]: AVC avc: denied { bpf } for pid=4376 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:12.450000 audit[4376]: AVC avc: denied { bpf } for pid=4376 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:12.450000 audit[4376]: AVC avc: denied { bpf } for pid=4376 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:12.450000 audit[4376]: AVC avc: denied { perfmon } for pid=4376 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:12.450000 audit[4376]: AVC avc: denied { perfmon } for pid=4376 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:12.450000 audit[4376]: AVC avc: denied { perfmon } for pid=4376 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:12.450000 audit[4376]: AVC avc: denied { perfmon } for pid=4376 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:12.450000 audit[4376]: AVC avc: denied { perfmon } for pid=4376 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:12.450000 audit[4376]: AVC avc: denied { bpf } for pid=4376 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:12.450000 audit[4376]: AVC avc: denied { bpf } for pid=4376 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:12.450000 audit: BPF prog-id=197 op=LOAD Jul 10 00:45:12.450000 audit[4376]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0002269e8 items=0 ppid=4330 pid=4376 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:12.450000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3161623233313534326163373961646530383366313065376139343833 Jul 10 00:45:12.450000 audit[4418]: NETFILTER_CFG table=filter:115 family=2 entries=59 op=nft_register_chain pid=4418 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 10 00:45:12.450000 audit[4418]: SYSCALL arch=c000003e syscall=46 success=yes exit=29460 a0=3 a1=7fff945d5df0 a2=0 a3=7fff945d5ddc items=0 ppid=3373 pid=4418 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:12.450000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 10 00:45:12.461382 systemd[1]: Started cri-containerd-fca81c38492a8f67da7584ec999b6e3ea7d4a69a3dd41d4d17dfd64e20e24b31.scope. Jul 10 00:45:12.468612 env[1210]: time="2025-07-10T00:45:12.468547932Z" level=info msg="StartContainer for \"1ab231542ac79ade083f10e7a948389b6760e7a653731a12053fac414ae9c607\" returns successfully" Jul 10 00:45:12.472000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:12.472000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:12.472000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:12.472000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:12.472000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:12.472000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:12.472000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:12.472000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:12.472000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:12.473000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:12.473000 audit: BPF prog-id=198 op=LOAD Jul 10 00:45:12.473000 audit[4417]: AVC avc: denied { bpf } for pid=4417 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:12.473000 audit[4417]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=4409 pid=4417 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:12.473000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6663613831633338343932613866363764613735383465633939396236 Jul 10 00:45:12.473000 audit[4417]: AVC avc: denied { perfmon } for pid=4417 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:12.473000 audit[4417]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=4409 pid=4417 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:12.473000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6663613831633338343932613866363764613735383465633939396236 Jul 10 00:45:12.473000 audit[4417]: AVC avc: denied { bpf } for pid=4417 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:12.473000 audit[4417]: AVC avc: denied { bpf } for pid=4417 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:12.473000 audit[4417]: AVC avc: denied { bpf } for pid=4417 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:12.473000 audit[4417]: AVC avc: denied { perfmon } for pid=4417 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:12.473000 audit[4417]: AVC avc: denied { perfmon } for pid=4417 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:12.473000 audit[4417]: AVC avc: denied { perfmon } for pid=4417 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:12.473000 audit[4417]: AVC avc: denied { perfmon } for pid=4417 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:12.473000 audit[4417]: AVC avc: denied { perfmon } for pid=4417 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:12.473000 audit[4417]: AVC avc: denied { bpf } for pid=4417 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:12.473000 audit[4417]: AVC avc: denied { bpf } for pid=4417 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:12.473000 audit: BPF prog-id=199 op=LOAD Jul 10 00:45:12.473000 audit[4417]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c00030edb0 items=0 ppid=4409 pid=4417 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:12.473000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6663613831633338343932613866363764613735383465633939396236 Jul 10 00:45:12.473000 audit[4417]: AVC avc: denied { bpf } for pid=4417 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:12.473000 audit[4417]: AVC avc: denied { bpf } for pid=4417 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:12.473000 audit[4417]: AVC avc: denied { perfmon } for pid=4417 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:12.473000 audit[4417]: AVC avc: denied { perfmon } for pid=4417 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:12.473000 audit[4417]: AVC avc: denied { perfmon } for pid=4417 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:12.473000 audit[4417]: AVC avc: denied { perfmon } for pid=4417 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:12.473000 audit[4417]: AVC avc: denied { perfmon } for pid=4417 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:12.473000 audit[4417]: AVC avc: denied { bpf } for pid=4417 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:12.473000 audit[4417]: AVC avc: denied { bpf } for pid=4417 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:12.473000 audit: BPF prog-id=200 op=LOAD Jul 10 00:45:12.473000 audit[4417]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c00030edf8 items=0 ppid=4409 pid=4417 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:12.473000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6663613831633338343932613866363764613735383465633939396236 Jul 10 00:45:12.473000 audit: BPF prog-id=200 op=UNLOAD Jul 10 00:45:12.473000 audit: BPF prog-id=199 op=UNLOAD Jul 10 00:45:12.473000 audit[4417]: AVC avc: denied { bpf } for pid=4417 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:12.473000 audit[4417]: AVC avc: denied { bpf } for pid=4417 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:12.473000 audit[4417]: AVC avc: denied { bpf } for pid=4417 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:12.473000 audit[4417]: AVC avc: denied { perfmon } for pid=4417 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:12.473000 audit[4417]: AVC avc: denied { perfmon } for pid=4417 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:12.473000 audit[4417]: AVC avc: denied { perfmon } for pid=4417 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:12.473000 audit[4417]: AVC avc: denied { perfmon } for pid=4417 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:12.473000 audit[4417]: AVC avc: denied { perfmon } for pid=4417 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:12.473000 audit[4417]: AVC avc: denied { bpf } for pid=4417 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:12.473000 audit[4417]: AVC avc: denied { bpf } for pid=4417 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:12.473000 audit: BPF prog-id=201 op=LOAD Jul 10 00:45:12.473000 audit[4417]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c00030f208 items=0 ppid=4409 pid=4417 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:12.473000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6663613831633338343932613866363764613735383465633939396236 Jul 10 00:45:12.475422 systemd-resolved[1143]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 10 00:45:12.477000 audit[4396]: AVC avc: denied { getattr } for pid=4396 comm="coredns" path="cgroup:[4026532708]" dev="nsfs" ino=4026532708 scontext=system_u:system_r:svirt_lxc_net_t:s0:c276,c384 tcontext=system_u:object_r:nsfs_t:s0 tclass=file permissive=0 Jul 10 00:45:12.477000 audit[4396]: SYSCALL arch=c000003e syscall=262 success=no exit=-13 a0=ffffffffffffff9c a1=c00015eb70 a2=c0000cf2e8 a3=0 items=0 ppid=4330 pid=4396 auid=4294967295 uid=65532 gid=65532 euid=65532 suid=65532 fsuid=65532 egid=65532 sgid=65532 fsgid=65532 tty=(none) ses=4294967295 comm="coredns" exe="/coredns" subj=system_u:system_r:svirt_lxc_net_t:s0:c276,c384 key=(null) Jul 10 00:45:12.477000 audit: PROCTITLE proctitle=2F636F7265646E73002D636F6E66002F6574632F636F7265646E732F436F726566696C65 Jul 10 00:45:12.497499 env[1210]: time="2025-07-10T00:45:12.497381437Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-7b8bd7bfc9-9vccb,Uid:dfde559b-7bf4-4977-8d25-29403f29347b,Namespace:calico-apiserver,Attempt:1,} returns sandbox id \"fca81c38492a8f67da7584ec999b6e3ea7d4a69a3dd41d4d17dfd64e20e24b31\"" Jul 10 00:45:12.908488 kubelet[2000]: E0710 00:45:12.908351 2000 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:45:12.908488 kubelet[2000]: E0710 00:45:12.908351 2000 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:45:12.920676 kubelet[2000]: I0710 00:45:12.920196 2000 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/coredns-674b8bbfcf-dgqq9" podStartSLOduration=44.920171754 podStartE2EDuration="44.920171754s" podCreationTimestamp="2025-07-10 00:44:28 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-10 00:45:12.919831149 +0000 UTC m=+49.325786814" watchObservedRunningTime="2025-07-10 00:45:12.920171754 +0000 UTC m=+49.326127389" Jul 10 00:45:12.930000 audit[4460]: NETFILTER_CFG table=filter:116 family=2 entries=14 op=nft_register_rule pid=4460 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:45:12.930000 audit[4460]: SYSCALL arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7ffc09ae0780 a2=0 a3=7ffc09ae076c items=0 ppid=2141 pid=4460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:12.930000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:45:12.941000 audit[4460]: NETFILTER_CFG table=nat:117 family=2 entries=44 op=nft_register_rule pid=4460 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:45:12.941000 audit[4460]: SYSCALL arch=c000003e syscall=46 success=yes exit=14196 a0=3 a1=7ffc09ae0780 a2=0 a3=7ffc09ae076c items=0 ppid=2141 pid=4460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:12.941000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:45:13.215007 systemd-networkd[1027]: calic631f52e3ca: Gained IPv6LL Jul 10 00:45:13.343020 systemd-networkd[1027]: caliedb5a38bee6: Gained IPv6LL Jul 10 00:45:13.917360 kubelet[2000]: E0710 00:45:13.917323 2000 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:45:13.918474 kubelet[2000]: E0710 00:45:13.917857 2000 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:45:13.939000 audit[4468]: NETFILTER_CFG table=filter:118 family=2 entries=14 op=nft_register_rule pid=4468 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:45:13.939000 audit[4468]: SYSCALL arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7ffcffb2dd30 a2=0 a3=7ffcffb2dd1c items=0 ppid=2141 pid=4468 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:13.939000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:45:13.949000 audit[4468]: NETFILTER_CFG table=nat:119 family=2 entries=56 op=nft_register_chain pid=4468 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:45:13.949000 audit[4468]: SYSCALL arch=c000003e syscall=46 success=yes exit=19860 a0=3 a1=7ffcffb2dd30 a2=0 a3=7ffcffb2dd1c items=0 ppid=2141 pid=4468 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:13.949000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:45:14.431120 systemd-networkd[1027]: cali81298c7dd45: Gained IPv6LL Jul 10 00:45:14.768029 env[1210]: time="2025-07-10T00:45:14.767707937Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:45:14.769760 env[1210]: time="2025-07-10T00:45:14.769683360Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:5509118eed617ef04ca00f5a095bfd0a4cd1cf69edcfcf9bedf0edb641be51dd,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:45:14.771829 env[1210]: time="2025-07-10T00:45:14.771758767Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:45:14.773363 env[1210]: time="2025-07-10T00:45:14.773306846Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/apiserver@sha256:ec6b10660962e7caad70c47755049fad68f9fc2f7064e8bc7cb862583e02cc2b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:45:14.773908 env[1210]: time="2025-07-10T00:45:14.773859973Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.2\" returns image reference \"sha256:5509118eed617ef04ca00f5a095bfd0a4cd1cf69edcfcf9bedf0edb641be51dd\"" Jul 10 00:45:14.775154 env[1210]: time="2025-07-10T00:45:14.775093084Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.2\"" Jul 10 00:45:14.779951 env[1210]: time="2025-07-10T00:45:14.779896567Z" level=info msg="CreateContainer within sandbox \"a3b5605e69aecaece53871d945d3ed5f4e877b2983ad2800667e08edae6e3267\" for container &ContainerMetadata{Name:calico-apiserver,Attempt:0,}" Jul 10 00:45:14.794506 env[1210]: time="2025-07-10T00:45:14.794437148Z" level=info msg="CreateContainer within sandbox \"a3b5605e69aecaece53871d945d3ed5f4e877b2983ad2800667e08edae6e3267\" for &ContainerMetadata{Name:calico-apiserver,Attempt:0,} returns container id \"97facd7b381e3076bc7da87bee86e247c62528556048f9a837cedb24c823710d\"" Jul 10 00:45:14.795538 env[1210]: time="2025-07-10T00:45:14.795452137Z" level=info msg="StartContainer for \"97facd7b381e3076bc7da87bee86e247c62528556048f9a837cedb24c823710d\"" Jul 10 00:45:14.822538 systemd[1]: Started cri-containerd-97facd7b381e3076bc7da87bee86e247c62528556048f9a837cedb24c823710d.scope. Jul 10 00:45:14.832000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:14.832000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:14.832000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:14.832000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:14.832000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:14.832000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:14.832000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:14.832000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:14.832000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:14.833000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:14.833000 audit: BPF prog-id=202 op=LOAD Jul 10 00:45:14.833000 audit[4478]: AVC avc: denied { bpf } for pid=4478 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:14.833000 audit[4478]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=3832 pid=4478 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:14.833000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3937666163643762333831653330373662633764613837626565383665 Jul 10 00:45:14.833000 audit[4478]: AVC avc: denied { perfmon } for pid=4478 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:14.833000 audit[4478]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=3832 pid=4478 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:14.833000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3937666163643762333831653330373662633764613837626565383665 Jul 10 00:45:14.833000 audit[4478]: AVC avc: denied { bpf } for pid=4478 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:14.833000 audit[4478]: AVC avc: denied { bpf } for pid=4478 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:14.833000 audit[4478]: AVC avc: denied { bpf } for pid=4478 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:14.833000 audit[4478]: AVC avc: denied { perfmon } for pid=4478 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:14.833000 audit[4478]: AVC avc: denied { perfmon } for pid=4478 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:14.833000 audit[4478]: AVC avc: denied { perfmon } for pid=4478 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:14.833000 audit[4478]: AVC avc: denied { perfmon } for pid=4478 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:14.833000 audit[4478]: AVC avc: denied { perfmon } for pid=4478 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:14.833000 audit[4478]: AVC avc: denied { bpf } for pid=4478 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:14.833000 audit[4478]: AVC avc: denied { bpf } for pid=4478 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:14.833000 audit: BPF prog-id=203 op=LOAD Jul 10 00:45:14.833000 audit[4478]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c000220f40 items=0 ppid=3832 pid=4478 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:14.833000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3937666163643762333831653330373662633764613837626565383665 Jul 10 00:45:14.833000 audit[4478]: AVC avc: denied { bpf } for pid=4478 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:14.833000 audit[4478]: AVC avc: denied { bpf } for pid=4478 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:14.833000 audit[4478]: AVC avc: denied { perfmon } for pid=4478 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:14.833000 audit[4478]: AVC avc: denied { perfmon } for pid=4478 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:14.833000 audit[4478]: AVC avc: denied { perfmon } for pid=4478 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:14.833000 audit[4478]: AVC avc: denied { perfmon } for pid=4478 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:14.833000 audit[4478]: AVC avc: denied { perfmon } for pid=4478 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:14.833000 audit[4478]: AVC avc: denied { bpf } for pid=4478 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:14.833000 audit[4478]: AVC avc: denied { bpf } for pid=4478 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:14.833000 audit: BPF prog-id=204 op=LOAD Jul 10 00:45:14.833000 audit[4478]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c000220f88 items=0 ppid=3832 pid=4478 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:14.833000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3937666163643762333831653330373662633764613837626565383665 Jul 10 00:45:14.833000 audit: BPF prog-id=204 op=UNLOAD Jul 10 00:45:14.833000 audit: BPF prog-id=203 op=UNLOAD Jul 10 00:45:14.833000 audit[4478]: AVC avc: denied { bpf } for pid=4478 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:14.833000 audit[4478]: AVC avc: denied { bpf } for pid=4478 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:14.833000 audit[4478]: AVC avc: denied { bpf } for pid=4478 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:14.833000 audit[4478]: AVC avc: denied { perfmon } for pid=4478 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:14.833000 audit[4478]: AVC avc: denied { perfmon } for pid=4478 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:14.833000 audit[4478]: AVC avc: denied { perfmon } for pid=4478 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:14.833000 audit[4478]: AVC avc: denied { perfmon } for pid=4478 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:14.833000 audit[4478]: AVC avc: denied { perfmon } for pid=4478 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:14.833000 audit[4478]: AVC avc: denied { bpf } for pid=4478 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:14.833000 audit[4478]: AVC avc: denied { bpf } for pid=4478 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:14.833000 audit: BPF prog-id=205 op=LOAD Jul 10 00:45:14.833000 audit[4478]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c000221398 items=0 ppid=3832 pid=4478 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:14.833000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3937666163643762333831653330373662633764613837626565383665 Jul 10 00:45:14.938417 env[1210]: time="2025-07-10T00:45:14.938365263Z" level=info msg="StartContainer for \"97facd7b381e3076bc7da87bee86e247c62528556048f9a837cedb24c823710d\" returns successfully" Jul 10 00:45:14.941272 kubelet[2000]: E0710 00:45:14.941166 2000 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:45:15.951767 kubelet[2000]: I0710 00:45:15.951311 2000 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-apiserver/calico-apiserver-7b8bd7bfc9-7mdpn" podStartSLOduration=32.532682419 podStartE2EDuration="36.951292976s" podCreationTimestamp="2025-07-10 00:44:39 +0000 UTC" firstStartedPulling="2025-07-10 00:45:10.356340853 +0000 UTC m=+46.762296488" lastFinishedPulling="2025-07-10 00:45:14.77495141 +0000 UTC m=+51.180907045" observedRunningTime="2025-07-10 00:45:15.95092212 +0000 UTC m=+52.356877765" watchObservedRunningTime="2025-07-10 00:45:15.951292976 +0000 UTC m=+52.357248611" Jul 10 00:45:15.961000 audit[4512]: NETFILTER_CFG table=filter:120 family=2 entries=14 op=nft_register_rule pid=4512 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:45:15.965837 kernel: kauditd_printk_skb: 619 callbacks suppressed Jul 10 00:45:15.965925 kernel: audit: type=1325 audit(1752108315.961:1356): table=filter:120 family=2 entries=14 op=nft_register_rule pid=4512 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:45:15.961000 audit[4512]: SYSCALL arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7fffd78723d0 a2=0 a3=7fffd78723bc items=0 ppid=2141 pid=4512 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:15.974409 kernel: audit: type=1300 audit(1752108315.961:1356): arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7fffd78723d0 a2=0 a3=7fffd78723bc items=0 ppid=2141 pid=4512 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:15.974464 kernel: audit: type=1327 audit(1752108315.961:1356): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:45:15.961000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:45:15.977000 audit[4512]: NETFILTER_CFG table=nat:121 family=2 entries=20 op=nft_register_rule pid=4512 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:45:15.977000 audit[4512]: SYSCALL arch=c000003e syscall=46 success=yes exit=5772 a0=3 a1=7fffd78723d0 a2=0 a3=7fffd78723bc items=0 ppid=2141 pid=4512 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:15.987428 kernel: audit: type=1325 audit(1752108315.977:1357): table=nat:121 family=2 entries=20 op=nft_register_rule pid=4512 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:45:15.987484 kernel: audit: type=1300 audit(1752108315.977:1357): arch=c000003e syscall=46 success=yes exit=5772 a0=3 a1=7fffd78723d0 a2=0 a3=7fffd78723bc items=0 ppid=2141 pid=4512 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:15.987505 kernel: audit: type=1327 audit(1752108315.977:1357): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:45:15.977000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:45:16.055000 audit[4489]: AVC avc: denied { watch } for pid=4489 comm="apiserver" path="/calico-apiserver-certs/..2025_07_10_00_44_55.4123299332/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c25,c87 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c25,c87 tclass=file permissive=0 Jul 10 00:45:16.055000 audit[4489]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c001ec68a0 a2=fc6 a3=0 items=0 ppid=3832 pid=4489 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c25,c87 key=(null) Jul 10 00:45:16.066881 kernel: audit: type=1400 audit(1752108316.055:1358): avc: denied { watch } for pid=4489 comm="apiserver" path="/calico-apiserver-certs/..2025_07_10_00_44_55.4123299332/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c25,c87 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c25,c87 tclass=file permissive=0 Jul 10 00:45:16.066943 kernel: audit: type=1300 audit(1752108316.055:1358): arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c001ec68a0 a2=fc6 a3=0 items=0 ppid=3832 pid=4489 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c25,c87 key=(null) Jul 10 00:45:16.066972 kernel: audit: type=1327 audit(1752108316.055:1358): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 10 00:45:16.055000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 10 00:45:16.374289 systemd[1]: Started sshd@10-10.0.0.116:22-10.0.0.1:42408.service. Jul 10 00:45:16.372000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.0.0.116:22-10.0.0.1:42408 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:16.379915 kernel: audit: type=1130 audit(1752108316.372:1359): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.0.0.116:22-10.0.0.1:42408 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:16.408000 audit[4514]: USER_ACCT pid=4514 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:45:16.410772 sshd[4514]: Accepted publickey for core from 10.0.0.1 port 42408 ssh2: RSA SHA256:suUhWV759MqU0C+Dl6JG8TPW8PqnqlsB4qushdi9Ejw Jul 10 00:45:16.409000 audit[4514]: CRED_ACQ pid=4514 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:45:16.409000 audit[4514]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe5c9c9070 a2=3 a3=0 items=0 ppid=1 pid=4514 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:16.409000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 10 00:45:16.412089 sshd[4514]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 00:45:16.416487 systemd[1]: Started session-11.scope. Jul 10 00:45:16.416814 systemd-logind[1194]: New session 11 of user core. Jul 10 00:45:16.419000 audit[4514]: USER_START pid=4514 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:45:16.420000 audit[4516]: CRED_ACQ pid=4516 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:45:16.558596 env[1210]: time="2025-07-10T00:45:16.558529587Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/csi:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:45:16.560994 env[1210]: time="2025-07-10T00:45:16.560959481Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:c7fd1cc652979d89a51bbcc125e28e90c9815c0bd8f922a5bd36eed4e1927c6d,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:45:16.566263 env[1210]: time="2025-07-10T00:45:16.565657770Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/csi:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:45:16.567912 env[1210]: time="2025-07-10T00:45:16.567827303Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/csi@sha256:e570128aa8067a2f06b96d3cc98afa2e0a4b9790b435ee36ca051c8e72aeb8d0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:45:16.568192 env[1210]: time="2025-07-10T00:45:16.568151428Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.2\" returns image reference \"sha256:c7fd1cc652979d89a51bbcc125e28e90c9815c0bd8f922a5bd36eed4e1927c6d\"" Jul 10 00:45:16.569491 env[1210]: time="2025-07-10T00:45:16.569448849Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.2\"" Jul 10 00:45:16.573573 env[1210]: time="2025-07-10T00:45:16.573545358Z" level=info msg="CreateContainer within sandbox \"ae506496c119ec793aa67da57fea2cb24d235d0d207908600c4f38fb3c2ce0f9\" for container &ContainerMetadata{Name:calico-csi,Attempt:0,}" Jul 10 00:45:16.596617 env[1210]: time="2025-07-10T00:45:16.596556163Z" level=info msg="CreateContainer within sandbox \"ae506496c119ec793aa67da57fea2cb24d235d0d207908600c4f38fb3c2ce0f9\" for &ContainerMetadata{Name:calico-csi,Attempt:0,} returns container id \"5dfa03657fa6cd5951bf0b14437ac83ccf17df9a803db9b82adba2712fc6e137\"" Jul 10 00:45:16.597455 env[1210]: time="2025-07-10T00:45:16.597413676Z" level=info msg="StartContainer for \"5dfa03657fa6cd5951bf0b14437ac83ccf17df9a803db9b82adba2712fc6e137\"" Jul 10 00:45:16.621305 systemd[1]: Started cri-containerd-5dfa03657fa6cd5951bf0b14437ac83ccf17df9a803db9b82adba2712fc6e137.scope. Jul 10 00:45:16.635000 audit[4532]: AVC avc: denied { perfmon } for pid=4532 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:16.635000 audit[4532]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001176b0 a2=3c a3=7f35486eba18 items=0 ppid=4022 pid=4532 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:16.635000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3564666130333635376661366364353935316266306231343433376163 Jul 10 00:45:16.635000 audit[4532]: AVC avc: denied { bpf } for pid=4532 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:16.635000 audit[4532]: AVC avc: denied { bpf } for pid=4532 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:16.635000 audit[4532]: AVC avc: denied { bpf } for pid=4532 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:16.635000 audit[4532]: AVC avc: denied { perfmon } for pid=4532 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:16.635000 audit[4532]: AVC avc: denied { perfmon } for pid=4532 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:16.635000 audit[4532]: AVC avc: denied { perfmon } for pid=4532 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:16.635000 audit[4532]: AVC avc: denied { perfmon } for pid=4532 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:16.635000 audit[4532]: AVC avc: denied { perfmon } for pid=4532 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:16.635000 audit[4532]: AVC avc: denied { bpf } for pid=4532 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:16.635000 audit[4532]: AVC avc: denied { bpf } for pid=4532 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:16.635000 audit: BPF prog-id=206 op=LOAD Jul 10 00:45:16.635000 audit[4532]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001179d8 a2=78 a3=c000179538 items=0 ppid=4022 pid=4532 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:16.635000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3564666130333635376661366364353935316266306231343433376163 Jul 10 00:45:16.635000 audit[4532]: AVC avc: denied { bpf } for pid=4532 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:16.635000 audit[4532]: AVC avc: denied { bpf } for pid=4532 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:16.635000 audit[4532]: AVC avc: denied { perfmon } for pid=4532 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:16.635000 audit[4532]: AVC avc: denied { perfmon } for pid=4532 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:16.635000 audit[4532]: AVC avc: denied { perfmon } for pid=4532 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:16.635000 audit[4532]: AVC avc: denied { perfmon } for pid=4532 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:16.635000 audit[4532]: AVC avc: denied { perfmon } for pid=4532 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:16.635000 audit[4532]: AVC avc: denied { bpf } for pid=4532 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:16.635000 audit[4532]: AVC avc: denied { bpf } for pid=4532 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:16.635000 audit: BPF prog-id=207 op=LOAD Jul 10 00:45:16.635000 audit[4532]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000117770 a2=78 a3=c000179588 items=0 ppid=4022 pid=4532 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:16.635000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3564666130333635376661366364353935316266306231343433376163 Jul 10 00:45:16.635000 audit: BPF prog-id=207 op=UNLOAD Jul 10 00:45:16.635000 audit: BPF prog-id=206 op=UNLOAD Jul 10 00:45:16.635000 audit[4532]: AVC avc: denied { bpf } for pid=4532 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:16.635000 audit[4532]: AVC avc: denied { bpf } for pid=4532 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:16.635000 audit[4532]: AVC avc: denied { bpf } for pid=4532 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:16.635000 audit[4532]: AVC avc: denied { perfmon } for pid=4532 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:16.635000 audit[4532]: AVC avc: denied { perfmon } for pid=4532 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:16.635000 audit[4532]: AVC avc: denied { perfmon } for pid=4532 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:16.635000 audit[4532]: AVC avc: denied { perfmon } for pid=4532 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:16.635000 audit[4532]: AVC avc: denied { perfmon } for pid=4532 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:16.635000 audit[4532]: AVC avc: denied { bpf } for pid=4532 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:16.635000 audit[4532]: AVC avc: denied { bpf } for pid=4532 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:16.635000 audit: BPF prog-id=208 op=LOAD Jul 10 00:45:16.635000 audit[4532]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000117c30 a2=78 a3=c000179618 items=0 ppid=4022 pid=4532 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:16.635000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3564666130333635376661366364353935316266306231343433376163 Jul 10 00:45:16.790129 env[1210]: time="2025-07-10T00:45:16.790067883Z" level=info msg="StartContainer for \"5dfa03657fa6cd5951bf0b14437ac83ccf17df9a803db9b82adba2712fc6e137\" returns successfully" Jul 10 00:45:16.819864 sshd[4514]: pam_unix(sshd:session): session closed for user core Jul 10 00:45:16.818000 audit[4514]: USER_END pid=4514 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:45:16.819000 audit[4514]: CRED_DISP pid=4514 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:45:16.822275 systemd[1]: sshd@10-10.0.0.116:22-10.0.0.1:42408.service: Deactivated successfully. Jul 10 00:45:16.820000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.0.0.116:22-10.0.0.1:42408 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:16.823095 systemd[1]: session-11.scope: Deactivated successfully. Jul 10 00:45:16.823639 systemd-logind[1194]: Session 11 logged out. Waiting for processes to exit. Jul 10 00:45:16.824390 systemd-logind[1194]: Removed session 11. Jul 10 00:45:16.946067 kubelet[2000]: I0710 00:45:16.945948 2000 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Jul 10 00:45:20.052000 audit[1815]: AVC avc: denied { watch } for pid=1815 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=6725 scontext=system_u:system_r:svirt_lxc_net_t:s0:c504,c577 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:45:20.052000 audit[1815]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0029c2b10 a2=fc6 a3=0 items=0 ppid=1675 pid=1815 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c504,c577 key=(null) Jul 10 00:45:20.052000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 00:45:20.052000 audit[1815]: AVC avc: denied { watch } for pid=1815 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6719 scontext=system_u:system_r:svirt_lxc_net_t:s0:c504,c577 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:45:20.052000 audit[1815]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c000c7eba0 a2=fc6 a3=0 items=0 ppid=1675 pid=1815 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c504,c577 key=(null) Jul 10 00:45:20.052000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 00:45:20.361406 env[1210]: time="2025-07-10T00:45:20.361322731Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/kube-controllers:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:45:20.365988 env[1210]: time="2025-07-10T00:45:20.365945112Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:761b294e26556b58aabc85094a3d465389e6b141b7400aee732bd13400a6124a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:45:20.368255 env[1210]: time="2025-07-10T00:45:20.368210090Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/kube-controllers:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:45:20.370151 env[1210]: time="2025-07-10T00:45:20.370111818Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/kube-controllers@sha256:5d3ecdec3cbbe8f7009077102e35e8a2141161b59c548cf3f97829177677cbce,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:45:20.370473 env[1210]: time="2025-07-10T00:45:20.370440449Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.2\" returns image reference \"sha256:761b294e26556b58aabc85094a3d465389e6b141b7400aee732bd13400a6124a\"" Jul 10 00:45:20.371964 env[1210]: time="2025-07-10T00:45:20.371923793Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.2\"" Jul 10 00:45:20.377000 audit[1868]: AVC avc: denied { watch } for pid=1868 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=6721 scontext=system_u:system_r:svirt_lxc_net_t:s0:c341,c345 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:45:20.377000 audit[1868]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=76 a1=c008698810 a2=fc6 a3=0 items=0 ppid=1714 pid=1868 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c341,c345 key=(null) Jul 10 00:45:20.377000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313136002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Jul 10 00:45:20.377000 audit[1868]: AVC avc: denied { watch } for pid=1868 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=6725 scontext=system_u:system_r:svirt_lxc_net_t:s0:c341,c345 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:45:20.377000 audit[1868]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=75 a1=c0122fe1e0 a2=fc6 a3=0 items=0 ppid=1714 pid=1868 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c341,c345 key=(null) Jul 10 00:45:20.377000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313136002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Jul 10 00:45:20.379000 audit[1868]: AVC avc: denied { watch } for pid=1868 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6719 scontext=system_u:system_r:svirt_lxc_net_t:s0:c341,c345 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:45:20.379000 audit[1868]: AVC avc: denied { watch } for pid=1868 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c341,c345 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:45:20.379000 audit[1868]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=76 a1=c011ca9680 a2=fc6 a3=0 items=0 ppid=1714 pid=1868 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c341,c345 key=(null) Jul 10 00:45:20.379000 audit[1868]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=75 a1=c00f660740 a2=fc6 a3=0 items=0 ppid=1714 pid=1868 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c341,c345 key=(null) Jul 10 00:45:20.379000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313136002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Jul 10 00:45:20.379000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313136002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Jul 10 00:45:20.388962 env[1210]: time="2025-07-10T00:45:20.388909926Z" level=info msg="CreateContainer within sandbox \"1fe806f6d822570fa546b740555c0e6093d9ca374e78b51dc3a88de9e54b8ead\" for container &ContainerMetadata{Name:calico-kube-controllers,Attempt:0,}" Jul 10 00:45:20.393000 audit[1868]: AVC avc: denied { watch } for pid=1868 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6719 scontext=system_u:system_r:svirt_lxc_net_t:s0:c341,c345 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:45:20.393000 audit[1868]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=75 a1=c011a545e0 a2=fc6 a3=0 items=0 ppid=1714 pid=1868 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c341,c345 key=(null) Jul 10 00:45:20.393000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313136002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Jul 10 00:45:20.393000 audit[1868]: AVC avc: denied { watch } for pid=1868 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=6725 scontext=system_u:system_r:svirt_lxc_net_t:s0:c341,c345 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:45:20.393000 audit[1868]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=76 a1=c00fe9b410 a2=fc6 a3=0 items=0 ppid=1714 pid=1868 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c341,c345 key=(null) Jul 10 00:45:20.393000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313136002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Jul 10 00:45:20.402143 env[1210]: time="2025-07-10T00:45:20.402088016Z" level=info msg="CreateContainer within sandbox \"1fe806f6d822570fa546b740555c0e6093d9ca374e78b51dc3a88de9e54b8ead\" for &ContainerMetadata{Name:calico-kube-controllers,Attempt:0,} returns container id \"69b980d094ab456b20c8f25b172ed0ccfda54c4e1d477afa6fde452989267991\"" Jul 10 00:45:20.402890 env[1210]: time="2025-07-10T00:45:20.402852035Z" level=info msg="StartContainer for \"69b980d094ab456b20c8f25b172ed0ccfda54c4e1d477afa6fde452989267991\"" Jul 10 00:45:20.418801 systemd[1]: Started cri-containerd-69b980d094ab456b20c8f25b172ed0ccfda54c4e1d477afa6fde452989267991.scope. Jul 10 00:45:20.437000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:20.437000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:20.437000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:20.437000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:20.437000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:20.437000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:20.437000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:20.437000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:20.437000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:20.437000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:20.437000 audit: BPF prog-id=209 op=LOAD Jul 10 00:45:20.438000 audit[4580]: AVC avc: denied { bpf } for pid=4580 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:20.438000 audit[4580]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00014dc48 a2=10 a3=1c items=0 ppid=4079 pid=4580 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:20.438000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3639623938306430393461623435366232306338663235623137326564 Jul 10 00:45:20.438000 audit[4580]: AVC avc: denied { perfmon } for pid=4580 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:20.438000 audit[4580]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00014d6b0 a2=3c a3=8 items=0 ppid=4079 pid=4580 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:20.438000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3639623938306430393461623435366232306338663235623137326564 Jul 10 00:45:20.438000 audit[4580]: AVC avc: denied { bpf } for pid=4580 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:20.438000 audit[4580]: AVC avc: denied { bpf } for pid=4580 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:20.438000 audit[4580]: AVC avc: denied { bpf } for pid=4580 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:20.438000 audit[4580]: AVC avc: denied { perfmon } for pid=4580 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:20.438000 audit[4580]: AVC avc: denied { perfmon } for pid=4580 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:20.438000 audit[4580]: AVC avc: denied { perfmon } for pid=4580 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:20.438000 audit[4580]: AVC avc: denied { perfmon } for pid=4580 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:20.438000 audit[4580]: AVC avc: denied { perfmon } for pid=4580 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:20.438000 audit[4580]: AVC avc: denied { bpf } for pid=4580 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:20.438000 audit[4580]: AVC avc: denied { bpf } for pid=4580 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:20.438000 audit: BPF prog-id=210 op=LOAD Jul 10 00:45:20.438000 audit[4580]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014d9d8 a2=78 a3=c0002c5c60 items=0 ppid=4079 pid=4580 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:20.438000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3639623938306430393461623435366232306338663235623137326564 Jul 10 00:45:20.438000 audit[4580]: AVC avc: denied { bpf } for pid=4580 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:20.438000 audit[4580]: AVC avc: denied { bpf } for pid=4580 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:20.438000 audit[4580]: AVC avc: denied { perfmon } for pid=4580 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:20.438000 audit[4580]: AVC avc: denied { perfmon } for pid=4580 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:20.438000 audit[4580]: AVC avc: denied { perfmon } for pid=4580 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:20.438000 audit[4580]: AVC avc: denied { perfmon } for pid=4580 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:20.438000 audit[4580]: AVC avc: denied { perfmon } for pid=4580 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:20.438000 audit[4580]: AVC avc: denied { bpf } for pid=4580 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:20.438000 audit[4580]: AVC avc: denied { bpf } for pid=4580 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:20.438000 audit: BPF prog-id=211 op=LOAD Jul 10 00:45:20.438000 audit[4580]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00014d770 a2=78 a3=c0002c5ca8 items=0 ppid=4079 pid=4580 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:20.438000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3639623938306430393461623435366232306338663235623137326564 Jul 10 00:45:20.438000 audit: BPF prog-id=211 op=UNLOAD Jul 10 00:45:20.438000 audit: BPF prog-id=210 op=UNLOAD Jul 10 00:45:20.438000 audit[4580]: AVC avc: denied { bpf } for pid=4580 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:20.438000 audit[4580]: AVC avc: denied { bpf } for pid=4580 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:20.438000 audit[4580]: AVC avc: denied { bpf } for pid=4580 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:20.438000 audit[4580]: AVC avc: denied { perfmon } for pid=4580 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:20.438000 audit[4580]: AVC avc: denied { perfmon } for pid=4580 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:20.438000 audit[4580]: AVC avc: denied { perfmon } for pid=4580 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:20.438000 audit[4580]: AVC avc: denied { perfmon } for pid=4580 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:20.438000 audit[4580]: AVC avc: denied { perfmon } for pid=4580 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:20.438000 audit[4580]: AVC avc: denied { bpf } for pid=4580 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:20.438000 audit[4580]: AVC avc: denied { bpf } for pid=4580 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:20.438000 audit: BPF prog-id=212 op=LOAD Jul 10 00:45:20.438000 audit[4580]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014dc30 a2=78 a3=c0003a80b8 items=0 ppid=4079 pid=4580 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:20.438000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3639623938306430393461623435366232306338663235623137326564 Jul 10 00:45:20.469595 env[1210]: time="2025-07-10T00:45:20.469542758Z" level=info msg="StartContainer for \"69b980d094ab456b20c8f25b172ed0ccfda54c4e1d477afa6fde452989267991\" returns successfully" Jul 10 00:45:20.967010 kubelet[2000]: I0710 00:45:20.965937 2000 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-kube-controllers-6fbf996c46-f5zkt" podStartSLOduration=30.097910766 podStartE2EDuration="38.965911331s" podCreationTimestamp="2025-07-10 00:44:42 +0000 UTC" firstStartedPulling="2025-07-10 00:45:11.503582112 +0000 UTC m=+47.909537747" lastFinishedPulling="2025-07-10 00:45:20.371582677 +0000 UTC m=+56.777538312" observedRunningTime="2025-07-10 00:45:20.96567674 +0000 UTC m=+57.371632375" watchObservedRunningTime="2025-07-10 00:45:20.965911331 +0000 UTC m=+57.371866966" Jul 10 00:45:21.825139 systemd[1]: Started sshd@11-10.0.0.116:22-10.0.0.1:55154.service. Jul 10 00:45:21.824000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.0.0.116:22-10.0.0.1:55154 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:21.828896 kernel: kauditd_printk_skb: 134 callbacks suppressed Jul 10 00:45:21.828967 kernel: audit: type=1130 audit(1752108321.824:1400): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.0.0.116:22-10.0.0.1:55154 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:21.909000 audit[4640]: USER_ACCT pid=4640 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:45:21.916815 sshd[4640]: Accepted publickey for core from 10.0.0.1 port 55154 ssh2: RSA SHA256:suUhWV759MqU0C+Dl6JG8TPW8PqnqlsB4qushdi9Ejw Jul 10 00:45:21.917115 kernel: audit: type=1101 audit(1752108321.909:1401): pid=4640 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:45:21.917149 kernel: audit: type=1103 audit(1752108321.916:1402): pid=4640 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:45:21.916000 audit[4640]: CRED_ACQ pid=4640 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:45:21.928507 kernel: audit: type=1006 audit(1752108321.916:1403): pid=4640 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=12 res=1 Jul 10 00:45:21.928556 kernel: audit: type=1300 audit(1752108321.916:1403): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffa9938090 a2=3 a3=0 items=0 ppid=1 pid=4640 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:21.916000 audit[4640]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffa9938090 a2=3 a3=0 items=0 ppid=1 pid=4640 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:21.916000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 10 00:45:21.937365 kernel: audit: type=1327 audit(1752108321.916:1403): proctitle=737368643A20636F7265205B707269765D Jul 10 00:45:22.144815 sshd[4640]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 00:45:22.149060 systemd-logind[1194]: New session 12 of user core. Jul 10 00:45:22.151943 systemd[1]: Started session-12.scope. Jul 10 00:45:22.155000 audit[4640]: USER_START pid=4640 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:45:22.157000 audit[4642]: CRED_ACQ pid=4642 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:45:22.164538 kernel: audit: type=1105 audit(1752108322.155:1404): pid=4640 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:45:22.164817 kernel: audit: type=1103 audit(1752108322.157:1405): pid=4642 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:45:22.526061 sshd[4640]: pam_unix(sshd:session): session closed for user core Jul 10 00:45:22.526000 audit[4640]: USER_END pid=4640 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:45:22.528709 systemd[1]: sshd@11-10.0.0.116:22-10.0.0.1:55154.service: Deactivated successfully. Jul 10 00:45:22.529512 systemd[1]: session-12.scope: Deactivated successfully. Jul 10 00:45:22.526000 audit[4640]: CRED_DISP pid=4640 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:45:22.534896 kernel: audit: type=1106 audit(1752108322.526:1406): pid=4640 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:45:22.534967 kernel: audit: type=1104 audit(1752108322.526:1407): pid=4640 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:45:22.528000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.0.0.116:22-10.0.0.1:55154 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:22.535460 systemd-logind[1194]: Session 12 logged out. Waiting for processes to exit. Jul 10 00:45:22.536234 systemd-logind[1194]: Removed session 12. Jul 10 00:45:23.074069 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2678360552.mount: Deactivated successfully. Jul 10 00:45:23.779044 env[1210]: time="2025-07-10T00:45:23.778997853Z" level=info msg="StopPodSandbox for \"1607d724730937f239d497e65803ea949f79c495541c34cdbc1f84732fa42959\"" Jul 10 00:45:23.813000 audit[1815]: AVC avc: denied { watch } for pid=1815 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6719 scontext=system_u:system_r:svirt_lxc_net_t:s0:c504,c577 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:45:23.813000 audit[1815]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c0012646e0 a2=fc6 a3=0 items=0 ppid=1675 pid=1815 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c504,c577 key=(null) Jul 10 00:45:23.813000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 00:45:23.814000 audit[1815]: AVC avc: denied { watch } for pid=1815 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6719 scontext=system_u:system_r:svirt_lxc_net_t:s0:c504,c577 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:45:23.814000 audit[1815]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000c7f4a0 a2=fc6 a3=0 items=0 ppid=1675 pid=1815 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c504,c577 key=(null) Jul 10 00:45:23.814000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 00:45:23.814000 audit[1815]: AVC avc: denied { watch } for pid=1815 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6719 scontext=system_u:system_r:svirt_lxc_net_t:s0:c504,c577 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:45:23.814000 audit[1815]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c002289fe0 a2=fc6 a3=0 items=0 ppid=1675 pid=1815 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c504,c577 key=(null) Jul 10 00:45:23.814000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 00:45:23.823000 audit[1815]: AVC avc: denied { watch } for pid=1815 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6719 scontext=system_u:system_r:svirt_lxc_net_t:s0:c504,c577 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:45:23.823000 audit[1815]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c002fa4000 a2=fc6 a3=0 items=0 ppid=1675 pid=1815 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c504,c577 key=(null) Jul 10 00:45:23.823000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 00:45:24.054819 env[1210]: 2025-07-10 00:45:24.021 [WARNING][4668] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="1607d724730937f239d497e65803ea949f79c495541c34cdbc1f84732fa42959" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--7b8bd7bfc9--7mdpn-eth0", GenerateName:"calico-apiserver-7b8bd7bfc9-", Namespace:"calico-apiserver", SelfLink:"", UID:"bd35914e-3d9d-48a8-9a13-4f3678b36e0a", ResourceVersion:"1076", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 44, 39, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"7b8bd7bfc9", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"a3b5605e69aecaece53871d945d3ed5f4e877b2983ad2800667e08edae6e3267", Pod:"calico-apiserver-7b8bd7bfc9-7mdpn", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali5d4beb0d598", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:45:24.054819 env[1210]: 2025-07-10 00:45:24.021 [INFO][4668] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="1607d724730937f239d497e65803ea949f79c495541c34cdbc1f84732fa42959" Jul 10 00:45:24.054819 env[1210]: 2025-07-10 00:45:24.021 [INFO][4668] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="1607d724730937f239d497e65803ea949f79c495541c34cdbc1f84732fa42959" iface="eth0" netns="" Jul 10 00:45:24.054819 env[1210]: 2025-07-10 00:45:24.021 [INFO][4668] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="1607d724730937f239d497e65803ea949f79c495541c34cdbc1f84732fa42959" Jul 10 00:45:24.054819 env[1210]: 2025-07-10 00:45:24.021 [INFO][4668] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="1607d724730937f239d497e65803ea949f79c495541c34cdbc1f84732fa42959" Jul 10 00:45:24.054819 env[1210]: 2025-07-10 00:45:24.039 [INFO][4676] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="1607d724730937f239d497e65803ea949f79c495541c34cdbc1f84732fa42959" HandleID="k8s-pod-network.1607d724730937f239d497e65803ea949f79c495541c34cdbc1f84732fa42959" Workload="localhost-k8s-calico--apiserver--7b8bd7bfc9--7mdpn-eth0" Jul 10 00:45:24.054819 env[1210]: 2025-07-10 00:45:24.040 [INFO][4676] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:45:24.054819 env[1210]: 2025-07-10 00:45:24.040 [INFO][4676] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:45:24.054819 env[1210]: 2025-07-10 00:45:24.048 [WARNING][4676] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="1607d724730937f239d497e65803ea949f79c495541c34cdbc1f84732fa42959" HandleID="k8s-pod-network.1607d724730937f239d497e65803ea949f79c495541c34cdbc1f84732fa42959" Workload="localhost-k8s-calico--apiserver--7b8bd7bfc9--7mdpn-eth0" Jul 10 00:45:24.054819 env[1210]: 2025-07-10 00:45:24.048 [INFO][4676] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="1607d724730937f239d497e65803ea949f79c495541c34cdbc1f84732fa42959" HandleID="k8s-pod-network.1607d724730937f239d497e65803ea949f79c495541c34cdbc1f84732fa42959" Workload="localhost-k8s-calico--apiserver--7b8bd7bfc9--7mdpn-eth0" Jul 10 00:45:24.054819 env[1210]: 2025-07-10 00:45:24.049 [INFO][4676] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:45:24.054819 env[1210]: 2025-07-10 00:45:24.052 [INFO][4668] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="1607d724730937f239d497e65803ea949f79c495541c34cdbc1f84732fa42959" Jul 10 00:45:24.055480 env[1210]: time="2025-07-10T00:45:24.054783661Z" level=info msg="TearDown network for sandbox \"1607d724730937f239d497e65803ea949f79c495541c34cdbc1f84732fa42959\" successfully" Jul 10 00:45:24.055480 env[1210]: time="2025-07-10T00:45:24.054914161Z" level=info msg="StopPodSandbox for \"1607d724730937f239d497e65803ea949f79c495541c34cdbc1f84732fa42959\" returns successfully" Jul 10 00:45:24.056920 env[1210]: time="2025-07-10T00:45:24.056894502Z" level=info msg="RemovePodSandbox for \"1607d724730937f239d497e65803ea949f79c495541c34cdbc1f84732fa42959\"" Jul 10 00:45:24.056998 env[1210]: time="2025-07-10T00:45:24.056927516Z" level=info msg="Forcibly stopping sandbox \"1607d724730937f239d497e65803ea949f79c495541c34cdbc1f84732fa42959\"" Jul 10 00:45:24.121033 env[1210]: 2025-07-10 00:45:24.089 [WARNING][4694] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="1607d724730937f239d497e65803ea949f79c495541c34cdbc1f84732fa42959" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--7b8bd7bfc9--7mdpn-eth0", GenerateName:"calico-apiserver-7b8bd7bfc9-", Namespace:"calico-apiserver", SelfLink:"", UID:"bd35914e-3d9d-48a8-9a13-4f3678b36e0a", ResourceVersion:"1076", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 44, 39, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"7b8bd7bfc9", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"a3b5605e69aecaece53871d945d3ed5f4e877b2983ad2800667e08edae6e3267", Pod:"calico-apiserver-7b8bd7bfc9-7mdpn", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali5d4beb0d598", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:45:24.121033 env[1210]: 2025-07-10 00:45:24.089 [INFO][4694] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="1607d724730937f239d497e65803ea949f79c495541c34cdbc1f84732fa42959" Jul 10 00:45:24.121033 env[1210]: 2025-07-10 00:45:24.089 [INFO][4694] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="1607d724730937f239d497e65803ea949f79c495541c34cdbc1f84732fa42959" iface="eth0" netns="" Jul 10 00:45:24.121033 env[1210]: 2025-07-10 00:45:24.089 [INFO][4694] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="1607d724730937f239d497e65803ea949f79c495541c34cdbc1f84732fa42959" Jul 10 00:45:24.121033 env[1210]: 2025-07-10 00:45:24.089 [INFO][4694] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="1607d724730937f239d497e65803ea949f79c495541c34cdbc1f84732fa42959" Jul 10 00:45:24.121033 env[1210]: 2025-07-10 00:45:24.108 [INFO][4703] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="1607d724730937f239d497e65803ea949f79c495541c34cdbc1f84732fa42959" HandleID="k8s-pod-network.1607d724730937f239d497e65803ea949f79c495541c34cdbc1f84732fa42959" Workload="localhost-k8s-calico--apiserver--7b8bd7bfc9--7mdpn-eth0" Jul 10 00:45:24.121033 env[1210]: 2025-07-10 00:45:24.108 [INFO][4703] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:45:24.121033 env[1210]: 2025-07-10 00:45:24.108 [INFO][4703] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:45:24.121033 env[1210]: 2025-07-10 00:45:24.115 [WARNING][4703] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="1607d724730937f239d497e65803ea949f79c495541c34cdbc1f84732fa42959" HandleID="k8s-pod-network.1607d724730937f239d497e65803ea949f79c495541c34cdbc1f84732fa42959" Workload="localhost-k8s-calico--apiserver--7b8bd7bfc9--7mdpn-eth0" Jul 10 00:45:24.121033 env[1210]: 2025-07-10 00:45:24.115 [INFO][4703] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="1607d724730937f239d497e65803ea949f79c495541c34cdbc1f84732fa42959" HandleID="k8s-pod-network.1607d724730937f239d497e65803ea949f79c495541c34cdbc1f84732fa42959" Workload="localhost-k8s-calico--apiserver--7b8bd7bfc9--7mdpn-eth0" Jul 10 00:45:24.121033 env[1210]: 2025-07-10 00:45:24.116 [INFO][4703] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:45:24.121033 env[1210]: 2025-07-10 00:45:24.118 [INFO][4694] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="1607d724730937f239d497e65803ea949f79c495541c34cdbc1f84732fa42959" Jul 10 00:45:24.158705 env[1210]: time="2025-07-10T00:45:24.121063952Z" level=info msg="TearDown network for sandbox \"1607d724730937f239d497e65803ea949f79c495541c34cdbc1f84732fa42959\" successfully" Jul 10 00:45:24.164001 env[1210]: time="2025-07-10T00:45:24.163962711Z" level=info msg="RemovePodSandbox \"1607d724730937f239d497e65803ea949f79c495541c34cdbc1f84732fa42959\" returns successfully" Jul 10 00:45:24.164638 env[1210]: time="2025-07-10T00:45:24.164613440Z" level=info msg="StopPodSandbox for \"7ffa2b3c827ee5ba1786acf83241852e76af9ad68f8fd0a62b972cd27c7cbeea\"" Jul 10 00:45:24.238871 env[1210]: 2025-07-10 00:45:24.202 [WARNING][4720] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="7ffa2b3c827ee5ba1786acf83241852e76af9ad68f8fd0a62b972cd27c7cbeea" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--674b8bbfcf--dgqq9-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"d4134d3e-309e-4c16-a93c-0185dfd5a718", ResourceVersion:"1058", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 44, 28, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"277513f0b06eb367a3c52878ab9e62d210d47f1e3d6f00ac9a0d23bb215715eb", Pod:"coredns-674b8bbfcf-dgqq9", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"caliedb5a38bee6", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:45:24.238871 env[1210]: 2025-07-10 00:45:24.203 [INFO][4720] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="7ffa2b3c827ee5ba1786acf83241852e76af9ad68f8fd0a62b972cd27c7cbeea" Jul 10 00:45:24.238871 env[1210]: 2025-07-10 00:45:24.203 [INFO][4720] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="7ffa2b3c827ee5ba1786acf83241852e76af9ad68f8fd0a62b972cd27c7cbeea" iface="eth0" netns="" Jul 10 00:45:24.238871 env[1210]: 2025-07-10 00:45:24.203 [INFO][4720] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="7ffa2b3c827ee5ba1786acf83241852e76af9ad68f8fd0a62b972cd27c7cbeea" Jul 10 00:45:24.238871 env[1210]: 2025-07-10 00:45:24.203 [INFO][4720] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="7ffa2b3c827ee5ba1786acf83241852e76af9ad68f8fd0a62b972cd27c7cbeea" Jul 10 00:45:24.238871 env[1210]: 2025-07-10 00:45:24.227 [INFO][4728] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="7ffa2b3c827ee5ba1786acf83241852e76af9ad68f8fd0a62b972cd27c7cbeea" HandleID="k8s-pod-network.7ffa2b3c827ee5ba1786acf83241852e76af9ad68f8fd0a62b972cd27c7cbeea" Workload="localhost-k8s-coredns--674b8bbfcf--dgqq9-eth0" Jul 10 00:45:24.238871 env[1210]: 2025-07-10 00:45:24.227 [INFO][4728] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:45:24.238871 env[1210]: 2025-07-10 00:45:24.227 [INFO][4728] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:45:24.238871 env[1210]: 2025-07-10 00:45:24.233 [WARNING][4728] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="7ffa2b3c827ee5ba1786acf83241852e76af9ad68f8fd0a62b972cd27c7cbeea" HandleID="k8s-pod-network.7ffa2b3c827ee5ba1786acf83241852e76af9ad68f8fd0a62b972cd27c7cbeea" Workload="localhost-k8s-coredns--674b8bbfcf--dgqq9-eth0" Jul 10 00:45:24.238871 env[1210]: 2025-07-10 00:45:24.233 [INFO][4728] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="7ffa2b3c827ee5ba1786acf83241852e76af9ad68f8fd0a62b972cd27c7cbeea" HandleID="k8s-pod-network.7ffa2b3c827ee5ba1786acf83241852e76af9ad68f8fd0a62b972cd27c7cbeea" Workload="localhost-k8s-coredns--674b8bbfcf--dgqq9-eth0" Jul 10 00:45:24.238871 env[1210]: 2025-07-10 00:45:24.235 [INFO][4728] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:45:24.238871 env[1210]: 2025-07-10 00:45:24.236 [INFO][4720] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="7ffa2b3c827ee5ba1786acf83241852e76af9ad68f8fd0a62b972cd27c7cbeea" Jul 10 00:45:24.239407 env[1210]: time="2025-07-10T00:45:24.238899719Z" level=info msg="TearDown network for sandbox \"7ffa2b3c827ee5ba1786acf83241852e76af9ad68f8fd0a62b972cd27c7cbeea\" successfully" Jul 10 00:45:24.239407 env[1210]: time="2025-07-10T00:45:24.238945136Z" level=info msg="StopPodSandbox for \"7ffa2b3c827ee5ba1786acf83241852e76af9ad68f8fd0a62b972cd27c7cbeea\" returns successfully" Jul 10 00:45:24.239727 env[1210]: time="2025-07-10T00:45:24.239678013Z" level=info msg="RemovePodSandbox for \"7ffa2b3c827ee5ba1786acf83241852e76af9ad68f8fd0a62b972cd27c7cbeea\"" Jul 10 00:45:24.239951 env[1210]: time="2025-07-10T00:45:24.239721407Z" level=info msg="Forcibly stopping sandbox \"7ffa2b3c827ee5ba1786acf83241852e76af9ad68f8fd0a62b972cd27c7cbeea\"" Jul 10 00:45:24.321942 env[1210]: 2025-07-10 00:45:24.278 [WARNING][4745] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="7ffa2b3c827ee5ba1786acf83241852e76af9ad68f8fd0a62b972cd27c7cbeea" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--674b8bbfcf--dgqq9-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"d4134d3e-309e-4c16-a93c-0185dfd5a718", ResourceVersion:"1058", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 44, 28, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"277513f0b06eb367a3c52878ab9e62d210d47f1e3d6f00ac9a0d23bb215715eb", Pod:"coredns-674b8bbfcf-dgqq9", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"caliedb5a38bee6", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:45:24.321942 env[1210]: 2025-07-10 00:45:24.278 [INFO][4745] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="7ffa2b3c827ee5ba1786acf83241852e76af9ad68f8fd0a62b972cd27c7cbeea" Jul 10 00:45:24.321942 env[1210]: 2025-07-10 00:45:24.278 [INFO][4745] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="7ffa2b3c827ee5ba1786acf83241852e76af9ad68f8fd0a62b972cd27c7cbeea" iface="eth0" netns="" Jul 10 00:45:24.321942 env[1210]: 2025-07-10 00:45:24.278 [INFO][4745] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="7ffa2b3c827ee5ba1786acf83241852e76af9ad68f8fd0a62b972cd27c7cbeea" Jul 10 00:45:24.321942 env[1210]: 2025-07-10 00:45:24.278 [INFO][4745] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="7ffa2b3c827ee5ba1786acf83241852e76af9ad68f8fd0a62b972cd27c7cbeea" Jul 10 00:45:24.321942 env[1210]: 2025-07-10 00:45:24.306 [INFO][4754] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="7ffa2b3c827ee5ba1786acf83241852e76af9ad68f8fd0a62b972cd27c7cbeea" HandleID="k8s-pod-network.7ffa2b3c827ee5ba1786acf83241852e76af9ad68f8fd0a62b972cd27c7cbeea" Workload="localhost-k8s-coredns--674b8bbfcf--dgqq9-eth0" Jul 10 00:45:24.321942 env[1210]: 2025-07-10 00:45:24.306 [INFO][4754] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:45:24.321942 env[1210]: 2025-07-10 00:45:24.306 [INFO][4754] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:45:24.321942 env[1210]: 2025-07-10 00:45:24.315 [WARNING][4754] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="7ffa2b3c827ee5ba1786acf83241852e76af9ad68f8fd0a62b972cd27c7cbeea" HandleID="k8s-pod-network.7ffa2b3c827ee5ba1786acf83241852e76af9ad68f8fd0a62b972cd27c7cbeea" Workload="localhost-k8s-coredns--674b8bbfcf--dgqq9-eth0" Jul 10 00:45:24.321942 env[1210]: 2025-07-10 00:45:24.315 [INFO][4754] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="7ffa2b3c827ee5ba1786acf83241852e76af9ad68f8fd0a62b972cd27c7cbeea" HandleID="k8s-pod-network.7ffa2b3c827ee5ba1786acf83241852e76af9ad68f8fd0a62b972cd27c7cbeea" Workload="localhost-k8s-coredns--674b8bbfcf--dgqq9-eth0" Jul 10 00:45:24.321942 env[1210]: 2025-07-10 00:45:24.316 [INFO][4754] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:45:24.321942 env[1210]: 2025-07-10 00:45:24.318 [INFO][4745] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="7ffa2b3c827ee5ba1786acf83241852e76af9ad68f8fd0a62b972cd27c7cbeea" Jul 10 00:45:24.321942 env[1210]: time="2025-07-10T00:45:24.321160728Z" level=info msg="TearDown network for sandbox \"7ffa2b3c827ee5ba1786acf83241852e76af9ad68f8fd0a62b972cd27c7cbeea\" successfully" Jul 10 00:45:24.324736 env[1210]: time="2025-07-10T00:45:24.324703659Z" level=info msg="RemovePodSandbox \"7ffa2b3c827ee5ba1786acf83241852e76af9ad68f8fd0a62b972cd27c7cbeea\" returns successfully" Jul 10 00:45:24.325283 env[1210]: time="2025-07-10T00:45:24.325257672Z" level=info msg="StopPodSandbox for \"6f997f8f42875d0c5592191313f27a28488bd1115bcb1c7abc280db6bf054afa\"" Jul 10 00:45:24.394122 env[1210]: 2025-07-10 00:45:24.359 [WARNING][4772] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="6f997f8f42875d0c5592191313f27a28488bd1115bcb1c7abc280db6bf054afa" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--7b8bd7bfc9--9vccb-eth0", GenerateName:"calico-apiserver-7b8bd7bfc9-", Namespace:"calico-apiserver", SelfLink:"", UID:"dfde559b-7bf4-4977-8d25-29403f29347b", ResourceVersion:"1039", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 44, 39, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"7b8bd7bfc9", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"fca81c38492a8f67da7584ec999b6e3ea7d4a69a3dd41d4d17dfd64e20e24b31", Pod:"calico-apiserver-7b8bd7bfc9-9vccb", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali81298c7dd45", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:45:24.394122 env[1210]: 2025-07-10 00:45:24.359 [INFO][4772] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="6f997f8f42875d0c5592191313f27a28488bd1115bcb1c7abc280db6bf054afa" Jul 10 00:45:24.394122 env[1210]: 2025-07-10 00:45:24.359 [INFO][4772] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="6f997f8f42875d0c5592191313f27a28488bd1115bcb1c7abc280db6bf054afa" iface="eth0" netns="" Jul 10 00:45:24.394122 env[1210]: 2025-07-10 00:45:24.359 [INFO][4772] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="6f997f8f42875d0c5592191313f27a28488bd1115bcb1c7abc280db6bf054afa" Jul 10 00:45:24.394122 env[1210]: 2025-07-10 00:45:24.359 [INFO][4772] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="6f997f8f42875d0c5592191313f27a28488bd1115bcb1c7abc280db6bf054afa" Jul 10 00:45:24.394122 env[1210]: 2025-07-10 00:45:24.381 [INFO][4780] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="6f997f8f42875d0c5592191313f27a28488bd1115bcb1c7abc280db6bf054afa" HandleID="k8s-pod-network.6f997f8f42875d0c5592191313f27a28488bd1115bcb1c7abc280db6bf054afa" Workload="localhost-k8s-calico--apiserver--7b8bd7bfc9--9vccb-eth0" Jul 10 00:45:24.394122 env[1210]: 2025-07-10 00:45:24.381 [INFO][4780] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:45:24.394122 env[1210]: 2025-07-10 00:45:24.382 [INFO][4780] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:45:24.394122 env[1210]: 2025-07-10 00:45:24.388 [WARNING][4780] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="6f997f8f42875d0c5592191313f27a28488bd1115bcb1c7abc280db6bf054afa" HandleID="k8s-pod-network.6f997f8f42875d0c5592191313f27a28488bd1115bcb1c7abc280db6bf054afa" Workload="localhost-k8s-calico--apiserver--7b8bd7bfc9--9vccb-eth0" Jul 10 00:45:24.394122 env[1210]: 2025-07-10 00:45:24.388 [INFO][4780] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="6f997f8f42875d0c5592191313f27a28488bd1115bcb1c7abc280db6bf054afa" HandleID="k8s-pod-network.6f997f8f42875d0c5592191313f27a28488bd1115bcb1c7abc280db6bf054afa" Workload="localhost-k8s-calico--apiserver--7b8bd7bfc9--9vccb-eth0" Jul 10 00:45:24.394122 env[1210]: 2025-07-10 00:45:24.389 [INFO][4780] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:45:24.394122 env[1210]: 2025-07-10 00:45:24.391 [INFO][4772] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="6f997f8f42875d0c5592191313f27a28488bd1115bcb1c7abc280db6bf054afa" Jul 10 00:45:24.395619 env[1210]: time="2025-07-10T00:45:24.394634577Z" level=info msg="TearDown network for sandbox \"6f997f8f42875d0c5592191313f27a28488bd1115bcb1c7abc280db6bf054afa\" successfully" Jul 10 00:45:24.395619 env[1210]: time="2025-07-10T00:45:24.394670056Z" level=info msg="StopPodSandbox for \"6f997f8f42875d0c5592191313f27a28488bd1115bcb1c7abc280db6bf054afa\" returns successfully" Jul 10 00:45:24.395715 env[1210]: time="2025-07-10T00:45:24.395637443Z" level=info msg="RemovePodSandbox for \"6f997f8f42875d0c5592191313f27a28488bd1115bcb1c7abc280db6bf054afa\"" Jul 10 00:45:24.395803 env[1210]: time="2025-07-10T00:45:24.395724250Z" level=info msg="Forcibly stopping sandbox \"6f997f8f42875d0c5592191313f27a28488bd1115bcb1c7abc280db6bf054afa\"" Jul 10 00:45:24.473427 env[1210]: 2025-07-10 00:45:24.432 [WARNING][4798] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="6f997f8f42875d0c5592191313f27a28488bd1115bcb1c7abc280db6bf054afa" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--7b8bd7bfc9--9vccb-eth0", GenerateName:"calico-apiserver-7b8bd7bfc9-", Namespace:"calico-apiserver", SelfLink:"", UID:"dfde559b-7bf4-4977-8d25-29403f29347b", ResourceVersion:"1039", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 44, 39, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"7b8bd7bfc9", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"fca81c38492a8f67da7584ec999b6e3ea7d4a69a3dd41d4d17dfd64e20e24b31", Pod:"calico-apiserver-7b8bd7bfc9-9vccb", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali81298c7dd45", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:45:24.473427 env[1210]: 2025-07-10 00:45:24.432 [INFO][4798] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="6f997f8f42875d0c5592191313f27a28488bd1115bcb1c7abc280db6bf054afa" Jul 10 00:45:24.473427 env[1210]: 2025-07-10 00:45:24.432 [INFO][4798] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="6f997f8f42875d0c5592191313f27a28488bd1115bcb1c7abc280db6bf054afa" iface="eth0" netns="" Jul 10 00:45:24.473427 env[1210]: 2025-07-10 00:45:24.432 [INFO][4798] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="6f997f8f42875d0c5592191313f27a28488bd1115bcb1c7abc280db6bf054afa" Jul 10 00:45:24.473427 env[1210]: 2025-07-10 00:45:24.432 [INFO][4798] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="6f997f8f42875d0c5592191313f27a28488bd1115bcb1c7abc280db6bf054afa" Jul 10 00:45:24.473427 env[1210]: 2025-07-10 00:45:24.459 [INFO][4807] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="6f997f8f42875d0c5592191313f27a28488bd1115bcb1c7abc280db6bf054afa" HandleID="k8s-pod-network.6f997f8f42875d0c5592191313f27a28488bd1115bcb1c7abc280db6bf054afa" Workload="localhost-k8s-calico--apiserver--7b8bd7bfc9--9vccb-eth0" Jul 10 00:45:24.473427 env[1210]: 2025-07-10 00:45:24.459 [INFO][4807] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:45:24.473427 env[1210]: 2025-07-10 00:45:24.460 [INFO][4807] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:45:24.473427 env[1210]: 2025-07-10 00:45:24.468 [WARNING][4807] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="6f997f8f42875d0c5592191313f27a28488bd1115bcb1c7abc280db6bf054afa" HandleID="k8s-pod-network.6f997f8f42875d0c5592191313f27a28488bd1115bcb1c7abc280db6bf054afa" Workload="localhost-k8s-calico--apiserver--7b8bd7bfc9--9vccb-eth0" Jul 10 00:45:24.473427 env[1210]: 2025-07-10 00:45:24.468 [INFO][4807] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="6f997f8f42875d0c5592191313f27a28488bd1115bcb1c7abc280db6bf054afa" HandleID="k8s-pod-network.6f997f8f42875d0c5592191313f27a28488bd1115bcb1c7abc280db6bf054afa" Workload="localhost-k8s-calico--apiserver--7b8bd7bfc9--9vccb-eth0" Jul 10 00:45:24.473427 env[1210]: 2025-07-10 00:45:24.470 [INFO][4807] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:45:24.473427 env[1210]: 2025-07-10 00:45:24.471 [INFO][4798] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="6f997f8f42875d0c5592191313f27a28488bd1115bcb1c7abc280db6bf054afa" Jul 10 00:45:24.473945 env[1210]: time="2025-07-10T00:45:24.473485209Z" level=info msg="TearDown network for sandbox \"6f997f8f42875d0c5592191313f27a28488bd1115bcb1c7abc280db6bf054afa\" successfully" Jul 10 00:45:24.476913 env[1210]: time="2025-07-10T00:45:24.476878704Z" level=info msg="RemovePodSandbox \"6f997f8f42875d0c5592191313f27a28488bd1115bcb1c7abc280db6bf054afa\" returns successfully" Jul 10 00:45:24.477565 env[1210]: time="2025-07-10T00:45:24.477475409Z" level=info msg="StopPodSandbox for \"db0de9ac83a9321c2e4e43df778f279fe3355d0f51d63a8fbfc25fe415710bd9\"" Jul 10 00:45:24.556748 env[1210]: 2025-07-10 00:45:24.521 [WARNING][4824] cni-plugin/k8s.go 598: WorkloadEndpoint does not exist in the datastore, moving forward with the clean up ContainerID="db0de9ac83a9321c2e4e43df778f279fe3355d0f51d63a8fbfc25fe415710bd9" WorkloadEndpoint="localhost-k8s-whisker--6657b6b6b8--lqb99-eth0" Jul 10 00:45:24.556748 env[1210]: 2025-07-10 00:45:24.521 [INFO][4824] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="db0de9ac83a9321c2e4e43df778f279fe3355d0f51d63a8fbfc25fe415710bd9" Jul 10 00:45:24.556748 env[1210]: 2025-07-10 00:45:24.521 [INFO][4824] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="db0de9ac83a9321c2e4e43df778f279fe3355d0f51d63a8fbfc25fe415710bd9" iface="eth0" netns="" Jul 10 00:45:24.556748 env[1210]: 2025-07-10 00:45:24.521 [INFO][4824] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="db0de9ac83a9321c2e4e43df778f279fe3355d0f51d63a8fbfc25fe415710bd9" Jul 10 00:45:24.556748 env[1210]: 2025-07-10 00:45:24.521 [INFO][4824] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="db0de9ac83a9321c2e4e43df778f279fe3355d0f51d63a8fbfc25fe415710bd9" Jul 10 00:45:24.556748 env[1210]: 2025-07-10 00:45:24.545 [INFO][4832] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="db0de9ac83a9321c2e4e43df778f279fe3355d0f51d63a8fbfc25fe415710bd9" HandleID="k8s-pod-network.db0de9ac83a9321c2e4e43df778f279fe3355d0f51d63a8fbfc25fe415710bd9" Workload="localhost-k8s-whisker--6657b6b6b8--lqb99-eth0" Jul 10 00:45:24.556748 env[1210]: 2025-07-10 00:45:24.545 [INFO][4832] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:45:24.556748 env[1210]: 2025-07-10 00:45:24.545 [INFO][4832] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:45:24.556748 env[1210]: 2025-07-10 00:45:24.551 [WARNING][4832] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="db0de9ac83a9321c2e4e43df778f279fe3355d0f51d63a8fbfc25fe415710bd9" HandleID="k8s-pod-network.db0de9ac83a9321c2e4e43df778f279fe3355d0f51d63a8fbfc25fe415710bd9" Workload="localhost-k8s-whisker--6657b6b6b8--lqb99-eth0" Jul 10 00:45:24.556748 env[1210]: 2025-07-10 00:45:24.551 [INFO][4832] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="db0de9ac83a9321c2e4e43df778f279fe3355d0f51d63a8fbfc25fe415710bd9" HandleID="k8s-pod-network.db0de9ac83a9321c2e4e43df778f279fe3355d0f51d63a8fbfc25fe415710bd9" Workload="localhost-k8s-whisker--6657b6b6b8--lqb99-eth0" Jul 10 00:45:24.556748 env[1210]: 2025-07-10 00:45:24.552 [INFO][4832] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:45:24.556748 env[1210]: 2025-07-10 00:45:24.554 [INFO][4824] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="db0de9ac83a9321c2e4e43df778f279fe3355d0f51d63a8fbfc25fe415710bd9" Jul 10 00:45:24.557290 env[1210]: time="2025-07-10T00:45:24.556775924Z" level=info msg="TearDown network for sandbox \"db0de9ac83a9321c2e4e43df778f279fe3355d0f51d63a8fbfc25fe415710bd9\" successfully" Jul 10 00:45:24.557290 env[1210]: time="2025-07-10T00:45:24.556808808Z" level=info msg="StopPodSandbox for \"db0de9ac83a9321c2e4e43df778f279fe3355d0f51d63a8fbfc25fe415710bd9\" returns successfully" Jul 10 00:45:24.557359 env[1210]: time="2025-07-10T00:45:24.557303998Z" level=info msg="RemovePodSandbox for \"db0de9ac83a9321c2e4e43df778f279fe3355d0f51d63a8fbfc25fe415710bd9\"" Jul 10 00:45:24.557386 env[1210]: time="2025-07-10T00:45:24.557338534Z" level=info msg="Forcibly stopping sandbox \"db0de9ac83a9321c2e4e43df778f279fe3355d0f51d63a8fbfc25fe415710bd9\"" Jul 10 00:45:24.619650 env[1210]: 2025-07-10 00:45:24.588 [WARNING][4849] cni-plugin/k8s.go 598: WorkloadEndpoint does not exist in the datastore, moving forward with the clean up ContainerID="db0de9ac83a9321c2e4e43df778f279fe3355d0f51d63a8fbfc25fe415710bd9" WorkloadEndpoint="localhost-k8s-whisker--6657b6b6b8--lqb99-eth0" Jul 10 00:45:24.619650 env[1210]: 2025-07-10 00:45:24.588 [INFO][4849] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="db0de9ac83a9321c2e4e43df778f279fe3355d0f51d63a8fbfc25fe415710bd9" Jul 10 00:45:24.619650 env[1210]: 2025-07-10 00:45:24.588 [INFO][4849] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="db0de9ac83a9321c2e4e43df778f279fe3355d0f51d63a8fbfc25fe415710bd9" iface="eth0" netns="" Jul 10 00:45:24.619650 env[1210]: 2025-07-10 00:45:24.588 [INFO][4849] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="db0de9ac83a9321c2e4e43df778f279fe3355d0f51d63a8fbfc25fe415710bd9" Jul 10 00:45:24.619650 env[1210]: 2025-07-10 00:45:24.588 [INFO][4849] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="db0de9ac83a9321c2e4e43df778f279fe3355d0f51d63a8fbfc25fe415710bd9" Jul 10 00:45:24.619650 env[1210]: 2025-07-10 00:45:24.607 [INFO][4857] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="db0de9ac83a9321c2e4e43df778f279fe3355d0f51d63a8fbfc25fe415710bd9" HandleID="k8s-pod-network.db0de9ac83a9321c2e4e43df778f279fe3355d0f51d63a8fbfc25fe415710bd9" Workload="localhost-k8s-whisker--6657b6b6b8--lqb99-eth0" Jul 10 00:45:24.619650 env[1210]: 2025-07-10 00:45:24.608 [INFO][4857] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:45:24.619650 env[1210]: 2025-07-10 00:45:24.608 [INFO][4857] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:45:24.619650 env[1210]: 2025-07-10 00:45:24.614 [WARNING][4857] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="db0de9ac83a9321c2e4e43df778f279fe3355d0f51d63a8fbfc25fe415710bd9" HandleID="k8s-pod-network.db0de9ac83a9321c2e4e43df778f279fe3355d0f51d63a8fbfc25fe415710bd9" Workload="localhost-k8s-whisker--6657b6b6b8--lqb99-eth0" Jul 10 00:45:24.619650 env[1210]: 2025-07-10 00:45:24.614 [INFO][4857] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="db0de9ac83a9321c2e4e43df778f279fe3355d0f51d63a8fbfc25fe415710bd9" HandleID="k8s-pod-network.db0de9ac83a9321c2e4e43df778f279fe3355d0f51d63a8fbfc25fe415710bd9" Workload="localhost-k8s-whisker--6657b6b6b8--lqb99-eth0" Jul 10 00:45:24.619650 env[1210]: 2025-07-10 00:45:24.615 [INFO][4857] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:45:24.619650 env[1210]: 2025-07-10 00:45:24.617 [INFO][4849] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="db0de9ac83a9321c2e4e43df778f279fe3355d0f51d63a8fbfc25fe415710bd9" Jul 10 00:45:24.620215 env[1210]: time="2025-07-10T00:45:24.619674975Z" level=info msg="TearDown network for sandbox \"db0de9ac83a9321c2e4e43df778f279fe3355d0f51d63a8fbfc25fe415710bd9\" successfully" Jul 10 00:45:24.774003 env[1210]: time="2025-07-10T00:45:24.773943919Z" level=info msg="RemovePodSandbox \"db0de9ac83a9321c2e4e43df778f279fe3355d0f51d63a8fbfc25fe415710bd9\" returns successfully" Jul 10 00:45:24.774738 env[1210]: time="2025-07-10T00:45:24.774692937Z" level=info msg="StopPodSandbox for \"e088b4fa64ce58bd102e89b3e973569ef5f7d0da6d336068407c752f60657218\"" Jul 10 00:45:25.123871 env[1210]: 2025-07-10 00:45:24.805 [WARNING][4876] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="e088b4fa64ce58bd102e89b3e973569ef5f7d0da6d336068407c752f60657218" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--6fbf996c46--f5zkt-eth0", GenerateName:"calico-kube-controllers-6fbf996c46-", Namespace:"calico-system", SelfLink:"", UID:"ddc62d5a-12e9-476f-81ea-fecce29e2a58", ResourceVersion:"1110", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 44, 42, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"6fbf996c46", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"1fe806f6d822570fa546b740555c0e6093d9ca374e78b51dc3a88de9e54b8ead", Pod:"calico-kube-controllers-6fbf996c46-f5zkt", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"calie97dd92203e", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:45:25.123871 env[1210]: 2025-07-10 00:45:24.806 [INFO][4876] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="e088b4fa64ce58bd102e89b3e973569ef5f7d0da6d336068407c752f60657218" Jul 10 00:45:25.123871 env[1210]: 2025-07-10 00:45:24.806 [INFO][4876] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="e088b4fa64ce58bd102e89b3e973569ef5f7d0da6d336068407c752f60657218" iface="eth0" netns="" Jul 10 00:45:25.123871 env[1210]: 2025-07-10 00:45:24.806 [INFO][4876] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="e088b4fa64ce58bd102e89b3e973569ef5f7d0da6d336068407c752f60657218" Jul 10 00:45:25.123871 env[1210]: 2025-07-10 00:45:24.806 [INFO][4876] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="e088b4fa64ce58bd102e89b3e973569ef5f7d0da6d336068407c752f60657218" Jul 10 00:45:25.123871 env[1210]: 2025-07-10 00:45:24.825 [INFO][4886] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="e088b4fa64ce58bd102e89b3e973569ef5f7d0da6d336068407c752f60657218" HandleID="k8s-pod-network.e088b4fa64ce58bd102e89b3e973569ef5f7d0da6d336068407c752f60657218" Workload="localhost-k8s-calico--kube--controllers--6fbf996c46--f5zkt-eth0" Jul 10 00:45:25.123871 env[1210]: 2025-07-10 00:45:24.825 [INFO][4886] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:45:25.123871 env[1210]: 2025-07-10 00:45:24.825 [INFO][4886] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:45:25.123871 env[1210]: 2025-07-10 00:45:24.947 [WARNING][4886] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="e088b4fa64ce58bd102e89b3e973569ef5f7d0da6d336068407c752f60657218" HandleID="k8s-pod-network.e088b4fa64ce58bd102e89b3e973569ef5f7d0da6d336068407c752f60657218" Workload="localhost-k8s-calico--kube--controllers--6fbf996c46--f5zkt-eth0" Jul 10 00:45:25.123871 env[1210]: 2025-07-10 00:45:24.947 [INFO][4886] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="e088b4fa64ce58bd102e89b3e973569ef5f7d0da6d336068407c752f60657218" HandleID="k8s-pod-network.e088b4fa64ce58bd102e89b3e973569ef5f7d0da6d336068407c752f60657218" Workload="localhost-k8s-calico--kube--controllers--6fbf996c46--f5zkt-eth0" Jul 10 00:45:25.123871 env[1210]: 2025-07-10 00:45:24.949 [INFO][4886] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:45:25.123871 env[1210]: 2025-07-10 00:45:25.122 [INFO][4876] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="e088b4fa64ce58bd102e89b3e973569ef5f7d0da6d336068407c752f60657218" Jul 10 00:45:25.124542 env[1210]: time="2025-07-10T00:45:25.123871548Z" level=info msg="TearDown network for sandbox \"e088b4fa64ce58bd102e89b3e973569ef5f7d0da6d336068407c752f60657218\" successfully" Jul 10 00:45:25.124542 env[1210]: time="2025-07-10T00:45:25.123906014Z" level=info msg="StopPodSandbox for \"e088b4fa64ce58bd102e89b3e973569ef5f7d0da6d336068407c752f60657218\" returns successfully" Jul 10 00:45:25.124542 env[1210]: time="2025-07-10T00:45:25.124355767Z" level=info msg="RemovePodSandbox for \"e088b4fa64ce58bd102e89b3e973569ef5f7d0da6d336068407c752f60657218\"" Jul 10 00:45:25.124542 env[1210]: time="2025-07-10T00:45:25.124409300Z" level=info msg="Forcibly stopping sandbox \"e088b4fa64ce58bd102e89b3e973569ef5f7d0da6d336068407c752f60657218\"" Jul 10 00:45:25.287942 env[1210]: time="2025-07-10T00:45:25.287864299Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/goldmane:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:45:25.291402 env[1210]: time="2025-07-10T00:45:25.291368643Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:dc4ea8b409b85d2f118bb4677ad3d34b57e7b01d488c9f019f7073bb58b2162b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:45:25.293161 env[1210]: time="2025-07-10T00:45:25.293109242Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/goldmane:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:45:25.294839 env[1210]: time="2025-07-10T00:45:25.294796339Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/goldmane@sha256:a2b761fd93d824431ad93e59e8e670cdf00b478f4b532145297e1e67f2768305,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:45:25.295349 env[1210]: time="2025-07-10T00:45:25.295287732Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.2\" returns image reference \"sha256:dc4ea8b409b85d2f118bb4677ad3d34b57e7b01d488c9f019f7073bb58b2162b\"" Jul 10 00:45:25.295759 env[1210]: 2025-07-10 00:45:25.255 [WARNING][4904] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="e088b4fa64ce58bd102e89b3e973569ef5f7d0da6d336068407c752f60657218" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--6fbf996c46--f5zkt-eth0", GenerateName:"calico-kube-controllers-6fbf996c46-", Namespace:"calico-system", SelfLink:"", UID:"ddc62d5a-12e9-476f-81ea-fecce29e2a58", ResourceVersion:"1110", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 44, 42, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"6fbf996c46", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"1fe806f6d822570fa546b740555c0e6093d9ca374e78b51dc3a88de9e54b8ead", Pod:"calico-kube-controllers-6fbf996c46-f5zkt", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"calie97dd92203e", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:45:25.295759 env[1210]: 2025-07-10 00:45:25.256 [INFO][4904] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="e088b4fa64ce58bd102e89b3e973569ef5f7d0da6d336068407c752f60657218" Jul 10 00:45:25.295759 env[1210]: 2025-07-10 00:45:25.256 [INFO][4904] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="e088b4fa64ce58bd102e89b3e973569ef5f7d0da6d336068407c752f60657218" iface="eth0" netns="" Jul 10 00:45:25.295759 env[1210]: 2025-07-10 00:45:25.256 [INFO][4904] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="e088b4fa64ce58bd102e89b3e973569ef5f7d0da6d336068407c752f60657218" Jul 10 00:45:25.295759 env[1210]: 2025-07-10 00:45:25.256 [INFO][4904] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="e088b4fa64ce58bd102e89b3e973569ef5f7d0da6d336068407c752f60657218" Jul 10 00:45:25.295759 env[1210]: 2025-07-10 00:45:25.276 [INFO][4913] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="e088b4fa64ce58bd102e89b3e973569ef5f7d0da6d336068407c752f60657218" HandleID="k8s-pod-network.e088b4fa64ce58bd102e89b3e973569ef5f7d0da6d336068407c752f60657218" Workload="localhost-k8s-calico--kube--controllers--6fbf996c46--f5zkt-eth0" Jul 10 00:45:25.295759 env[1210]: 2025-07-10 00:45:25.276 [INFO][4913] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:45:25.295759 env[1210]: 2025-07-10 00:45:25.276 [INFO][4913] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:45:25.295759 env[1210]: 2025-07-10 00:45:25.288 [WARNING][4913] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="e088b4fa64ce58bd102e89b3e973569ef5f7d0da6d336068407c752f60657218" HandleID="k8s-pod-network.e088b4fa64ce58bd102e89b3e973569ef5f7d0da6d336068407c752f60657218" Workload="localhost-k8s-calico--kube--controllers--6fbf996c46--f5zkt-eth0" Jul 10 00:45:25.295759 env[1210]: 2025-07-10 00:45:25.288 [INFO][4913] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="e088b4fa64ce58bd102e89b3e973569ef5f7d0da6d336068407c752f60657218" HandleID="k8s-pod-network.e088b4fa64ce58bd102e89b3e973569ef5f7d0da6d336068407c752f60657218" Workload="localhost-k8s-calico--kube--controllers--6fbf996c46--f5zkt-eth0" Jul 10 00:45:25.295759 env[1210]: 2025-07-10 00:45:25.290 [INFO][4913] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:45:25.295759 env[1210]: 2025-07-10 00:45:25.293 [INFO][4904] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="e088b4fa64ce58bd102e89b3e973569ef5f7d0da6d336068407c752f60657218" Jul 10 00:45:25.296353 env[1210]: time="2025-07-10T00:45:25.295793583Z" level=info msg="TearDown network for sandbox \"e088b4fa64ce58bd102e89b3e973569ef5f7d0da6d336068407c752f60657218\" successfully" Jul 10 00:45:25.297410 env[1210]: time="2025-07-10T00:45:25.297365769Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.2\"" Jul 10 00:45:25.301009 env[1210]: time="2025-07-10T00:45:25.300828102Z" level=info msg="CreateContainer within sandbox \"c96bdfed1e9fb8f3e5e0b092f7b100732be1115e20ec0d222f0ff3866714a3bd\" for container &ContainerMetadata{Name:goldmane,Attempt:0,}" Jul 10 00:45:25.302529 env[1210]: time="2025-07-10T00:45:25.301302523Z" level=info msg="RemovePodSandbox \"e088b4fa64ce58bd102e89b3e973569ef5f7d0da6d336068407c752f60657218\" returns successfully" Jul 10 00:45:25.302822 env[1210]: time="2025-07-10T00:45:25.302793383Z" level=info msg="StopPodSandbox for \"a6a871d605560fe8d98e2baf90bb42a3dd9c1190ff7c730774a37205b055ca5c\"" Jul 10 00:45:25.311609 env[1210]: time="2025-07-10T00:45:25.311573409Z" level=info msg="CreateContainer within sandbox \"c96bdfed1e9fb8f3e5e0b092f7b100732be1115e20ec0d222f0ff3866714a3bd\" for &ContainerMetadata{Name:goldmane,Attempt:0,} returns container id \"39f80501bfef6d295d677506b7d9b77085e130fb66131a259efc3ae401137ff8\"" Jul 10 00:45:25.313888 env[1210]: time="2025-07-10T00:45:25.313392510Z" level=info msg="StartContainer for \"39f80501bfef6d295d677506b7d9b77085e130fb66131a259efc3ae401137ff8\"" Jul 10 00:45:25.335558 systemd[1]: run-containerd-runc-k8s.io-39f80501bfef6d295d677506b7d9b77085e130fb66131a259efc3ae401137ff8-runc.OTtie3.mount: Deactivated successfully. Jul 10 00:45:25.339013 systemd[1]: Started cri-containerd-39f80501bfef6d295d677506b7d9b77085e130fb66131a259efc3ae401137ff8.scope. Jul 10 00:45:25.349000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:25.349000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:25.349000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:25.349000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:25.349000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:25.349000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:25.349000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:25.349000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:25.349000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:25.349000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:25.349000 audit: BPF prog-id=213 op=LOAD Jul 10 00:45:25.349000 audit[4941]: AVC avc: denied { bpf } for pid=4941 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:25.349000 audit[4941]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=4134 pid=4941 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:25.349000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3339663830353031626665663664323935643637373530366237643962 Jul 10 00:45:25.349000 audit[4941]: AVC avc: denied { perfmon } for pid=4941 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:25.349000 audit[4941]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=4134 pid=4941 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:25.349000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3339663830353031626665663664323935643637373530366237643962 Jul 10 00:45:25.349000 audit[4941]: AVC avc: denied { bpf } for pid=4941 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:25.349000 audit[4941]: AVC avc: denied { bpf } for pid=4941 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:25.349000 audit[4941]: AVC avc: denied { bpf } for pid=4941 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:25.349000 audit[4941]: AVC avc: denied { perfmon } for pid=4941 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:25.349000 audit[4941]: AVC avc: denied { perfmon } for pid=4941 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:25.349000 audit[4941]: AVC avc: denied { perfmon } for pid=4941 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:25.349000 audit[4941]: AVC avc: denied { perfmon } for pid=4941 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:25.349000 audit[4941]: AVC avc: denied { perfmon } for pid=4941 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:25.349000 audit[4941]: AVC avc: denied { bpf } for pid=4941 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:25.349000 audit[4941]: AVC avc: denied { bpf } for pid=4941 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:25.349000 audit: BPF prog-id=214 op=LOAD Jul 10 00:45:25.349000 audit[4941]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0003481c0 items=0 ppid=4134 pid=4941 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:25.349000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3339663830353031626665663664323935643637373530366237643962 Jul 10 00:45:25.349000 audit[4941]: AVC avc: denied { bpf } for pid=4941 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:25.349000 audit[4941]: AVC avc: denied { bpf } for pid=4941 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:25.349000 audit[4941]: AVC avc: denied { perfmon } for pid=4941 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:25.349000 audit[4941]: AVC avc: denied { perfmon } for pid=4941 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:25.349000 audit[4941]: AVC avc: denied { perfmon } for pid=4941 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:25.349000 audit[4941]: AVC avc: denied { perfmon } for pid=4941 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:25.349000 audit[4941]: AVC avc: denied { perfmon } for pid=4941 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:25.349000 audit[4941]: AVC avc: denied { bpf } for pid=4941 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:25.349000 audit[4941]: AVC avc: denied { bpf } for pid=4941 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:25.349000 audit: BPF prog-id=215 op=LOAD Jul 10 00:45:25.349000 audit[4941]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c000348208 items=0 ppid=4134 pid=4941 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:25.349000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3339663830353031626665663664323935643637373530366237643962 Jul 10 00:45:25.350000 audit: BPF prog-id=215 op=UNLOAD Jul 10 00:45:25.350000 audit: BPF prog-id=214 op=UNLOAD Jul 10 00:45:25.350000 audit[4941]: AVC avc: denied { bpf } for pid=4941 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:25.350000 audit[4941]: AVC avc: denied { bpf } for pid=4941 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:25.350000 audit[4941]: AVC avc: denied { bpf } for pid=4941 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:25.350000 audit[4941]: AVC avc: denied { perfmon } for pid=4941 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:25.350000 audit[4941]: AVC avc: denied { perfmon } for pid=4941 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:25.350000 audit[4941]: AVC avc: denied { perfmon } for pid=4941 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:25.350000 audit[4941]: AVC avc: denied { perfmon } for pid=4941 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:25.350000 audit[4941]: AVC avc: denied { perfmon } for pid=4941 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:25.350000 audit[4941]: AVC avc: denied { bpf } for pid=4941 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:25.350000 audit[4941]: AVC avc: denied { bpf } for pid=4941 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:25.350000 audit: BPF prog-id=216 op=LOAD Jul 10 00:45:25.350000 audit[4941]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c000348618 items=0 ppid=4134 pid=4941 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:25.350000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3339663830353031626665663664323935643637373530366237643962 Jul 10 00:45:25.397710 env[1210]: 2025-07-10 00:45:25.357 [WARNING][4940] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="a6a871d605560fe8d98e2baf90bb42a3dd9c1190ff7c730774a37205b055ca5c" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--2mgd9-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"8653425f-9c3b-4f40-adcd-044ce9ce6d7e", ResourceVersion:"999", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 44, 42, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"8967bcb6f", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"ae506496c119ec793aa67da57fea2cb24d235d0d207908600c4f38fb3c2ce0f9", Pod:"csi-node-driver-2mgd9", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali11a95a4ae14", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:45:25.397710 env[1210]: 2025-07-10 00:45:25.358 [INFO][4940] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="a6a871d605560fe8d98e2baf90bb42a3dd9c1190ff7c730774a37205b055ca5c" Jul 10 00:45:25.397710 env[1210]: 2025-07-10 00:45:25.358 [INFO][4940] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="a6a871d605560fe8d98e2baf90bb42a3dd9c1190ff7c730774a37205b055ca5c" iface="eth0" netns="" Jul 10 00:45:25.397710 env[1210]: 2025-07-10 00:45:25.358 [INFO][4940] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="a6a871d605560fe8d98e2baf90bb42a3dd9c1190ff7c730774a37205b055ca5c" Jul 10 00:45:25.397710 env[1210]: 2025-07-10 00:45:25.358 [INFO][4940] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="a6a871d605560fe8d98e2baf90bb42a3dd9c1190ff7c730774a37205b055ca5c" Jul 10 00:45:25.397710 env[1210]: 2025-07-10 00:45:25.384 [INFO][4965] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="a6a871d605560fe8d98e2baf90bb42a3dd9c1190ff7c730774a37205b055ca5c" HandleID="k8s-pod-network.a6a871d605560fe8d98e2baf90bb42a3dd9c1190ff7c730774a37205b055ca5c" Workload="localhost-k8s-csi--node--driver--2mgd9-eth0" Jul 10 00:45:25.397710 env[1210]: 2025-07-10 00:45:25.385 [INFO][4965] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:45:25.397710 env[1210]: 2025-07-10 00:45:25.385 [INFO][4965] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:45:25.397710 env[1210]: 2025-07-10 00:45:25.391 [WARNING][4965] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="a6a871d605560fe8d98e2baf90bb42a3dd9c1190ff7c730774a37205b055ca5c" HandleID="k8s-pod-network.a6a871d605560fe8d98e2baf90bb42a3dd9c1190ff7c730774a37205b055ca5c" Workload="localhost-k8s-csi--node--driver--2mgd9-eth0" Jul 10 00:45:25.397710 env[1210]: 2025-07-10 00:45:25.391 [INFO][4965] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="a6a871d605560fe8d98e2baf90bb42a3dd9c1190ff7c730774a37205b055ca5c" HandleID="k8s-pod-network.a6a871d605560fe8d98e2baf90bb42a3dd9c1190ff7c730774a37205b055ca5c" Workload="localhost-k8s-csi--node--driver--2mgd9-eth0" Jul 10 00:45:25.397710 env[1210]: 2025-07-10 00:45:25.392 [INFO][4965] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:45:25.397710 env[1210]: 2025-07-10 00:45:25.395 [INFO][4940] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="a6a871d605560fe8d98e2baf90bb42a3dd9c1190ff7c730774a37205b055ca5c" Jul 10 00:45:25.397710 env[1210]: time="2025-07-10T00:45:25.397666585Z" level=info msg="TearDown network for sandbox \"a6a871d605560fe8d98e2baf90bb42a3dd9c1190ff7c730774a37205b055ca5c\" successfully" Jul 10 00:45:25.397710 env[1210]: time="2025-07-10T00:45:25.397697664Z" level=info msg="StopPodSandbox for \"a6a871d605560fe8d98e2baf90bb42a3dd9c1190ff7c730774a37205b055ca5c\" returns successfully" Jul 10 00:45:25.667124 env[1210]: time="2025-07-10T00:45:25.400462218Z" level=info msg="RemovePodSandbox for \"a6a871d605560fe8d98e2baf90bb42a3dd9c1190ff7c730774a37205b055ca5c\"" Jul 10 00:45:25.667124 env[1210]: time="2025-07-10T00:45:25.400501434Z" level=info msg="Forcibly stopping sandbox \"a6a871d605560fe8d98e2baf90bb42a3dd9c1190ff7c730774a37205b055ca5c\"" Jul 10 00:45:25.722314 env[1210]: 2025-07-10 00:45:25.693 [WARNING][4993] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="a6a871d605560fe8d98e2baf90bb42a3dd9c1190ff7c730774a37205b055ca5c" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--2mgd9-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"8653425f-9c3b-4f40-adcd-044ce9ce6d7e", ResourceVersion:"999", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 44, 42, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"8967bcb6f", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"ae506496c119ec793aa67da57fea2cb24d235d0d207908600c4f38fb3c2ce0f9", Pod:"csi-node-driver-2mgd9", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali11a95a4ae14", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:45:25.722314 env[1210]: 2025-07-10 00:45:25.693 [INFO][4993] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="a6a871d605560fe8d98e2baf90bb42a3dd9c1190ff7c730774a37205b055ca5c" Jul 10 00:45:25.722314 env[1210]: 2025-07-10 00:45:25.693 [INFO][4993] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="a6a871d605560fe8d98e2baf90bb42a3dd9c1190ff7c730774a37205b055ca5c" iface="eth0" netns="" Jul 10 00:45:25.722314 env[1210]: 2025-07-10 00:45:25.693 [INFO][4993] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="a6a871d605560fe8d98e2baf90bb42a3dd9c1190ff7c730774a37205b055ca5c" Jul 10 00:45:25.722314 env[1210]: 2025-07-10 00:45:25.693 [INFO][4993] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="a6a871d605560fe8d98e2baf90bb42a3dd9c1190ff7c730774a37205b055ca5c" Jul 10 00:45:25.722314 env[1210]: 2025-07-10 00:45:25.712 [INFO][5005] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="a6a871d605560fe8d98e2baf90bb42a3dd9c1190ff7c730774a37205b055ca5c" HandleID="k8s-pod-network.a6a871d605560fe8d98e2baf90bb42a3dd9c1190ff7c730774a37205b055ca5c" Workload="localhost-k8s-csi--node--driver--2mgd9-eth0" Jul 10 00:45:25.722314 env[1210]: 2025-07-10 00:45:25.712 [INFO][5005] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:45:25.722314 env[1210]: 2025-07-10 00:45:25.712 [INFO][5005] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:45:25.722314 env[1210]: 2025-07-10 00:45:25.717 [WARNING][5005] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="a6a871d605560fe8d98e2baf90bb42a3dd9c1190ff7c730774a37205b055ca5c" HandleID="k8s-pod-network.a6a871d605560fe8d98e2baf90bb42a3dd9c1190ff7c730774a37205b055ca5c" Workload="localhost-k8s-csi--node--driver--2mgd9-eth0" Jul 10 00:45:25.722314 env[1210]: 2025-07-10 00:45:25.717 [INFO][5005] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="a6a871d605560fe8d98e2baf90bb42a3dd9c1190ff7c730774a37205b055ca5c" HandleID="k8s-pod-network.a6a871d605560fe8d98e2baf90bb42a3dd9c1190ff7c730774a37205b055ca5c" Workload="localhost-k8s-csi--node--driver--2mgd9-eth0" Jul 10 00:45:25.722314 env[1210]: 2025-07-10 00:45:25.718 [INFO][5005] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:45:25.722314 env[1210]: 2025-07-10 00:45:25.720 [INFO][4993] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="a6a871d605560fe8d98e2baf90bb42a3dd9c1190ff7c730774a37205b055ca5c" Jul 10 00:45:25.722808 env[1210]: time="2025-07-10T00:45:25.722337496Z" level=info msg="TearDown network for sandbox \"a6a871d605560fe8d98e2baf90bb42a3dd9c1190ff7c730774a37205b055ca5c\" successfully" Jul 10 00:45:25.768549 env[1210]: time="2025-07-10T00:45:25.768492063Z" level=info msg="StartContainer for \"39f80501bfef6d295d677506b7d9b77085e130fb66131a259efc3ae401137ff8\" returns successfully" Jul 10 00:45:25.849726 env[1210]: time="2025-07-10T00:45:25.849642003Z" level=info msg="RemovePodSandbox \"a6a871d605560fe8d98e2baf90bb42a3dd9c1190ff7c730774a37205b055ca5c\" returns successfully" Jul 10 00:45:25.850340 env[1210]: time="2025-07-10T00:45:25.850291509Z" level=info msg="StopPodSandbox for \"317a222f2045d2f01f5e1d9fdc4c36d61e4148988f0f93c66864ab12afa61081\"" Jul 10 00:45:25.914209 env[1210]: 2025-07-10 00:45:25.883 [WARNING][5022] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="317a222f2045d2f01f5e1d9fdc4c36d61e4148988f0f93c66864ab12afa61081" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-goldmane--768f4c5c69--vbht5-eth0", GenerateName:"goldmane-768f4c5c69-", Namespace:"calico-system", SelfLink:"", UID:"990e1b75-6549-43f4-a7d2-6561d110faed", ResourceVersion:"1006", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 44, 42, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"768f4c5c69", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"c96bdfed1e9fb8f3e5e0b092f7b100732be1115e20ec0d222f0ff3866714a3bd", Pod:"goldmane-768f4c5c69-vbht5", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.88.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"calic631f52e3ca", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:45:25.914209 env[1210]: 2025-07-10 00:45:25.883 [INFO][5022] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="317a222f2045d2f01f5e1d9fdc4c36d61e4148988f0f93c66864ab12afa61081" Jul 10 00:45:25.914209 env[1210]: 2025-07-10 00:45:25.883 [INFO][5022] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="317a222f2045d2f01f5e1d9fdc4c36d61e4148988f0f93c66864ab12afa61081" iface="eth0" netns="" Jul 10 00:45:25.914209 env[1210]: 2025-07-10 00:45:25.883 [INFO][5022] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="317a222f2045d2f01f5e1d9fdc4c36d61e4148988f0f93c66864ab12afa61081" Jul 10 00:45:25.914209 env[1210]: 2025-07-10 00:45:25.883 [INFO][5022] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="317a222f2045d2f01f5e1d9fdc4c36d61e4148988f0f93c66864ab12afa61081" Jul 10 00:45:25.914209 env[1210]: 2025-07-10 00:45:25.902 [INFO][5030] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="317a222f2045d2f01f5e1d9fdc4c36d61e4148988f0f93c66864ab12afa61081" HandleID="k8s-pod-network.317a222f2045d2f01f5e1d9fdc4c36d61e4148988f0f93c66864ab12afa61081" Workload="localhost-k8s-goldmane--768f4c5c69--vbht5-eth0" Jul 10 00:45:25.914209 env[1210]: 2025-07-10 00:45:25.902 [INFO][5030] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:45:25.914209 env[1210]: 2025-07-10 00:45:25.902 [INFO][5030] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:45:25.914209 env[1210]: 2025-07-10 00:45:25.909 [WARNING][5030] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="317a222f2045d2f01f5e1d9fdc4c36d61e4148988f0f93c66864ab12afa61081" HandleID="k8s-pod-network.317a222f2045d2f01f5e1d9fdc4c36d61e4148988f0f93c66864ab12afa61081" Workload="localhost-k8s-goldmane--768f4c5c69--vbht5-eth0" Jul 10 00:45:25.914209 env[1210]: 2025-07-10 00:45:25.909 [INFO][5030] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="317a222f2045d2f01f5e1d9fdc4c36d61e4148988f0f93c66864ab12afa61081" HandleID="k8s-pod-network.317a222f2045d2f01f5e1d9fdc4c36d61e4148988f0f93c66864ab12afa61081" Workload="localhost-k8s-goldmane--768f4c5c69--vbht5-eth0" Jul 10 00:45:25.914209 env[1210]: 2025-07-10 00:45:25.911 [INFO][5030] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:45:25.914209 env[1210]: 2025-07-10 00:45:25.912 [INFO][5022] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="317a222f2045d2f01f5e1d9fdc4c36d61e4148988f0f93c66864ab12afa61081" Jul 10 00:45:25.914726 env[1210]: time="2025-07-10T00:45:25.914225319Z" level=info msg="TearDown network for sandbox \"317a222f2045d2f01f5e1d9fdc4c36d61e4148988f0f93c66864ab12afa61081\" successfully" Jul 10 00:45:25.914726 env[1210]: time="2025-07-10T00:45:25.914261247Z" level=info msg="StopPodSandbox for \"317a222f2045d2f01f5e1d9fdc4c36d61e4148988f0f93c66864ab12afa61081\" returns successfully" Jul 10 00:45:25.914914 env[1210]: time="2025-07-10T00:45:25.914871028Z" level=info msg="RemovePodSandbox for \"317a222f2045d2f01f5e1d9fdc4c36d61e4148988f0f93c66864ab12afa61081\"" Jul 10 00:45:25.915081 env[1210]: time="2025-07-10T00:45:25.914924941Z" level=info msg="Forcibly stopping sandbox \"317a222f2045d2f01f5e1d9fdc4c36d61e4148988f0f93c66864ab12afa61081\"" Jul 10 00:45:25.975480 env[1210]: 2025-07-10 00:45:25.945 [WARNING][5048] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="317a222f2045d2f01f5e1d9fdc4c36d61e4148988f0f93c66864ab12afa61081" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-goldmane--768f4c5c69--vbht5-eth0", GenerateName:"goldmane-768f4c5c69-", Namespace:"calico-system", SelfLink:"", UID:"990e1b75-6549-43f4-a7d2-6561d110faed", ResourceVersion:"1006", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 44, 42, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"768f4c5c69", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"c96bdfed1e9fb8f3e5e0b092f7b100732be1115e20ec0d222f0ff3866714a3bd", Pod:"goldmane-768f4c5c69-vbht5", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.88.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"calic631f52e3ca", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:45:25.975480 env[1210]: 2025-07-10 00:45:25.946 [INFO][5048] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="317a222f2045d2f01f5e1d9fdc4c36d61e4148988f0f93c66864ab12afa61081" Jul 10 00:45:25.975480 env[1210]: 2025-07-10 00:45:25.946 [INFO][5048] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="317a222f2045d2f01f5e1d9fdc4c36d61e4148988f0f93c66864ab12afa61081" iface="eth0" netns="" Jul 10 00:45:25.975480 env[1210]: 2025-07-10 00:45:25.946 [INFO][5048] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="317a222f2045d2f01f5e1d9fdc4c36d61e4148988f0f93c66864ab12afa61081" Jul 10 00:45:25.975480 env[1210]: 2025-07-10 00:45:25.946 [INFO][5048] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="317a222f2045d2f01f5e1d9fdc4c36d61e4148988f0f93c66864ab12afa61081" Jul 10 00:45:25.975480 env[1210]: 2025-07-10 00:45:25.963 [INFO][5057] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="317a222f2045d2f01f5e1d9fdc4c36d61e4148988f0f93c66864ab12afa61081" HandleID="k8s-pod-network.317a222f2045d2f01f5e1d9fdc4c36d61e4148988f0f93c66864ab12afa61081" Workload="localhost-k8s-goldmane--768f4c5c69--vbht5-eth0" Jul 10 00:45:25.975480 env[1210]: 2025-07-10 00:45:25.963 [INFO][5057] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:45:25.975480 env[1210]: 2025-07-10 00:45:25.963 [INFO][5057] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:45:25.975480 env[1210]: 2025-07-10 00:45:25.969 [WARNING][5057] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="317a222f2045d2f01f5e1d9fdc4c36d61e4148988f0f93c66864ab12afa61081" HandleID="k8s-pod-network.317a222f2045d2f01f5e1d9fdc4c36d61e4148988f0f93c66864ab12afa61081" Workload="localhost-k8s-goldmane--768f4c5c69--vbht5-eth0" Jul 10 00:45:25.975480 env[1210]: 2025-07-10 00:45:25.969 [INFO][5057] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="317a222f2045d2f01f5e1d9fdc4c36d61e4148988f0f93c66864ab12afa61081" HandleID="k8s-pod-network.317a222f2045d2f01f5e1d9fdc4c36d61e4148988f0f93c66864ab12afa61081" Workload="localhost-k8s-goldmane--768f4c5c69--vbht5-eth0" Jul 10 00:45:25.975480 env[1210]: 2025-07-10 00:45:25.971 [INFO][5057] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:45:25.975480 env[1210]: 2025-07-10 00:45:25.973 [INFO][5048] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="317a222f2045d2f01f5e1d9fdc4c36d61e4148988f0f93c66864ab12afa61081" Jul 10 00:45:25.975480 env[1210]: time="2025-07-10T00:45:25.975414221Z" level=info msg="TearDown network for sandbox \"317a222f2045d2f01f5e1d9fdc4c36d61e4148988f0f93c66864ab12afa61081\" successfully" Jul 10 00:45:25.979561 env[1210]: time="2025-07-10T00:45:25.979534216Z" level=info msg="RemovePodSandbox \"317a222f2045d2f01f5e1d9fdc4c36d61e4148988f0f93c66864ab12afa61081\" returns successfully" Jul 10 00:45:25.980162 env[1210]: time="2025-07-10T00:45:25.980114098Z" level=info msg="StopPodSandbox for \"b84b082488c498ee101edac9ccb074ef00c948da04c445ef1696aa4916ed2382\"" Jul 10 00:45:26.043659 env[1210]: 2025-07-10 00:45:26.012 [WARNING][5076] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="b84b082488c498ee101edac9ccb074ef00c948da04c445ef1696aa4916ed2382" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--674b8bbfcf--ffnv5-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"987d308c-16d4-4ea4-ad48-1ba4d53a2918", ResourceVersion:"1024", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 44, 28, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"b0690a82ff123fa42219ea64b9905bff608ead64d83930ef00d63d37b782deb0", Pod:"coredns-674b8bbfcf-ffnv5", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali8c808e80f7a", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:45:26.043659 env[1210]: 2025-07-10 00:45:26.012 [INFO][5076] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="b84b082488c498ee101edac9ccb074ef00c948da04c445ef1696aa4916ed2382" Jul 10 00:45:26.043659 env[1210]: 2025-07-10 00:45:26.012 [INFO][5076] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="b84b082488c498ee101edac9ccb074ef00c948da04c445ef1696aa4916ed2382" iface="eth0" netns="" Jul 10 00:45:26.043659 env[1210]: 2025-07-10 00:45:26.012 [INFO][5076] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="b84b082488c498ee101edac9ccb074ef00c948da04c445ef1696aa4916ed2382" Jul 10 00:45:26.043659 env[1210]: 2025-07-10 00:45:26.013 [INFO][5076] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="b84b082488c498ee101edac9ccb074ef00c948da04c445ef1696aa4916ed2382" Jul 10 00:45:26.043659 env[1210]: 2025-07-10 00:45:26.032 [INFO][5086] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="b84b082488c498ee101edac9ccb074ef00c948da04c445ef1696aa4916ed2382" HandleID="k8s-pod-network.b84b082488c498ee101edac9ccb074ef00c948da04c445ef1696aa4916ed2382" Workload="localhost-k8s-coredns--674b8bbfcf--ffnv5-eth0" Jul 10 00:45:26.043659 env[1210]: 2025-07-10 00:45:26.032 [INFO][5086] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:45:26.043659 env[1210]: 2025-07-10 00:45:26.032 [INFO][5086] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:45:26.043659 env[1210]: 2025-07-10 00:45:26.038 [WARNING][5086] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="b84b082488c498ee101edac9ccb074ef00c948da04c445ef1696aa4916ed2382" HandleID="k8s-pod-network.b84b082488c498ee101edac9ccb074ef00c948da04c445ef1696aa4916ed2382" Workload="localhost-k8s-coredns--674b8bbfcf--ffnv5-eth0" Jul 10 00:45:26.043659 env[1210]: 2025-07-10 00:45:26.038 [INFO][5086] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="b84b082488c498ee101edac9ccb074ef00c948da04c445ef1696aa4916ed2382" HandleID="k8s-pod-network.b84b082488c498ee101edac9ccb074ef00c948da04c445ef1696aa4916ed2382" Workload="localhost-k8s-coredns--674b8bbfcf--ffnv5-eth0" Jul 10 00:45:26.043659 env[1210]: 2025-07-10 00:45:26.040 [INFO][5086] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:45:26.043659 env[1210]: 2025-07-10 00:45:26.041 [INFO][5076] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="b84b082488c498ee101edac9ccb074ef00c948da04c445ef1696aa4916ed2382" Jul 10 00:45:26.044165 env[1210]: time="2025-07-10T00:45:26.043682247Z" level=info msg="TearDown network for sandbox \"b84b082488c498ee101edac9ccb074ef00c948da04c445ef1696aa4916ed2382\" successfully" Jul 10 00:45:26.044165 env[1210]: time="2025-07-10T00:45:26.043715401Z" level=info msg="StopPodSandbox for \"b84b082488c498ee101edac9ccb074ef00c948da04c445ef1696aa4916ed2382\" returns successfully" Jul 10 00:45:26.044259 env[1210]: time="2025-07-10T00:45:26.044209108Z" level=info msg="RemovePodSandbox for \"b84b082488c498ee101edac9ccb074ef00c948da04c445ef1696aa4916ed2382\"" Jul 10 00:45:26.044287 env[1210]: time="2025-07-10T00:45:26.044238144Z" level=info msg="Forcibly stopping sandbox \"b84b082488c498ee101edac9ccb074ef00c948da04c445ef1696aa4916ed2382\"" Jul 10 00:45:26.104549 env[1210]: 2025-07-10 00:45:26.074 [WARNING][5104] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="b84b082488c498ee101edac9ccb074ef00c948da04c445ef1696aa4916ed2382" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--674b8bbfcf--ffnv5-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"987d308c-16d4-4ea4-ad48-1ba4d53a2918", ResourceVersion:"1024", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 44, 28, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"b0690a82ff123fa42219ea64b9905bff608ead64d83930ef00d63d37b782deb0", Pod:"coredns-674b8bbfcf-ffnv5", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali8c808e80f7a", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:45:26.104549 env[1210]: 2025-07-10 00:45:26.074 [INFO][5104] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="b84b082488c498ee101edac9ccb074ef00c948da04c445ef1696aa4916ed2382" Jul 10 00:45:26.104549 env[1210]: 2025-07-10 00:45:26.074 [INFO][5104] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="b84b082488c498ee101edac9ccb074ef00c948da04c445ef1696aa4916ed2382" iface="eth0" netns="" Jul 10 00:45:26.104549 env[1210]: 2025-07-10 00:45:26.074 [INFO][5104] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="b84b082488c498ee101edac9ccb074ef00c948da04c445ef1696aa4916ed2382" Jul 10 00:45:26.104549 env[1210]: 2025-07-10 00:45:26.074 [INFO][5104] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="b84b082488c498ee101edac9ccb074ef00c948da04c445ef1696aa4916ed2382" Jul 10 00:45:26.104549 env[1210]: 2025-07-10 00:45:26.093 [INFO][5113] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="b84b082488c498ee101edac9ccb074ef00c948da04c445ef1696aa4916ed2382" HandleID="k8s-pod-network.b84b082488c498ee101edac9ccb074ef00c948da04c445ef1696aa4916ed2382" Workload="localhost-k8s-coredns--674b8bbfcf--ffnv5-eth0" Jul 10 00:45:26.104549 env[1210]: 2025-07-10 00:45:26.093 [INFO][5113] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:45:26.104549 env[1210]: 2025-07-10 00:45:26.093 [INFO][5113] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:45:26.104549 env[1210]: 2025-07-10 00:45:26.099 [WARNING][5113] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="b84b082488c498ee101edac9ccb074ef00c948da04c445ef1696aa4916ed2382" HandleID="k8s-pod-network.b84b082488c498ee101edac9ccb074ef00c948da04c445ef1696aa4916ed2382" Workload="localhost-k8s-coredns--674b8bbfcf--ffnv5-eth0" Jul 10 00:45:26.104549 env[1210]: 2025-07-10 00:45:26.099 [INFO][5113] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="b84b082488c498ee101edac9ccb074ef00c948da04c445ef1696aa4916ed2382" HandleID="k8s-pod-network.b84b082488c498ee101edac9ccb074ef00c948da04c445ef1696aa4916ed2382" Workload="localhost-k8s-coredns--674b8bbfcf--ffnv5-eth0" Jul 10 00:45:26.104549 env[1210]: 2025-07-10 00:45:26.100 [INFO][5113] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:45:26.104549 env[1210]: 2025-07-10 00:45:26.102 [INFO][5104] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="b84b082488c498ee101edac9ccb074ef00c948da04c445ef1696aa4916ed2382" Jul 10 00:45:26.105152 env[1210]: time="2025-07-10T00:45:26.104577142Z" level=info msg="TearDown network for sandbox \"b84b082488c498ee101edac9ccb074ef00c948da04c445ef1696aa4916ed2382\" successfully" Jul 10 00:45:26.108302 env[1210]: time="2025-07-10T00:45:26.108252591Z" level=info msg="RemovePodSandbox \"b84b082488c498ee101edac9ccb074ef00c948da04c445ef1696aa4916ed2382\" returns successfully" Jul 10 00:45:26.248000 audit[5144]: NETFILTER_CFG table=filter:122 family=2 entries=14 op=nft_register_rule pid=5144 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:45:26.248000 audit[5144]: SYSCALL arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7ffd7c62c1d0 a2=0 a3=7ffd7c62c1bc items=0 ppid=2141 pid=5144 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:26.248000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:45:26.256000 audit[5144]: NETFILTER_CFG table=nat:123 family=2 entries=20 op=nft_register_rule pid=5144 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:45:26.256000 audit[5144]: SYSCALL arch=c000003e syscall=46 success=yes exit=5772 a0=3 a1=7ffd7c62c1d0 a2=0 a3=7ffd7c62c1bc items=0 ppid=2141 pid=5144 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:26.256000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:45:27.532818 systemd[1]: Started sshd@12-10.0.0.116:22-10.0.0.1:55168.service. Jul 10 00:45:27.536005 kernel: kauditd_printk_skb: 76 callbacks suppressed Jul 10 00:45:27.536106 kernel: audit: type=1130 audit(1752108327.532:1433): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.0.0.116:22-10.0.0.1:55168 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:27.532000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.0.0.116:22-10.0.0.1:55168 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:27.566000 audit[5168]: USER_ACCT pid=5168 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:45:27.567410 sshd[5168]: Accepted publickey for core from 10.0.0.1 port 55168 ssh2: RSA SHA256:suUhWV759MqU0C+Dl6JG8TPW8PqnqlsB4qushdi9Ejw Jul 10 00:45:27.569538 sshd[5168]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 00:45:27.567000 audit[5168]: CRED_ACQ pid=5168 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:45:27.573572 systemd-logind[1194]: New session 13 of user core. Jul 10 00:45:27.574368 systemd[1]: Started session-13.scope. Jul 10 00:45:27.574665 kernel: audit: type=1101 audit(1752108327.566:1434): pid=5168 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:45:27.574810 kernel: audit: type=1103 audit(1752108327.567:1435): pid=5168 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:45:27.575057 kernel: audit: type=1006 audit(1752108327.567:1436): pid=5168 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=13 res=1 Jul 10 00:45:27.567000 audit[5168]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff6b0f8db0 a2=3 a3=0 items=0 ppid=1 pid=5168 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:27.582215 kernel: audit: type=1300 audit(1752108327.567:1436): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff6b0f8db0 a2=3 a3=0 items=0 ppid=1 pid=5168 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:27.582275 kernel: audit: type=1327 audit(1752108327.567:1436): proctitle=737368643A20636F7265205B707269765D Jul 10 00:45:27.567000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 10 00:45:27.577000 audit[5168]: USER_START pid=5168 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:45:27.587949 kernel: audit: type=1105 audit(1752108327.577:1437): pid=5168 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:45:27.587997 kernel: audit: type=1103 audit(1752108327.577:1438): pid=5170 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:45:27.577000 audit[5170]: CRED_ACQ pid=5170 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:45:27.819515 sshd[5168]: pam_unix(sshd:session): session closed for user core Jul 10 00:45:27.819000 audit[5168]: USER_END pid=5168 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:45:27.823510 systemd[1]: Started sshd@13-10.0.0.116:22-10.0.0.1:55178.service. Jul 10 00:45:27.824139 systemd[1]: sshd@12-10.0.0.116:22-10.0.0.1:55168.service: Deactivated successfully. Jul 10 00:45:27.830880 kernel: audit: type=1106 audit(1752108327.819:1439): pid=5168 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:45:27.830948 kernel: audit: type=1104 audit(1752108327.820:1440): pid=5168 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:45:27.820000 audit[5168]: CRED_DISP pid=5168 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:45:27.826637 systemd[1]: session-13.scope: Deactivated successfully. Jul 10 00:45:27.828020 systemd-logind[1194]: Session 13 logged out. Waiting for processes to exit. Jul 10 00:45:27.829220 systemd-logind[1194]: Removed session 13. Jul 10 00:45:27.822000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.0.0.116:22-10.0.0.1:55178 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:27.825000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.0.0.116:22-10.0.0.1:55168 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:27.854000 audit[5182]: USER_ACCT pid=5182 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:45:27.855800 sshd[5182]: Accepted publickey for core from 10.0.0.1 port 55178 ssh2: RSA SHA256:suUhWV759MqU0C+Dl6JG8TPW8PqnqlsB4qushdi9Ejw Jul 10 00:45:27.855000 audit[5182]: CRED_ACQ pid=5182 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:45:27.855000 audit[5182]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff13a9f9d0 a2=3 a3=0 items=0 ppid=1 pid=5182 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:27.855000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 10 00:45:27.857034 sshd[5182]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 00:45:27.860671 systemd-logind[1194]: New session 14 of user core. Jul 10 00:45:27.861509 systemd[1]: Started session-14.scope. Jul 10 00:45:27.865000 audit[5182]: USER_START pid=5182 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:45:27.866000 audit[5185]: CRED_ACQ pid=5185 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:45:28.032140 sshd[5182]: pam_unix(sshd:session): session closed for user core Jul 10 00:45:28.034000 audit[5182]: USER_END pid=5182 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:45:28.035000 audit[5182]: CRED_DISP pid=5182 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:45:28.036142 systemd[1]: Started sshd@14-10.0.0.116:22-10.0.0.1:55192.service. Jul 10 00:45:28.035000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.0.0.116:22-10.0.0.1:55192 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:28.039000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.0.0.116:22-10.0.0.1:55178 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:28.040393 systemd[1]: sshd@13-10.0.0.116:22-10.0.0.1:55178.service: Deactivated successfully. Jul 10 00:45:28.041261 systemd[1]: session-14.scope: Deactivated successfully. Jul 10 00:45:28.042676 systemd-logind[1194]: Session 14 logged out. Waiting for processes to exit. Jul 10 00:45:28.043817 systemd-logind[1194]: Removed session 14. Jul 10 00:45:28.075000 audit[5194]: USER_ACCT pid=5194 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:45:28.076270 sshd[5194]: Accepted publickey for core from 10.0.0.1 port 55192 ssh2: RSA SHA256:suUhWV759MqU0C+Dl6JG8TPW8PqnqlsB4qushdi9Ejw Jul 10 00:45:28.077000 audit[5194]: CRED_ACQ pid=5194 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:45:28.077000 audit[5194]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffef1bdf9e0 a2=3 a3=0 items=0 ppid=1 pid=5194 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:28.077000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 10 00:45:28.078379 sshd[5194]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 00:45:28.083180 systemd-logind[1194]: New session 15 of user core. Jul 10 00:45:28.084067 systemd[1]: Started session-15.scope. Jul 10 00:45:28.092000 audit[5194]: USER_START pid=5194 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:45:28.094000 audit[5197]: CRED_ACQ pid=5197 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:45:28.532981 sshd[5194]: pam_unix(sshd:session): session closed for user core Jul 10 00:45:28.533000 audit[5194]: USER_END pid=5194 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:45:28.533000 audit[5194]: CRED_DISP pid=5194 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:45:28.535954 systemd[1]: sshd@14-10.0.0.116:22-10.0.0.1:55192.service: Deactivated successfully. Jul 10 00:45:28.535000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.0.0.116:22-10.0.0.1:55192 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:28.537080 systemd[1]: session-15.scope: Deactivated successfully. Jul 10 00:45:28.537830 systemd-logind[1194]: Session 15 logged out. Waiting for processes to exit. Jul 10 00:45:28.538679 systemd-logind[1194]: Removed session 15. Jul 10 00:45:29.234393 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1636067403.mount: Deactivated successfully. Jul 10 00:45:29.543956 env[1210]: time="2025-07-10T00:45:29.543804019Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker-backend:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:45:29.545664 env[1210]: time="2025-07-10T00:45:29.545627281Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:6ba7e39edcd8be6d32dfccbfdb65533a727b14a19173515e91607d4259f8ee7f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:45:29.547216 env[1210]: time="2025-07-10T00:45:29.547189604Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/whisker-backend:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:45:29.548557 env[1210]: time="2025-07-10T00:45:29.548517718Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker-backend@sha256:fbf7f21f5aba95930803ad7e7dea8b083220854eae72c2a7c51681c09c5614b5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:45:29.549115 env[1210]: time="2025-07-10T00:45:29.549079374Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.2\" returns image reference \"sha256:6ba7e39edcd8be6d32dfccbfdb65533a727b14a19173515e91607d4259f8ee7f\"" Jul 10 00:45:29.550671 env[1210]: time="2025-07-10T00:45:29.550643148Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.2\"" Jul 10 00:45:29.554248 env[1210]: time="2025-07-10T00:45:29.554184491Z" level=info msg="CreateContainer within sandbox \"b559b797c2608820678ed5a66519d0b090ac69eaa3e5795ac2b1af11ee396b61\" for container &ContainerMetadata{Name:whisker-backend,Attempt:0,}" Jul 10 00:45:29.566869 env[1210]: time="2025-07-10T00:45:29.565247290Z" level=info msg="CreateContainer within sandbox \"b559b797c2608820678ed5a66519d0b090ac69eaa3e5795ac2b1af11ee396b61\" for &ContainerMetadata{Name:whisker-backend,Attempt:0,} returns container id \"bd5228980e2fd4fb4184bef63a92d10d9d1099040adebc6f75f7bdf2cc4f35a8\"" Jul 10 00:45:29.567267 env[1210]: time="2025-07-10T00:45:29.567235378Z" level=info msg="StartContainer for \"bd5228980e2fd4fb4184bef63a92d10d9d1099040adebc6f75f7bdf2cc4f35a8\"" Jul 10 00:45:29.593886 systemd[1]: Started cri-containerd-bd5228980e2fd4fb4184bef63a92d10d9d1099040adebc6f75f7bdf2cc4f35a8.scope. Jul 10 00:45:29.604000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:29.604000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:29.604000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:29.604000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:29.604000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:29.604000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:29.604000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:29.604000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:29.604000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:29.604000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:29.604000 audit: BPF prog-id=217 op=LOAD Jul 10 00:45:29.604000 audit[5221]: AVC avc: denied { bpf } for pid=5221 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:29.604000 audit[5221]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000147c48 a2=10 a3=1c items=0 ppid=3417 pid=5221 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:29.604000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6264353232383938306532666434666234313834626566363361393264 Jul 10 00:45:29.605000 audit[5221]: AVC avc: denied { perfmon } for pid=5221 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:29.605000 audit[5221]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001476b0 a2=3c a3=8 items=0 ppid=3417 pid=5221 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:29.605000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6264353232383938306532666434666234313834626566363361393264 Jul 10 00:45:29.605000 audit[5221]: AVC avc: denied { bpf } for pid=5221 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:29.605000 audit[5221]: AVC avc: denied { bpf } for pid=5221 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:29.605000 audit[5221]: AVC avc: denied { bpf } for pid=5221 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:29.605000 audit[5221]: AVC avc: denied { perfmon } for pid=5221 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:29.605000 audit[5221]: AVC avc: denied { perfmon } for pid=5221 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:29.605000 audit[5221]: AVC avc: denied { perfmon } for pid=5221 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:29.605000 audit[5221]: AVC avc: denied { perfmon } for pid=5221 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:29.605000 audit[5221]: AVC avc: denied { perfmon } for pid=5221 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:29.605000 audit[5221]: AVC avc: denied { bpf } for pid=5221 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:29.605000 audit[5221]: AVC avc: denied { bpf } for pid=5221 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:29.605000 audit: BPF prog-id=218 op=LOAD Jul 10 00:45:29.605000 audit[5221]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001479d8 a2=78 a3=c000024f10 items=0 ppid=3417 pid=5221 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:29.605000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6264353232383938306532666434666234313834626566363361393264 Jul 10 00:45:29.605000 audit[5221]: AVC avc: denied { bpf } for pid=5221 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:29.605000 audit[5221]: AVC avc: denied { bpf } for pid=5221 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:29.605000 audit[5221]: AVC avc: denied { perfmon } for pid=5221 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:29.605000 audit[5221]: AVC avc: denied { perfmon } for pid=5221 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:29.605000 audit[5221]: AVC avc: denied { perfmon } for pid=5221 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:29.605000 audit[5221]: AVC avc: denied { perfmon } for pid=5221 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:29.605000 audit[5221]: AVC avc: denied { perfmon } for pid=5221 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:29.605000 audit[5221]: AVC avc: denied { bpf } for pid=5221 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:29.605000 audit[5221]: AVC avc: denied { bpf } for pid=5221 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:29.605000 audit: BPF prog-id=219 op=LOAD Jul 10 00:45:29.605000 audit[5221]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000147770 a2=78 a3=c000024f58 items=0 ppid=3417 pid=5221 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:29.605000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6264353232383938306532666434666234313834626566363361393264 Jul 10 00:45:29.605000 audit: BPF prog-id=219 op=UNLOAD Jul 10 00:45:29.605000 audit: BPF prog-id=218 op=UNLOAD Jul 10 00:45:29.605000 audit[5221]: AVC avc: denied { bpf } for pid=5221 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:29.605000 audit[5221]: AVC avc: denied { bpf } for pid=5221 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:29.605000 audit[5221]: AVC avc: denied { bpf } for pid=5221 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:29.605000 audit[5221]: AVC avc: denied { perfmon } for pid=5221 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:29.605000 audit[5221]: AVC avc: denied { perfmon } for pid=5221 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:29.605000 audit[5221]: AVC avc: denied { perfmon } for pid=5221 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:29.605000 audit[5221]: AVC avc: denied { perfmon } for pid=5221 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:29.605000 audit[5221]: AVC avc: denied { perfmon } for pid=5221 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:29.605000 audit[5221]: AVC avc: denied { bpf } for pid=5221 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:29.605000 audit[5221]: AVC avc: denied { bpf } for pid=5221 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:29.605000 audit: BPF prog-id=220 op=LOAD Jul 10 00:45:29.605000 audit[5221]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000147c30 a2=78 a3=c000025368 items=0 ppid=3417 pid=5221 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:29.605000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6264353232383938306532666434666234313834626566363361393264 Jul 10 00:45:29.630533 env[1210]: time="2025-07-10T00:45:29.630484419Z" level=info msg="StartContainer for \"bd5228980e2fd4fb4184bef63a92d10d9d1099040adebc6f75f7bdf2cc4f35a8\" returns successfully" Jul 10 00:45:30.048568 env[1210]: time="2025-07-10T00:45:30.048496946Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:45:30.050937 env[1210]: time="2025-07-10T00:45:30.050871101Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:5509118eed617ef04ca00f5a095bfd0a4cd1cf69edcfcf9bedf0edb641be51dd,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:45:30.052413 env[1210]: time="2025-07-10T00:45:30.052382305Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:45:30.054072 env[1210]: time="2025-07-10T00:45:30.054010081Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver@sha256:ec6b10660962e7caad70c47755049fad68f9fc2f7064e8bc7cb862583e02cc2b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:45:30.054577 env[1210]: time="2025-07-10T00:45:30.054539685Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.2\" returns image reference \"sha256:5509118eed617ef04ca00f5a095bfd0a4cd1cf69edcfcf9bedf0edb641be51dd\"" Jul 10 00:45:30.055657 env[1210]: time="2025-07-10T00:45:30.055630944Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.2\"" Jul 10 00:45:30.059384 env[1210]: time="2025-07-10T00:45:30.059347009Z" level=info msg="CreateContainer within sandbox \"fca81c38492a8f67da7584ec999b6e3ea7d4a69a3dd41d4d17dfd64e20e24b31\" for container &ContainerMetadata{Name:calico-apiserver,Attempt:0,}" Jul 10 00:45:30.074656 env[1210]: time="2025-07-10T00:45:30.074586395Z" level=info msg="CreateContainer within sandbox \"fca81c38492a8f67da7584ec999b6e3ea7d4a69a3dd41d4d17dfd64e20e24b31\" for &ContainerMetadata{Name:calico-apiserver,Attempt:0,} returns container id \"40ce415c1add647139196d9a00e3412a29613fd9cf1e2805f6b02d9dc61bce6d\"" Jul 10 00:45:30.075227 env[1210]: time="2025-07-10T00:45:30.075206331Z" level=info msg="StartContainer for \"40ce415c1add647139196d9a00e3412a29613fd9cf1e2805f6b02d9dc61bce6d\"" Jul 10 00:45:30.089484 systemd[1]: Started cri-containerd-40ce415c1add647139196d9a00e3412a29613fd9cf1e2805f6b02d9dc61bce6d.scope. Jul 10 00:45:30.102000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:30.102000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:30.102000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:30.102000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:30.102000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:30.102000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:30.102000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:30.102000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:30.102000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:30.102000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:30.102000 audit: BPF prog-id=221 op=LOAD Jul 10 00:45:30.103000 audit[5261]: AVC avc: denied { bpf } for pid=5261 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:30.103000 audit[5261]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=4409 pid=5261 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:30.103000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3430636534313563316164643634373133393139366439613030653334 Jul 10 00:45:30.103000 audit[5261]: AVC avc: denied { perfmon } for pid=5261 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:30.103000 audit[5261]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=4409 pid=5261 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:30.103000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3430636534313563316164643634373133393139366439613030653334 Jul 10 00:45:30.103000 audit[5261]: AVC avc: denied { bpf } for pid=5261 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:30.103000 audit[5261]: AVC avc: denied { bpf } for pid=5261 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:30.103000 audit[5261]: AVC avc: denied { bpf } for pid=5261 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:30.103000 audit[5261]: AVC avc: denied { perfmon } for pid=5261 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:30.103000 audit[5261]: AVC avc: denied { perfmon } for pid=5261 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:30.103000 audit[5261]: AVC avc: denied { perfmon } for pid=5261 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:30.103000 audit[5261]: AVC avc: denied { perfmon } for pid=5261 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:30.103000 audit[5261]: AVC avc: denied { perfmon } for pid=5261 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:30.103000 audit[5261]: AVC avc: denied { bpf } for pid=5261 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:30.103000 audit[5261]: AVC avc: denied { bpf } for pid=5261 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:30.103000 audit: BPF prog-id=222 op=LOAD Jul 10 00:45:30.103000 audit[5261]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c000305510 items=0 ppid=4409 pid=5261 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:30.103000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3430636534313563316164643634373133393139366439613030653334 Jul 10 00:45:30.103000 audit[5261]: AVC avc: denied { bpf } for pid=5261 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:30.103000 audit[5261]: AVC avc: denied { bpf } for pid=5261 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:30.103000 audit[5261]: AVC avc: denied { perfmon } for pid=5261 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:30.103000 audit[5261]: AVC avc: denied { perfmon } for pid=5261 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:30.103000 audit[5261]: AVC avc: denied { perfmon } for pid=5261 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:30.103000 audit[5261]: AVC avc: denied { perfmon } for pid=5261 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:30.103000 audit[5261]: AVC avc: denied { perfmon } for pid=5261 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:30.103000 audit[5261]: AVC avc: denied { bpf } for pid=5261 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:30.103000 audit[5261]: AVC avc: denied { bpf } for pid=5261 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:30.103000 audit: BPF prog-id=223 op=LOAD Jul 10 00:45:30.103000 audit[5261]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c000305558 items=0 ppid=4409 pid=5261 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:30.103000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3430636534313563316164643634373133393139366439613030653334 Jul 10 00:45:30.103000 audit: BPF prog-id=223 op=UNLOAD Jul 10 00:45:30.103000 audit: BPF prog-id=222 op=UNLOAD Jul 10 00:45:30.103000 audit[5261]: AVC avc: denied { bpf } for pid=5261 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:30.103000 audit[5261]: AVC avc: denied { bpf } for pid=5261 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:30.103000 audit[5261]: AVC avc: denied { bpf } for pid=5261 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:30.103000 audit[5261]: AVC avc: denied { perfmon } for pid=5261 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:30.103000 audit[5261]: AVC avc: denied { perfmon } for pid=5261 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:30.103000 audit[5261]: AVC avc: denied { perfmon } for pid=5261 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:30.103000 audit[5261]: AVC avc: denied { perfmon } for pid=5261 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:30.103000 audit[5261]: AVC avc: denied { perfmon } for pid=5261 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:30.103000 audit[5261]: AVC avc: denied { bpf } for pid=5261 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:30.103000 audit[5261]: AVC avc: denied { bpf } for pid=5261 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:30.103000 audit: BPF prog-id=224 op=LOAD Jul 10 00:45:30.103000 audit[5261]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c000305968 items=0 ppid=4409 pid=5261 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:30.103000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3430636534313563316164643634373133393139366439613030653334 Jul 10 00:45:30.133447 env[1210]: time="2025-07-10T00:45:30.133380198Z" level=info msg="StartContainer for \"40ce415c1add647139196d9a00e3412a29613fd9cf1e2805f6b02d9dc61bce6d\" returns successfully" Jul 10 00:45:30.182947 kubelet[2000]: I0710 00:45:30.179930 2000 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/whisker-57dc5c8b4-pkht6" podStartSLOduration=1.650021873 podStartE2EDuration="24.179881115s" podCreationTimestamp="2025-07-10 00:45:06 +0000 UTC" firstStartedPulling="2025-07-10 00:45:07.020223724 +0000 UTC m=+43.426179359" lastFinishedPulling="2025-07-10 00:45:29.550082966 +0000 UTC m=+65.956038601" observedRunningTime="2025-07-10 00:45:30.17565816 +0000 UTC m=+66.581613825" watchObservedRunningTime="2025-07-10 00:45:30.179881115 +0000 UTC m=+66.585836750" Jul 10 00:45:30.184340 kubelet[2000]: I0710 00:45:30.184274 2000 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/goldmane-768f4c5c69-vbht5" podStartSLOduration=34.480370661 podStartE2EDuration="48.184253105s" podCreationTimestamp="2025-07-10 00:44:42 +0000 UTC" firstStartedPulling="2025-07-10 00:45:11.592525828 +0000 UTC m=+47.998481463" lastFinishedPulling="2025-07-10 00:45:25.296408272 +0000 UTC m=+61.702363907" observedRunningTime="2025-07-10 00:45:26.184814441 +0000 UTC m=+62.590770076" watchObservedRunningTime="2025-07-10 00:45:30.184253105 +0000 UTC m=+66.590208740" Jul 10 00:45:30.201000 audit[5294]: NETFILTER_CFG table=filter:124 family=2 entries=13 op=nft_register_rule pid=5294 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:45:30.201000 audit[5294]: SYSCALL arch=c000003e syscall=46 success=yes exit=4504 a0=3 a1=7fffa4ab2b50 a2=0 a3=7fffa4ab2b3c items=0 ppid=2141 pid=5294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:30.201000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:45:30.210000 audit[5294]: NETFILTER_CFG table=nat:125 family=2 entries=27 op=nft_register_chain pid=5294 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:45:30.210000 audit[5294]: SYSCALL arch=c000003e syscall=46 success=yes exit=9348 a0=3 a1=7fffa4ab2b50 a2=0 a3=7fffa4ab2b3c items=0 ppid=2141 pid=5294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:30.210000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:45:30.224000 audit[5298]: NETFILTER_CFG table=filter:126 family=2 entries=12 op=nft_register_rule pid=5298 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:45:30.224000 audit[5298]: SYSCALL arch=c000003e syscall=46 success=yes exit=4504 a0=3 a1=7ffc6de256c0 a2=0 a3=7ffc6de256ac items=0 ppid=2141 pid=5298 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:30.224000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:45:30.229000 audit[5298]: NETFILTER_CFG table=nat:127 family=2 entries=22 op=nft_register_rule pid=5298 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:45:30.229000 audit[5298]: SYSCALL arch=c000003e syscall=46 success=yes exit=6540 a0=3 a1=7ffc6de256c0 a2=0 a3=7ffc6de256ac items=0 ppid=2141 pid=5298 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:30.229000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:45:30.565579 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3430180712.mount: Deactivated successfully. Jul 10 00:45:33.107000 audit[5272]: AVC avc: denied { watch } for pid=5272 comm="apiserver" path="/calico-apiserver-certs/..2025_07_10_00_44_55.2238153067/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c18,c592 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c18,c592 tclass=file permissive=0 Jul 10 00:45:33.109717 kernel: kauditd_printk_skb: 149 callbacks suppressed Jul 10 00:45:33.109784 kernel: audit: type=1400 audit(1752108333.107:1500): avc: denied { watch } for pid=5272 comm="apiserver" path="/calico-apiserver-certs/..2025_07_10_00_44_55.2238153067/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c18,c592 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c18,c592 tclass=file permissive=0 Jul 10 00:45:33.107000 audit[5272]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c0008040c0 a2=fc6 a3=0 items=0 ppid=4409 pid=5272 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c18,c592 key=(null) Jul 10 00:45:33.118449 kernel: audit: type=1300 audit(1752108333.107:1500): arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c0008040c0 a2=fc6 a3=0 items=0 ppid=4409 pid=5272 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c18,c592 key=(null) Jul 10 00:45:33.107000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 10 00:45:33.123823 kernel: audit: type=1327 audit(1752108333.107:1500): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 10 00:45:33.140481 kubelet[2000]: I0710 00:45:33.140401 2000 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-apiserver/calico-apiserver-7b8bd7bfc9-9vccb" podStartSLOduration=36.584193908 podStartE2EDuration="54.140383564s" podCreationTimestamp="2025-07-10 00:44:39 +0000 UTC" firstStartedPulling="2025-07-10 00:45:12.499223431 +0000 UTC m=+48.905179066" lastFinishedPulling="2025-07-10 00:45:30.055413087 +0000 UTC m=+66.461368722" observedRunningTime="2025-07-10 00:45:30.191631872 +0000 UTC m=+66.597587497" watchObservedRunningTime="2025-07-10 00:45:33.140383564 +0000 UTC m=+69.546339189" Jul 10 00:45:33.149000 audit[5302]: NETFILTER_CFG table=filter:128 family=2 entries=11 op=nft_register_rule pid=5302 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:45:33.149000 audit[5302]: SYSCALL arch=c000003e syscall=46 success=yes exit=3760 a0=3 a1=7fffb7488500 a2=0 a3=7fffb74884ec items=0 ppid=2141 pid=5302 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:33.159187 kernel: audit: type=1325 audit(1752108333.149:1501): table=filter:128 family=2 entries=11 op=nft_register_rule pid=5302 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:45:33.159326 kernel: audit: type=1300 audit(1752108333.149:1501): arch=c000003e syscall=46 success=yes exit=3760 a0=3 a1=7fffb7488500 a2=0 a3=7fffb74884ec items=0 ppid=2141 pid=5302 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:33.162413 kernel: audit: type=1327 audit(1752108333.149:1501): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:45:33.149000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:45:33.163000 audit[5302]: NETFILTER_CFG table=nat:129 family=2 entries=29 op=nft_register_chain pid=5302 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:45:33.163000 audit[5302]: SYSCALL arch=c000003e syscall=46 success=yes exit=10116 a0=3 a1=7fffb7488500 a2=0 a3=7fffb74884ec items=0 ppid=2141 pid=5302 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:33.175317 kernel: audit: type=1325 audit(1752108333.163:1502): table=nat:129 family=2 entries=29 op=nft_register_chain pid=5302 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:45:33.175479 kernel: audit: type=1300 audit(1752108333.163:1502): arch=c000003e syscall=46 success=yes exit=10116 a0=3 a1=7fffb7488500 a2=0 a3=7fffb74884ec items=0 ppid=2141 pid=5302 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:33.175507 kernel: audit: type=1327 audit(1752108333.163:1502): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:45:33.163000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:45:33.537239 systemd[1]: Started sshd@15-10.0.0.116:22-10.0.0.1:53998.service. Jul 10 00:45:33.536000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.0.0.116:22-10.0.0.1:53998 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:33.543343 kernel: audit: type=1130 audit(1752108333.536:1503): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.0.0.116:22-10.0.0.1:53998 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:33.572676 sshd[5304]: Accepted publickey for core from 10.0.0.1 port 53998 ssh2: RSA SHA256:suUhWV759MqU0C+Dl6JG8TPW8PqnqlsB4qushdi9Ejw Jul 10 00:45:33.571000 audit[5304]: USER_ACCT pid=5304 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:45:33.572000 audit[5304]: CRED_ACQ pid=5304 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:45:33.573000 audit[5304]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffcb81abcd0 a2=3 a3=0 items=0 ppid=1 pid=5304 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:33.573000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 10 00:45:33.574411 sshd[5304]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 00:45:33.578616 systemd-logind[1194]: New session 16 of user core. Jul 10 00:45:33.579449 systemd[1]: Started session-16.scope. Jul 10 00:45:33.583000 audit[5304]: USER_START pid=5304 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:45:33.585000 audit[5306]: CRED_ACQ pid=5306 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:45:33.732734 env[1210]: time="2025-07-10T00:45:33.732668594Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node-driver-registrar:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:45:33.734986 env[1210]: time="2025-07-10T00:45:33.734958292Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:9e48822a4fe26f4ed9231b361fdd1357ea3567f1fc0a8db4d616622fe570a866,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:45:33.741140 env[1210]: time="2025-07-10T00:45:33.741066223Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/node-driver-registrar:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:45:33.742560 env[1210]: time="2025-07-10T00:45:33.742523519Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node-driver-registrar@sha256:8fec2de12dfa51bae89d941938a07af2598eb8bfcab55d0dded1d9c193d7b99f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:45:33.743099 env[1210]: time="2025-07-10T00:45:33.743052080Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.2\" returns image reference \"sha256:9e48822a4fe26f4ed9231b361fdd1357ea3567f1fc0a8db4d616622fe570a866\"" Jul 10 00:45:33.750436 env[1210]: time="2025-07-10T00:45:33.750375746Z" level=info msg="CreateContainer within sandbox \"ae506496c119ec793aa67da57fea2cb24d235d0d207908600c4f38fb3c2ce0f9\" for container &ContainerMetadata{Name:csi-node-driver-registrar,Attempt:0,}" Jul 10 00:45:33.764596 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount194369942.mount: Deactivated successfully. Jul 10 00:45:33.772486 env[1210]: time="2025-07-10T00:45:33.772419049Z" level=info msg="CreateContainer within sandbox \"ae506496c119ec793aa67da57fea2cb24d235d0d207908600c4f38fb3c2ce0f9\" for &ContainerMetadata{Name:csi-node-driver-registrar,Attempt:0,} returns container id \"3ced3370cc1e55b8d7d4619bb6ad800c3050ddb20ecadb81b2dc861e165cf157\"" Jul 10 00:45:33.773360 env[1210]: time="2025-07-10T00:45:33.773329270Z" level=info msg="StartContainer for \"3ced3370cc1e55b8d7d4619bb6ad800c3050ddb20ecadb81b2dc861e165cf157\"" Jul 10 00:45:33.798181 systemd[1]: Started cri-containerd-3ced3370cc1e55b8d7d4619bb6ad800c3050ddb20ecadb81b2dc861e165cf157.scope. Jul 10 00:45:33.810000 audit[5321]: AVC avc: denied { perfmon } for pid=5321 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:33.810000 audit[5321]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001456b0 a2=3c a3=7fa1652f9ba8 items=0 ppid=4022 pid=5321 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:33.810000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3363656433333730636331653535623864376434363139626236616438 Jul 10 00:45:33.810000 audit[5321]: AVC avc: denied { bpf } for pid=5321 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:33.810000 audit[5321]: AVC avc: denied { bpf } for pid=5321 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:33.810000 audit[5321]: AVC avc: denied { bpf } for pid=5321 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:33.810000 audit[5321]: AVC avc: denied { perfmon } for pid=5321 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:33.810000 audit[5321]: AVC avc: denied { perfmon } for pid=5321 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:33.810000 audit[5321]: AVC avc: denied { perfmon } for pid=5321 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:33.810000 audit[5321]: AVC avc: denied { perfmon } for pid=5321 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:33.810000 audit[5321]: AVC avc: denied { perfmon } for pid=5321 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:33.810000 audit[5321]: AVC avc: denied { bpf } for pid=5321 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:33.810000 audit[5321]: AVC avc: denied { bpf } for pid=5321 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:33.810000 audit: BPF prog-id=225 op=LOAD Jul 10 00:45:33.810000 audit[5321]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001459d8 a2=78 a3=c0003083d8 items=0 ppid=4022 pid=5321 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:33.810000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3363656433333730636331653535623864376434363139626236616438 Jul 10 00:45:33.810000 audit[5321]: AVC avc: denied { bpf } for pid=5321 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:33.810000 audit[5321]: AVC avc: denied { bpf } for pid=5321 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:33.810000 audit[5321]: AVC avc: denied { perfmon } for pid=5321 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:33.810000 audit[5321]: AVC avc: denied { perfmon } for pid=5321 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:33.810000 audit[5321]: AVC avc: denied { perfmon } for pid=5321 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:33.810000 audit[5321]: AVC avc: denied { perfmon } for pid=5321 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:33.810000 audit[5321]: AVC avc: denied { perfmon } for pid=5321 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:33.810000 audit[5321]: AVC avc: denied { bpf } for pid=5321 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:33.810000 audit[5321]: AVC avc: denied { bpf } for pid=5321 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:33.810000 audit: BPF prog-id=226 op=LOAD Jul 10 00:45:33.810000 audit[5321]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000145770 a2=78 a3=c000308428 items=0 ppid=4022 pid=5321 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:33.810000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3363656433333730636331653535623864376434363139626236616438 Jul 10 00:45:33.810000 audit: BPF prog-id=226 op=UNLOAD Jul 10 00:45:33.810000 audit: BPF prog-id=225 op=UNLOAD Jul 10 00:45:33.810000 audit[5321]: AVC avc: denied { bpf } for pid=5321 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:33.810000 audit[5321]: AVC avc: denied { bpf } for pid=5321 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:33.810000 audit[5321]: AVC avc: denied { bpf } for pid=5321 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:33.810000 audit[5321]: AVC avc: denied { perfmon } for pid=5321 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:33.810000 audit[5321]: AVC avc: denied { perfmon } for pid=5321 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:33.810000 audit[5321]: AVC avc: denied { perfmon } for pid=5321 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:33.810000 audit[5321]: AVC avc: denied { perfmon } for pid=5321 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:33.810000 audit[5321]: AVC avc: denied { perfmon } for pid=5321 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:33.810000 audit[5321]: AVC avc: denied { bpf } for pid=5321 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:33.810000 audit[5321]: AVC avc: denied { bpf } for pid=5321 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:45:33.810000 audit: BPF prog-id=227 op=LOAD Jul 10 00:45:33.810000 audit[5321]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000145c30 a2=78 a3=c0003084b8 items=0 ppid=4022 pid=5321 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:33.810000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3363656433333730636331653535623864376434363139626236616438 Jul 10 00:45:33.830694 env[1210]: time="2025-07-10T00:45:33.830607355Z" level=info msg="StartContainer for \"3ced3370cc1e55b8d7d4619bb6ad800c3050ddb20ecadb81b2dc861e165cf157\" returns successfully" Jul 10 00:45:33.935543 sshd[5304]: pam_unix(sshd:session): session closed for user core Jul 10 00:45:33.935000 audit[5304]: USER_END pid=5304 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:45:33.936000 audit[5304]: CRED_DISP pid=5304 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:45:33.938658 systemd[1]: sshd@15-10.0.0.116:22-10.0.0.1:53998.service: Deactivated successfully. Jul 10 00:45:33.939489 systemd[1]: session-16.scope: Deactivated successfully. Jul 10 00:45:33.938000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.0.0.116:22-10.0.0.1:53998 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:33.940194 systemd-logind[1194]: Session 16 logged out. Waiting for processes to exit. Jul 10 00:45:33.941109 systemd-logind[1194]: Removed session 16. Jul 10 00:45:34.182439 kubelet[2000]: I0710 00:45:34.182368 2000 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/csi-node-driver-2mgd9" podStartSLOduration=29.877723651 podStartE2EDuration="52.182347247s" podCreationTimestamp="2025-07-10 00:44:42 +0000 UTC" firstStartedPulling="2025-07-10 00:45:11.439887263 +0000 UTC m=+47.845842888" lastFinishedPulling="2025-07-10 00:45:33.744510859 +0000 UTC m=+70.150466484" observedRunningTime="2025-07-10 00:45:34.179794647 +0000 UTC m=+70.585750282" watchObservedRunningTime="2025-07-10 00:45:34.182347247 +0000 UTC m=+70.588302882" Jul 10 00:45:34.783368 kubelet[2000]: I0710 00:45:34.783306 2000 csi_plugin.go:106] kubernetes.io/csi: Trying to validate a new CSI Driver with name: csi.tigera.io endpoint: /var/lib/kubelet/plugins/csi.tigera.io/csi.sock versions: 1.0.0 Jul 10 00:45:34.784619 kubelet[2000]: I0710 00:45:34.784594 2000 csi_plugin.go:119] kubernetes.io/csi: Register new plugin with name: csi.tigera.io at endpoint: /var/lib/kubelet/plugins/csi.tigera.io/csi.sock Jul 10 00:45:36.683430 kubelet[2000]: E0710 00:45:36.683355 2000 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:45:37.681964 kubelet[2000]: E0710 00:45:37.681905 2000 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:45:38.940142 systemd[1]: Started sshd@16-10.0.0.116:22-10.0.0.1:54002.service. Jul 10 00:45:38.938000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.0.0.116:22-10.0.0.1:54002 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:38.941637 kernel: kauditd_printk_skb: 53 callbacks suppressed Jul 10 00:45:38.953160 kernel: audit: type=1130 audit(1752108338.938:1518): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.0.0.116:22-10.0.0.1:54002 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:39.136000 audit[5380]: USER_ACCT pid=5380 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:45:39.138706 sshd[5380]: Accepted publickey for core from 10.0.0.1 port 54002 ssh2: RSA SHA256:suUhWV759MqU0C+Dl6JG8TPW8PqnqlsB4qushdi9Ejw Jul 10 00:45:39.140706 sshd[5380]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 00:45:39.138000 audit[5380]: CRED_ACQ pid=5380 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:45:39.144367 systemd-logind[1194]: New session 17 of user core. Jul 10 00:45:39.145412 systemd[1]: Started session-17.scope. Jul 10 00:45:39.146469 kernel: audit: type=1101 audit(1752108339.136:1519): pid=5380 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:45:39.146541 kernel: audit: type=1103 audit(1752108339.138:1520): pid=5380 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:45:39.146567 kernel: audit: type=1006 audit(1752108339.138:1521): pid=5380 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=17 res=1 Jul 10 00:45:39.149409 kernel: audit: type=1300 audit(1752108339.138:1521): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd8d7d57f0 a2=3 a3=0 items=0 ppid=1 pid=5380 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:39.138000 audit[5380]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd8d7d57f0 a2=3 a3=0 items=0 ppid=1 pid=5380 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:39.138000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 10 00:45:39.155247 kernel: audit: type=1327 audit(1752108339.138:1521): proctitle=737368643A20636F7265205B707269765D Jul 10 00:45:39.155305 kernel: audit: type=1105 audit(1752108339.148:1522): pid=5380 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:45:39.148000 audit[5380]: USER_START pid=5380 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:45:39.149000 audit[5382]: CRED_ACQ pid=5382 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:45:39.162773 kernel: audit: type=1103 audit(1752108339.149:1523): pid=5382 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:45:39.273699 sshd[5380]: pam_unix(sshd:session): session closed for user core Jul 10 00:45:39.273000 audit[5380]: USER_END pid=5380 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:45:39.273000 audit[5380]: CRED_DISP pid=5380 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:45:39.280443 systemd[1]: sshd@16-10.0.0.116:22-10.0.0.1:54002.service: Deactivated successfully. Jul 10 00:45:39.281320 systemd[1]: session-17.scope: Deactivated successfully. Jul 10 00:45:39.282059 systemd-logind[1194]: Session 17 logged out. Waiting for processes to exit. Jul 10 00:45:39.282991 systemd-logind[1194]: Removed session 17. Jul 10 00:45:39.283305 kernel: audit: type=1106 audit(1752108339.273:1524): pid=5380 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:45:39.283393 kernel: audit: type=1104 audit(1752108339.273:1525): pid=5380 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:45:39.278000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.0.0.116:22-10.0.0.1:54002 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:39.472110 kubelet[2000]: I0710 00:45:39.472042 2000 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Jul 10 00:45:39.512000 audit[5395]: NETFILTER_CFG table=filter:130 family=2 entries=10 op=nft_register_rule pid=5395 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:45:39.512000 audit[5395]: SYSCALL arch=c000003e syscall=46 success=yes exit=3760 a0=3 a1=7fff9aeb05e0 a2=0 a3=7fff9aeb05cc items=0 ppid=2141 pid=5395 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:39.512000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:45:39.519000 audit[5395]: NETFILTER_CFG table=nat:131 family=2 entries=36 op=nft_register_chain pid=5395 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:45:39.519000 audit[5395]: SYSCALL arch=c000003e syscall=46 success=yes exit=12004 a0=3 a1=7fff9aeb05e0 a2=0 a3=7fff9aeb05cc items=0 ppid=2141 pid=5395 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:39.519000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:45:44.277000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.0.0.116:22-10.0.0.1:38586 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:44.277780 systemd[1]: Started sshd@17-10.0.0.116:22-10.0.0.1:38586.service. Jul 10 00:45:44.278894 kernel: kauditd_printk_skb: 7 callbacks suppressed Jul 10 00:45:44.278955 kernel: audit: type=1130 audit(1752108344.277:1529): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.0.0.116:22-10.0.0.1:38586 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:44.531000 audit[5401]: USER_ACCT pid=5401 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:45:44.533531 sshd[5401]: Accepted publickey for core from 10.0.0.1 port 38586 ssh2: RSA SHA256:suUhWV759MqU0C+Dl6JG8TPW8PqnqlsB4qushdi9Ejw Jul 10 00:45:44.536000 audit[5401]: CRED_ACQ pid=5401 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:45:44.539507 sshd[5401]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 00:45:44.542886 kernel: audit: type=1101 audit(1752108344.531:1530): pid=5401 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:45:44.543117 kernel: audit: type=1103 audit(1752108344.536:1531): pid=5401 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:45:44.543141 kernel: audit: type=1006 audit(1752108344.536:1532): pid=5401 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=18 res=1 Jul 10 00:45:44.543664 kernel: audit: type=1300 audit(1752108344.536:1532): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff4ea4a160 a2=3 a3=0 items=0 ppid=1 pid=5401 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:44.536000 audit[5401]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff4ea4a160 a2=3 a3=0 items=0 ppid=1 pid=5401 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:44.543408 systemd-logind[1194]: New session 18 of user core. Jul 10 00:45:44.567906 kernel: audit: type=1327 audit(1752108344.536:1532): proctitle=737368643A20636F7265205B707269765D Jul 10 00:45:44.567973 kernel: audit: type=1105 audit(1752108344.549:1533): pid=5401 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:45:44.567993 kernel: audit: type=1103 audit(1752108344.551:1534): pid=5403 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:45:44.536000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 10 00:45:44.549000 audit[5401]: USER_START pid=5401 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:45:44.551000 audit[5403]: CRED_ACQ pid=5403 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:45:44.544578 systemd[1]: Started session-18.scope. Jul 10 00:45:44.759073 sshd[5401]: pam_unix(sshd:session): session closed for user core Jul 10 00:45:44.770274 kernel: audit: type=1106 audit(1752108344.759:1535): pid=5401 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:45:44.770463 kernel: audit: type=1104 audit(1752108344.759:1536): pid=5401 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:45:44.759000 audit[5401]: USER_END pid=5401 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:45:44.759000 audit[5401]: CRED_DISP pid=5401 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:45:44.759000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.0.0.116:22-10.0.0.1:38586 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:44.762284 systemd-logind[1194]: Session 18 logged out. Waiting for processes to exit. Jul 10 00:45:44.762426 systemd[1]: sshd@17-10.0.0.116:22-10.0.0.1:38586.service: Deactivated successfully. Jul 10 00:45:44.763168 systemd[1]: session-18.scope: Deactivated successfully. Jul 10 00:45:44.764013 systemd-logind[1194]: Removed session 18. Jul 10 00:45:49.762935 systemd[1]: Started sshd@18-10.0.0.116:22-10.0.0.1:52162.service. Jul 10 00:45:49.762000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.0.0.116:22-10.0.0.1:52162 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:49.765084 kernel: kauditd_printk_skb: 1 callbacks suppressed Jul 10 00:45:49.765151 kernel: audit: type=1130 audit(1752108349.762:1538): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.0.0.116:22-10.0.0.1:52162 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:49.794000 audit[5420]: USER_ACCT pid=5420 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:45:49.795833 sshd[5420]: Accepted publickey for core from 10.0.0.1 port 52162 ssh2: RSA SHA256:suUhWV759MqU0C+Dl6JG8TPW8PqnqlsB4qushdi9Ejw Jul 10 00:45:49.798358 sshd[5420]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 00:45:49.797000 audit[5420]: CRED_ACQ pid=5420 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:45:49.803773 systemd-logind[1194]: New session 19 of user core. Jul 10 00:45:49.804525 systemd[1]: Started session-19.scope. Jul 10 00:45:49.804813 kernel: audit: type=1101 audit(1752108349.794:1539): pid=5420 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:45:49.805319 kernel: audit: type=1103 audit(1752108349.797:1540): pid=5420 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:45:49.805361 kernel: audit: type=1006 audit(1752108349.797:1541): pid=5420 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=19 res=1 Jul 10 00:45:49.797000 audit[5420]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffdd99f1840 a2=3 a3=0 items=0 ppid=1 pid=5420 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:49.812192 kernel: audit: type=1300 audit(1752108349.797:1541): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffdd99f1840 a2=3 a3=0 items=0 ppid=1 pid=5420 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:49.812278 kernel: audit: type=1327 audit(1752108349.797:1541): proctitle=737368643A20636F7265205B707269765D Jul 10 00:45:49.797000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 10 00:45:49.808000 audit[5420]: USER_START pid=5420 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:45:49.818259 kernel: audit: type=1105 audit(1752108349.808:1542): pid=5420 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:45:49.818304 kernel: audit: type=1103 audit(1752108349.809:1543): pid=5422 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:45:49.809000 audit[5422]: CRED_ACQ pid=5422 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:45:49.944129 sshd[5420]: pam_unix(sshd:session): session closed for user core Jul 10 00:45:49.944000 audit[5420]: USER_END pid=5420 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:45:49.948679 systemd[1]: sshd@18-10.0.0.116:22-10.0.0.1:52162.service: Deactivated successfully. Jul 10 00:45:49.948965 systemd-logind[1194]: Session 19 logged out. Waiting for processes to exit. Jul 10 00:45:49.949620 systemd[1]: session-19.scope: Deactivated successfully. Jul 10 00:45:49.950464 systemd-logind[1194]: Removed session 19. Jul 10 00:45:49.944000 audit[5420]: CRED_DISP pid=5420 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:45:49.954174 kernel: audit: type=1106 audit(1752108349.944:1544): pid=5420 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:45:49.954366 kernel: audit: type=1104 audit(1752108349.944:1545): pid=5420 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:45:49.948000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.0.0.116:22-10.0.0.1:52162 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:54.948867 systemd[1]: Started sshd@19-10.0.0.116:22-10.0.0.1:52168.service. Jul 10 00:45:54.948000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.0.0.116:22-10.0.0.1:52168 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:54.950242 kernel: kauditd_printk_skb: 1 callbacks suppressed Jul 10 00:45:54.950288 kernel: audit: type=1130 audit(1752108354.948:1547): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.0.0.116:22-10.0.0.1:52168 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:54.980959 sshd[5454]: Accepted publickey for core from 10.0.0.1 port 52168 ssh2: RSA SHA256:suUhWV759MqU0C+Dl6JG8TPW8PqnqlsB4qushdi9Ejw Jul 10 00:45:54.980000 audit[5454]: USER_ACCT pid=5454 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:45:54.984462 sshd[5454]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 00:45:54.985024 kernel: audit: type=1101 audit(1752108354.980:1548): pid=5454 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:45:54.985057 kernel: audit: type=1103 audit(1752108354.983:1549): pid=5454 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:45:54.983000 audit[5454]: CRED_ACQ pid=5454 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:45:54.988276 systemd-logind[1194]: New session 20 of user core. Jul 10 00:45:54.989345 systemd[1]: Started session-20.scope. Jul 10 00:45:54.990649 kernel: audit: type=1006 audit(1752108354.983:1550): pid=5454 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=20 res=1 Jul 10 00:45:54.990711 kernel: audit: type=1300 audit(1752108354.983:1550): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd58c83cb0 a2=3 a3=0 items=0 ppid=1 pid=5454 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:54.983000 audit[5454]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd58c83cb0 a2=3 a3=0 items=0 ppid=1 pid=5454 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:54.994391 kernel: audit: type=1327 audit(1752108354.983:1550): proctitle=737368643A20636F7265205B707269765D Jul 10 00:45:54.983000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 10 00:45:54.995679 kernel: audit: type=1105 audit(1752108354.992:1551): pid=5454 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:45:54.992000 audit[5454]: USER_START pid=5454 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:45:54.994000 audit[5456]: CRED_ACQ pid=5456 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:45:55.003032 kernel: audit: type=1103 audit(1752108354.994:1552): pid=5456 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:45:55.106276 sshd[5454]: pam_unix(sshd:session): session closed for user core Jul 10 00:45:55.106000 audit[5454]: USER_END pid=5454 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:45:55.109495 systemd[1]: sshd@19-10.0.0.116:22-10.0.0.1:52168.service: Deactivated successfully. Jul 10 00:45:55.110216 systemd[1]: session-20.scope: Deactivated successfully. Jul 10 00:45:55.110812 systemd-logind[1194]: Session 20 logged out. Waiting for processes to exit. Jul 10 00:45:55.111833 systemd[1]: Started sshd@20-10.0.0.116:22-10.0.0.1:52176.service. Jul 10 00:45:55.106000 audit[5454]: CRED_DISP pid=5454 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:45:55.113055 systemd-logind[1194]: Removed session 20. Jul 10 00:45:55.116586 kernel: audit: type=1106 audit(1752108355.106:1553): pid=5454 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:45:55.116652 kernel: audit: type=1104 audit(1752108355.106:1554): pid=5454 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:45:55.108000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.0.0.116:22-10.0.0.1:52168 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:55.111000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.0.0.116:22-10.0.0.1:52176 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:55.143000 audit[5468]: USER_ACCT pid=5468 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:45:55.144461 sshd[5468]: Accepted publickey for core from 10.0.0.1 port 52176 ssh2: RSA SHA256:suUhWV759MqU0C+Dl6JG8TPW8PqnqlsB4qushdi9Ejw Jul 10 00:45:55.144000 audit[5468]: CRED_ACQ pid=5468 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:45:55.144000 audit[5468]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffc5ce5de0 a2=3 a3=0 items=0 ppid=1 pid=5468 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:55.144000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 10 00:45:55.145499 sshd[5468]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 00:45:55.149392 systemd-logind[1194]: New session 21 of user core. Jul 10 00:45:55.150355 systemd[1]: Started session-21.scope. Jul 10 00:45:55.153000 audit[5468]: USER_START pid=5468 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:45:55.154000 audit[5470]: CRED_ACQ pid=5470 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:45:55.779803 sshd[5468]: pam_unix(sshd:session): session closed for user core Jul 10 00:45:55.780000 audit[5468]: USER_END pid=5468 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:45:55.780000 audit[5468]: CRED_DISP pid=5468 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:45:55.783241 systemd[1]: sshd@20-10.0.0.116:22-10.0.0.1:52176.service: Deactivated successfully. Jul 10 00:45:55.782000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.0.0.116:22-10.0.0.1:52176 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:55.783940 systemd[1]: session-21.scope: Deactivated successfully. Jul 10 00:45:55.784604 systemd-logind[1194]: Session 21 logged out. Waiting for processes to exit. Jul 10 00:45:55.785962 systemd[1]: Started sshd@21-10.0.0.116:22-10.0.0.1:52184.service. Jul 10 00:45:55.785000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.0.0.116:22-10.0.0.1:52184 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:55.787062 systemd-logind[1194]: Removed session 21. Jul 10 00:45:55.818000 audit[5479]: USER_ACCT pid=5479 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:45:55.819313 sshd[5479]: Accepted publickey for core from 10.0.0.1 port 52184 ssh2: RSA SHA256:suUhWV759MqU0C+Dl6JG8TPW8PqnqlsB4qushdi9Ejw Jul 10 00:45:55.819000 audit[5479]: CRED_ACQ pid=5479 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:45:55.819000 audit[5479]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc2349ef90 a2=3 a3=0 items=0 ppid=1 pid=5479 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:55.819000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 10 00:45:55.820442 sshd[5479]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 00:45:55.824094 systemd-logind[1194]: New session 22 of user core. Jul 10 00:45:55.825181 systemd[1]: Started session-22.scope. Jul 10 00:45:55.828000 audit[5479]: USER_START pid=5479 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:45:55.829000 audit[5481]: CRED_ACQ pid=5481 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:45:56.567000 audit[5495]: NETFILTER_CFG table=filter:132 family=2 entries=22 op=nft_register_rule pid=5495 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:45:56.567000 audit[5495]: SYSCALL arch=c000003e syscall=46 success=yes exit=12688 a0=3 a1=7ffec024c680 a2=0 a3=7ffec024c66c items=0 ppid=2141 pid=5495 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:56.567000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:45:56.579000 audit[5495]: NETFILTER_CFG table=nat:133 family=2 entries=24 op=nft_register_rule pid=5495 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:45:56.579000 audit[5495]: SYSCALL arch=c000003e syscall=46 success=yes exit=7308 a0=3 a1=7ffec024c680 a2=0 a3=0 items=0 ppid=2141 pid=5495 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:56.579000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:45:56.592000 audit[5497]: NETFILTER_CFG table=filter:134 family=2 entries=34 op=nft_register_rule pid=5497 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:45:56.592000 audit[5497]: SYSCALL arch=c000003e syscall=46 success=yes exit=12688 a0=3 a1=7ffc1e501f40 a2=0 a3=7ffc1e501f2c items=0 ppid=2141 pid=5497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:56.592000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:45:56.600000 audit[5497]: NETFILTER_CFG table=nat:135 family=2 entries=24 op=nft_register_rule pid=5497 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:45:56.600000 audit[5497]: SYSCALL arch=c000003e syscall=46 success=yes exit=7308 a0=3 a1=7ffc1e501f40 a2=0 a3=0 items=0 ppid=2141 pid=5497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:56.600000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:45:56.664619 sshd[5479]: pam_unix(sshd:session): session closed for user core Jul 10 00:45:56.664000 audit[5479]: USER_END pid=5479 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:45:56.664000 audit[5479]: CRED_DISP pid=5479 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:45:56.668065 systemd[1]: sshd@21-10.0.0.116:22-10.0.0.1:52184.service: Deactivated successfully. Jul 10 00:45:56.667000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.0.0.116:22-10.0.0.1:52184 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:56.668913 systemd[1]: session-22.scope: Deactivated successfully. Jul 10 00:45:56.670015 systemd-logind[1194]: Session 22 logged out. Waiting for processes to exit. Jul 10 00:45:56.671548 systemd[1]: Started sshd@22-10.0.0.116:22-10.0.0.1:52192.service. Jul 10 00:45:56.670000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.0.0.116:22-10.0.0.1:52192 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:56.675095 systemd-logind[1194]: Removed session 22. Jul 10 00:45:56.703000 audit[5500]: USER_ACCT pid=5500 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:45:56.704677 sshd[5500]: Accepted publickey for core from 10.0.0.1 port 52192 ssh2: RSA SHA256:suUhWV759MqU0C+Dl6JG8TPW8PqnqlsB4qushdi9Ejw Jul 10 00:45:56.704000 audit[5500]: CRED_ACQ pid=5500 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:45:56.704000 audit[5500]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe6c36a9d0 a2=3 a3=0 items=0 ppid=1 pid=5500 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:56.704000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 10 00:45:56.706246 sshd[5500]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 00:45:56.712334 systemd[1]: Started session-23.scope. Jul 10 00:45:56.712741 systemd-logind[1194]: New session 23 of user core. Jul 10 00:45:56.716000 audit[5500]: USER_START pid=5500 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:45:56.718000 audit[5502]: CRED_ACQ pid=5502 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:45:57.031705 sshd[5500]: pam_unix(sshd:session): session closed for user core Jul 10 00:45:57.032000 audit[5500]: USER_END pid=5500 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:45:57.032000 audit[5500]: CRED_DISP pid=5500 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:45:57.035000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.0.0.116:22-10.0.0.1:52192 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:57.035999 systemd[1]: sshd@22-10.0.0.116:22-10.0.0.1:52192.service: Deactivated successfully. Jul 10 00:45:57.036764 systemd[1]: session-23.scope: Deactivated successfully. Jul 10 00:45:57.039113 systemd[1]: Started sshd@23-10.0.0.116:22-10.0.0.1:52204.service. Jul 10 00:45:57.038000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.0.0.116:22-10.0.0.1:52204 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:57.040168 systemd-logind[1194]: Session 23 logged out. Waiting for processes to exit. Jul 10 00:45:57.041615 systemd-logind[1194]: Removed session 23. Jul 10 00:45:57.074000 audit[5512]: USER_ACCT pid=5512 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:45:57.075404 sshd[5512]: Accepted publickey for core from 10.0.0.1 port 52204 ssh2: RSA SHA256:suUhWV759MqU0C+Dl6JG8TPW8PqnqlsB4qushdi9Ejw Jul 10 00:45:57.075000 audit[5512]: CRED_ACQ pid=5512 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:45:57.075000 audit[5512]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd32019170 a2=3 a3=0 items=0 ppid=1 pid=5512 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:57.075000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 10 00:45:57.077005 sshd[5512]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 00:45:57.081389 systemd-logind[1194]: New session 24 of user core. Jul 10 00:45:57.082613 systemd[1]: Started session-24.scope. Jul 10 00:45:57.087000 audit[5512]: USER_START pid=5512 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:45:57.088000 audit[5514]: CRED_ACQ pid=5514 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:45:57.265265 sshd[5512]: pam_unix(sshd:session): session closed for user core Jul 10 00:45:57.265000 audit[5512]: USER_END pid=5512 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:45:57.265000 audit[5512]: CRED_DISP pid=5512 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:45:57.268194 systemd[1]: sshd@23-10.0.0.116:22-10.0.0.1:52204.service: Deactivated successfully. Jul 10 00:45:57.267000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.0.0.116:22-10.0.0.1:52204 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:45:57.269117 systemd[1]: session-24.scope: Deactivated successfully. Jul 10 00:45:57.269910 systemd-logind[1194]: Session 24 logged out. Waiting for processes to exit. Jul 10 00:45:57.271955 systemd-logind[1194]: Removed session 24. Jul 10 00:45:57.618000 audit[5546]: NETFILTER_CFG table=filter:136 family=2 entries=33 op=nft_register_rule pid=5546 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:45:57.618000 audit[5546]: SYSCALL arch=c000003e syscall=46 success=yes exit=11944 a0=3 a1=7fffe71eaa00 a2=0 a3=7fffe71ea9ec items=0 ppid=2141 pid=5546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:57.618000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:45:57.625000 audit[5546]: NETFILTER_CFG table=nat:137 family=2 entries=31 op=nft_register_chain pid=5546 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:45:57.625000 audit[5546]: SYSCALL arch=c000003e syscall=46 success=yes exit=10884 a0=3 a1=7fffe71eaa00 a2=0 a3=7fffe71ea9ec items=0 ppid=2141 pid=5546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:45:57.625000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:46:02.271281 systemd[1]: Started sshd@24-10.0.0.116:22-10.0.0.1:56788.service. Jul 10 00:46:02.270000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-10.0.0.116:22-10.0.0.1:56788 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:02.272779 kernel: kauditd_printk_skb: 63 callbacks suppressed Jul 10 00:46:02.272836 kernel: audit: type=1130 audit(1752108362.270:1598): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-10.0.0.116:22-10.0.0.1:56788 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:02.309000 audit[5550]: USER_ACCT pid=5550 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:46:02.311191 sshd[5550]: Accepted publickey for core from 10.0.0.1 port 56788 ssh2: RSA SHA256:suUhWV759MqU0C+Dl6JG8TPW8PqnqlsB4qushdi9Ejw Jul 10 00:46:02.312743 sshd[5550]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 00:46:02.311000 audit[5550]: CRED_ACQ pid=5550 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:46:02.321886 kernel: audit: type=1101 audit(1752108362.309:1599): pid=5550 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:46:02.321963 kernel: audit: type=1103 audit(1752108362.311:1600): pid=5550 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:46:02.322003 kernel: audit: type=1006 audit(1752108362.311:1601): pid=5550 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=25 res=1 Jul 10 00:46:02.322498 kernel: audit: type=1300 audit(1752108362.311:1601): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd1dbc8fc0 a2=3 a3=0 items=0 ppid=1 pid=5550 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:02.311000 audit[5550]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd1dbc8fc0 a2=3 a3=0 items=0 ppid=1 pid=5550 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:02.318564 systemd-logind[1194]: New session 25 of user core. Jul 10 00:46:02.319327 systemd[1]: Started session-25.scope. Jul 10 00:46:02.326001 kernel: audit: type=1327 audit(1752108362.311:1601): proctitle=737368643A20636F7265205B707269765D Jul 10 00:46:02.311000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 10 00:46:02.323000 audit[5550]: USER_START pid=5550 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:46:02.330432 kernel: audit: type=1105 audit(1752108362.323:1602): pid=5550 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:46:02.325000 audit[5552]: CRED_ACQ pid=5552 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:46:02.334006 kernel: audit: type=1103 audit(1752108362.325:1603): pid=5552 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:46:02.436028 sshd[5550]: pam_unix(sshd:session): session closed for user core Jul 10 00:46:02.436000 audit[5550]: USER_END pid=5550 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:46:02.438497 systemd[1]: sshd@24-10.0.0.116:22-10.0.0.1:56788.service: Deactivated successfully. Jul 10 00:46:02.439287 systemd[1]: session-25.scope: Deactivated successfully. Jul 10 00:46:02.440668 systemd-logind[1194]: Session 25 logged out. Waiting for processes to exit. Jul 10 00:46:02.436000 audit[5550]: CRED_DISP pid=5550 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:46:02.441488 systemd-logind[1194]: Removed session 25. Jul 10 00:46:02.444579 kernel: audit: type=1106 audit(1752108362.436:1604): pid=5550 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:46:02.444661 kernel: audit: type=1104 audit(1752108362.436:1605): pid=5550 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:46:02.437000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-10.0.0.116:22-10.0.0.1:56788 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:03.269000 audit[5563]: NETFILTER_CFG table=filter:138 family=2 entries=20 op=nft_register_rule pid=5563 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:46:03.269000 audit[5563]: SYSCALL arch=c000003e syscall=46 success=yes exit=3016 a0=3 a1=7ffcbb12e140 a2=0 a3=7ffcbb12e12c items=0 ppid=2141 pid=5563 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:03.269000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:46:03.274000 audit[5563]: NETFILTER_CFG table=nat:139 family=2 entries=110 op=nft_register_chain pid=5563 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:46:03.274000 audit[5563]: SYSCALL arch=c000003e syscall=46 success=yes exit=50988 a0=3 a1=7ffcbb12e140 a2=0 a3=7ffcbb12e12c items=0 ppid=2141 pid=5563 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:03.274000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:46:03.683078 kubelet[2000]: E0710 00:46:03.683009 2000 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:46:06.682280 kubelet[2000]: E0710 00:46:06.682202 2000 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:46:07.440424 systemd[1]: Started sshd@25-10.0.0.116:22-10.0.0.1:56794.service. Jul 10 00:46:07.439000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-10.0.0.116:22-10.0.0.1:56794 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:07.441578 kernel: kauditd_printk_skb: 7 callbacks suppressed Jul 10 00:46:07.441654 kernel: audit: type=1130 audit(1752108367.439:1609): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-10.0.0.116:22-10.0.0.1:56794 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:07.478000 audit[5586]: USER_ACCT pid=5586 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:46:07.479827 sshd[5586]: Accepted publickey for core from 10.0.0.1 port 56794 ssh2: RSA SHA256:suUhWV759MqU0C+Dl6JG8TPW8PqnqlsB4qushdi9Ejw Jul 10 00:46:07.481825 sshd[5586]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 00:46:07.480000 audit[5586]: CRED_ACQ pid=5586 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:46:07.485788 systemd-logind[1194]: New session 26 of user core. Jul 10 00:46:07.486751 systemd[1]: Started session-26.scope. Jul 10 00:46:07.487671 kernel: audit: type=1101 audit(1752108367.478:1610): pid=5586 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:46:07.487752 kernel: audit: type=1103 audit(1752108367.480:1611): pid=5586 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:46:07.487781 kernel: audit: type=1006 audit(1752108367.480:1612): pid=5586 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=26 res=1 Jul 10 00:46:07.480000 audit[5586]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffda64eb8e0 a2=3 a3=0 items=0 ppid=1 pid=5586 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:07.494393 kernel: audit: type=1300 audit(1752108367.480:1612): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffda64eb8e0 a2=3 a3=0 items=0 ppid=1 pid=5586 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:07.494455 kernel: audit: type=1327 audit(1752108367.480:1612): proctitle=737368643A20636F7265205B707269765D Jul 10 00:46:07.480000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 10 00:46:07.490000 audit[5586]: USER_START pid=5586 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:46:07.499791 kernel: audit: type=1105 audit(1752108367.490:1613): pid=5586 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:46:07.499837 kernel: audit: type=1103 audit(1752108367.492:1614): pid=5588 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:46:07.492000 audit[5588]: CRED_ACQ pid=5588 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:46:07.615690 sshd[5586]: pam_unix(sshd:session): session closed for user core Jul 10 00:46:07.615000 audit[5586]: USER_END pid=5586 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:46:07.618427 systemd[1]: sshd@25-10.0.0.116:22-10.0.0.1:56794.service: Deactivated successfully. Jul 10 00:46:07.619329 systemd[1]: session-26.scope: Deactivated successfully. Jul 10 00:46:07.620511 systemd-logind[1194]: Session 26 logged out. Waiting for processes to exit. Jul 10 00:46:07.621295 systemd-logind[1194]: Removed session 26. Jul 10 00:46:07.616000 audit[5586]: CRED_DISP pid=5586 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:46:07.625151 kernel: audit: type=1106 audit(1752108367.615:1615): pid=5586 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:46:07.625209 kernel: audit: type=1104 audit(1752108367.616:1616): pid=5586 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:46:07.617000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-10.0.0.116:22-10.0.0.1:56794 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:12.619652 systemd[1]: Started sshd@26-10.0.0.116:22-10.0.0.1:51532.service. Jul 10 00:46:12.618000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-10.0.0.116:22-10.0.0.1:51532 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:12.623965 kernel: kauditd_printk_skb: 1 callbacks suppressed Jul 10 00:46:12.625711 kernel: audit: type=1130 audit(1752108372.618:1618): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-10.0.0.116:22-10.0.0.1:51532 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:12.648000 audit[5600]: USER_ACCT pid=5600 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:46:12.649309 sshd[5600]: Accepted publickey for core from 10.0.0.1 port 51532 ssh2: RSA SHA256:suUhWV759MqU0C+Dl6JG8TPW8PqnqlsB4qushdi9Ejw Jul 10 00:46:12.650289 sshd[5600]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 00:46:12.649000 audit[5600]: CRED_ACQ pid=5600 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:46:12.654007 systemd-logind[1194]: New session 27 of user core. Jul 10 00:46:12.655119 systemd[1]: Started session-27.scope. Jul 10 00:46:12.675944 kernel: audit: type=1101 audit(1752108372.648:1619): pid=5600 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:46:12.676129 kernel: audit: type=1103 audit(1752108372.649:1620): pid=5600 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:46:12.676171 kernel: audit: type=1006 audit(1752108372.649:1621): pid=5600 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=27 res=1 Jul 10 00:46:12.649000 audit[5600]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe16d9cb40 a2=3 a3=0 items=0 ppid=1 pid=5600 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=27 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:12.682034 kernel: audit: type=1300 audit(1752108372.649:1621): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe16d9cb40 a2=3 a3=0 items=0 ppid=1 pid=5600 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=27 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:12.682078 kernel: audit: type=1327 audit(1752108372.649:1621): proctitle=737368643A20636F7265205B707269765D Jul 10 00:46:12.649000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 10 00:46:12.658000 audit[5600]: USER_START pid=5600 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:46:12.687278 kernel: audit: type=1105 audit(1752108372.658:1622): pid=5600 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:46:12.687326 kernel: audit: type=1103 audit(1752108372.659:1623): pid=5602 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:46:12.659000 audit[5602]: CRED_ACQ pid=5602 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:46:12.782487 sshd[5600]: pam_unix(sshd:session): session closed for user core Jul 10 00:46:12.782000 audit[5600]: USER_END pid=5600 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:46:12.784783 systemd[1]: sshd@26-10.0.0.116:22-10.0.0.1:51532.service: Deactivated successfully. Jul 10 00:46:12.785683 systemd[1]: session-27.scope: Deactivated successfully. Jul 10 00:46:12.782000 audit[5600]: CRED_DISP pid=5600 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:46:12.789330 systemd-logind[1194]: Session 27 logged out. Waiting for processes to exit. Jul 10 00:46:12.790006 systemd-logind[1194]: Removed session 27. Jul 10 00:46:12.791116 kernel: audit: type=1106 audit(1752108372.782:1624): pid=5600 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:46:12.791187 kernel: audit: type=1104 audit(1752108372.782:1625): pid=5600 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:46:12.784000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-10.0.0.116:22-10.0.0.1:51532 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'